Bug 19598 - Crash in WebCore::RenderBlock::determineStartPosition
Summary: Crash in WebCore::RenderBlock::determineStartPosition
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Layout and Rendering (show other bugs)
Version: 528+ (Nightly build)
Hardware: Macintosh OS X 10.5
: P1 Normal
Assignee: Nobody
URL:
Keywords: HasReduction
Depends on:
Blocks:
 
Reported: 2008-06-16 23:21 PDT by Tony Arnold
Modified: 2008-06-18 20:02 PDT (History)
1 user (show)

See Also:


Attachments
This is the crash log of the reported bug. (28.34 KB, text/plain)
2008-06-16 23:36 PDT, Tony Arnold
no flags Details
Reduction (will crash) (252 bytes, text/html)
2008-06-17 13:50 PDT, mitz
no flags Details
Patch (10.25 KB, patch)
2008-06-17 17:49 PDT, mitz
darin: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Tony Arnold 2008-06-16 23:21:59 PDT
When trying to use the admin panels of Symphony (http://21degrees.com.au/products/symphony/), the latest builds of WebKit crash. I have attached the crash log.
Comment 1 Tony Arnold 2008-06-16 23:36:39 PDT
Created attachment 21752 [details]
This is the crash log of the reported bug.
Comment 2 mitz 2008-06-17 00:40:28 PDT
ASSERTION FAILED: floatIndex < floats.size()
(WebCore/rendering/bidi.cpp:1169 WebCore::RootInlineBox* WebCore::RenderBlock::determineStartPosition(bool&, WebCore::BidiState&, WTF::Vector<WebCore::RenderBlock::FloatWithRect, 0ul>&, unsigned int&))
Comment 3 mitz 2008-06-17 13:50:02 PDT
Created attachment 21763 [details]
Reduction (will crash)
Comment 4 mitz 2008-06-17 17:49:17 PDT
Created attachment 21803 [details]
Patch
Comment 5 Darin Adler 2008-06-18 19:53:25 PDT
Comment on attachment 21803 [details]
Patch

r=me
Comment 6 mitz 2008-06-18 20:02:44 PDT
Landed in <http://trac.webkit.org/changeset/34654>.