RESOLVED FIXED 131346
Fix assertions triggered by CSS calc changes in r166860 
https://bugs.webkit.org/show_bug.cgi?id=131346
Summary Fix assertions triggered by CSS calc changes in r166860
Darin Adler
Reported 2014-04-07 22:29:56 PDT
Fix code paths that use isPercent but don't handle calculated values
Attachments
Patch (27.16 KB, patch)
2014-04-07 22:39 PDT, Darin Adler 		no flags
DetailsFormatted DiffDiff
Patch (29.74 KB, patch)
2014-04-07 22:56 PDT, Darin Adler 		no flags
DetailsFormatted DiffDiff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.
Darin Adler
Comment 1 2014-04-07 22:39:52 PDT
Created attachment 228806 [details] Patch
Darin Adler
Comment 2 2014-04-07 22:56:02 PDT
Created attachment 228807 [details] Patch
Andrei Bucur
Comment 3 2014-04-08 01:20:27 PDT
Comment on attachment 228807 [details] Patch r=me
WebKit Commit Bot
Comment 4 2014-04-08 01:59:13 PDT
Comment on attachment 228807 [details] Patch Clearing flags on attachment: 228807 Committed r166920: <http://trac.webkit.org/changeset/166920>
WebKit Commit Bot
Comment 5 2014-04-08 01:59:19 PDT
All reviewed patches have been landed. Closing bug.
Brent Fulgham
Comment 6 2015-12-08 13:57:22 PST
Part of the fix for CVE-2014-4410.
Note You need to log in before you can comment on or make changes to this bug.