Created attachment 226971 [details] Test case. An incomplete shape-outside ellipse property value causes a crash: shape-outside: ellipse(50% 50% at)
Created attachment 227060 [details] Patch The BasicShape ellipse and circle functions now report a syntax error if the "at" keyword is not followed by a position.
Comment on attachment 227060 [details] Patch r=me
Comment on attachment 227060 [details] Patch Clearing flags on attachment: 227060 Committed r165835: <http://trac.webkit.org/changeset/165835>
All reviewed patches have been landed. Closing bug.