Patch coming soon.
Created attachment 322759 [details]
Comment on attachment 322759 [details]
View in context: https://bugs.webkit.org/attachment.cgi?id=322759&action=review
> + No new tests because the issue is difficult to reproduce. It was identified from
> + an ASan build crash report that shows that there was a stack overflow, and the
> + crash stack has RenderBlockFlow::appendRunsForObject() recursing on itself
> + thereby filling up the stack. Though it's hard to come up with a test, the issue
> + is obvious and easy to fix.
It is reproducible? If so I'd rather fix the actual problem than adding a workaround. appendRunsForObject is meant to stabilize so while having this stack limit fixes the stack overflow issue, it does not address the root cause.