To reproduce: navigate to the URL and scroll down to the “Sweet seats” section, and click one of the horizontal arrow buttons. As the content scrolls in, the image is partially cropped out during the transition, and the missing part only pops in at the end. This was caused by <http://trac.webkit.org/r168217>, the fix for bug 132507.
<rdar://problem/18188533>
Created attachment 243215 [details] Patch
https://trac.webkit.org/r177238
Reopening to attach new patch.
Created attachment 243222 [details] Patch
https://trac.webkit.org/r177244
r177238 introduced memory corruption on a regression test. Will roll out. run-webkit-tests -g transitions/transition-end-event-destroy-iframe.html Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.WebCore 0x000000010760af00 WebCore::AnimationControllerPrivate::endAnimationUpdate() + 16 1 com.apple.WebCore 0x00000001076186b8 WebCore::AnimationPrivateUpdateBlock::~AnimationPrivateUpdateBlock() + 24 2 com.apple.WebCore 0x000000010760d065 WebCore::AnimationPrivateUpdateBlock::~AnimationPrivateUpdateBlock() + 21 3 com.apple.WebCore 0x00000001076098b4 WebCore::AnimationControllerPrivate::animationTimerFired() + 68 4 com.apple.WebCore 0x0000000107616303 std::__1::__function::__func<std::__1::__bind<void (WebCore::AnimationControllerPrivate::*&)(), WebCore::AnimationControllerPrivate*>, std::__1::allocator<std::__1::__bind<void (WebCore::AnimationControllerPrivate::*&)(), WebCore::AnimationControllerPrivate*> >, void ()>::operator()() + 259 5 com.apple.WebCore 0x00000001075dcb4a std::__1::function<void ()>::operator()() const + 26 6 com.apple.WebCore 0x00000001075dcafc WebCore::Timer::fired() + 28
Re-opened since this is blocked by bug 139632
Created attachment 243303 [details] Patch
Re-landed in https://trac.webkit.org/r177302