This is a regression caused by mishandling of zero width replaced element children in line layout.
Created attachment 257846 [details] Patch
Comment on attachment 257846 [details] Patch r=me
Comment on attachment 257846 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=257846&action=review > Source/WebCore/rendering/line/LineWidth.h:62 > + bool hasCommitted() { return m_committedWidth > 0 || m_hasCommittedReplaced; } const > Source/WebCore/rendering/line/LineWidth.h:100 > + bool m_hasUncommittedReplaced; > + bool m_hasCommittedReplaced; Would be nice to use initializers here bool m_hasUncommittedReplaced { false }; etc. Maybe convert them all.
Landed in r189540.
(In reply to comment #4) > Landed in r189540. !! :D