Bug 30873 - Crash in RenderLayer::hitTest through CSS hover and the display property
Summary: Crash in RenderLayer::hitTest through CSS hover and the display property
Status: RESOLVED WORKSFORME
Alias: None
Product: WebKit
Classification: Unclassified
Component: Layout and Rendering (show other bugs)
Version: 528+ (Nightly build)
Hardware: Mac OS X 10.6
: P1 Normal
Assignee: Nobody
URL: http://www.zirro.se/code/testcases/te...
Keywords:
Depends on:
Blocks:
 
Reported: 2009-10-28 11:15 PDT by Magne Andersson
Modified: 2011-09-20 11:43 PDT (History)
2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Magne Andersson 2009-10-28 11:15:33 PDT 
While I'm not completely sure about what is causing this, I suspect it has to do with the hover psuedo class and the display property. I've extracted a testcase from the page I was building at the time. Hover the "Start", then hover the "Subthingy", and finally, remove your cursor from it and it should cause a crash.
Comment 1 Magne Andersson 2009-10-28 13:02:05 PDT 
Note: This also occurs when you set display: inline; in this case, which is the value that display: initial should be.
Comment 2 Alexey Proskuryakov 2009-10-28 13:55:09 PDT 
Confirmed with shipping Safari/WebKit 4.0.3.
Comment 3 Julien Chaffraix 2011-09-20 11:43:44 PDT 
The test case does not crash anymore.

Furthermore our behavior has changed since the bug was filed: hovering on "Subthingy" is not possible now as it is considered to be hovering out of "Start" and thus hiding "Subthingy".

Closing WORKSFORME as it must have been fixed and the test case cannot be turned into a layout test due to the previous change in behavior.