Using a debug WebKit build with frame flattening enabled (say, a iOS WebKit build), perform the following: 1. Visit the web site <http://mybclass.mbusa.com>. 2. Tap the Account button in the toolbar (at the bottom of the page). 3. Tap the Register button. Then the assertion ASSERT(transaction->view == &view()) fails in RenderBlock::removeFromUpdateScrollInfoAfterLayoutTransaction().
Created attachment 241359 [details] [Web Archive] mybclass.mbusa.com For historical preservation, a web archive of <http://mybclass.mbusa.com> as it appeared on 10/11/2014. The web archive was created using Safari for Mac Version 8.0 (10600.1.25) with the default user agent string.
<rdar://problem/18928487>
Created attachment 241360 [details] Stack trace (before ASSERT(...) statement)
Created attachment 241363 [details] Patch with layout test
Comment on attachment 241363 [details] Patch with layout test r=me
Committed r175965: <http://trac.webkit.org/changeset/175965>