Bug 24252 – Assert when hit testing a 3d transform that is null

• Status: RESOLVED
• Resolution: FIXED
• Component: CSS

[Dean Jackson]

WebCore::TransformationMatrix::isInvertible() bombs out if you hit test a transform that doesn't exist.

[Dean Jackson]

Created attachment 28108 [details]
fix for crash

[Simon Fraser (smfr)]

Comment on attachment 28108 [details]
fix for crash

> diff --git a/LayoutTests/transforms/no_transform_hit_testing-expected.txt b/LayoutTests/transforms/no_transform_hit_testing-expected.txt
> new file mode 100644
> index 0000000..57ff5af
> --- /dev/null
> +++ b/LayoutTests/transforms/no_transform_hit_testing-expected.txt
> @@ -0,0 +1,5 @@
> +Testing hittest on a layer with null transform
> +
> +https://bugs.webkit.org/show_bug.cgi?id=24252
> +
> +transformed elementdid not crash

Make that "Did not crash, to test PASSED"

> diff --git a/LayoutTests/transforms/no_transform_hit_testing.html b/LayoutTests/transforms/no_transform_hit_testing.html

> +  <script type="text/javascript" charset="utf-8">
> +     if (window.layoutTestController) {
> +       layoutTestController.dumpAsText();
> +       layoutTestController.waitUntilDone();

I don't think this needs to wait if you run the test from onload. Also, I don't think it
needs to be a text test.

> +     function runTest()
> +     {
> +       if (window.layoutTestController) {
> +         eventSender.mouseMoveTo(100, 50);
> +         eventSender.mouseDown();
> +         eventSender.mouseUp();
> +         eventSender.mouseDown();
> +         eventSender.mouseUp();

Just call document.elementFromPoint(...) so it works in Safari too.

> diff --git a/WebCore/ChangeLog b/WebCore/ChangeLog
> index 9c59011..1a22d7a 100644
> --- a/WebCore/ChangeLog
> +++ b/WebCore/ChangeLog
> @@ -1,3 +1,16 @@
> [phone]  Dean Jackson  <[e-mail]>
> +
> +        Reviewed by NOBODY (OOPS!).
> +
> +        Fix asserting when hit testing an element that
> +        has no transform.
> +        https://bugs.webkit.org/show_bug.cgi?id=24252

I think this needs to explain the crash. Something like:

"renderer()->hasTransform() returns true for elements with perspective, but no transform,
 so test for transform when hit testing".

r=me wit those changes.

[Dean Jackson]

New test used elementFromPoint and will work outside of test system

Committed r41309
	M	WebCore/ChangeLog
	M	WebCore/rendering/RenderLayer.cpp
	M	LayoutTests/ChangeLog
	A	LayoutTests/transforms/no_transform_hit_testing.html

next commit adds the file I forgot :(

[Dean Jackson]

Committed r41311
	A	LayoutTests/platform/mac/transforms/no_transform_hit_testing-expected.checksum
	A	LayoutTests/platform/mac/transforms/no_transform_hit_testing-expected.png
	M	LayoutTests/ChangeLog

[Simon Fraser (smfr)]

*** Bug 24277 has been marked as a duplicate of this bug. ***