Opening http://www.floreysoft.net/#main2product0sharedcontacts1 ASSERTION FAILED: !repaintContainer || repaintContainer == this (/Volumes/Data/Safari/OpenSource/WebCore/rendering/RenderView.cpp:266 virtual void WebCore::RenderView::computeRectForRepaint(WebCore::RenderBoxModelObject*, WebCore::IntRect&, bool))
With r56633.
I can't reproduce this. I don't see any compositing stuff on this page at all.
I can still reproduce with ToT, r56648.
FWIW, this didn't happen for me under Fast Malloc.
Alexey: are you reproducing in a normal debug build?
Oops, comment 4 was meant to say "cannot reproduce under Guard Malloc". I can reproduce with normal debug build.
I can reproduce now.
Created attachment 52087 [details] Testcase
The problem here is that RenderText::clippedOverflowRectForRepaint() is calling containingBlock(), which skips the repaint container.
Created attachment 52313 [details] Patch
Comment on attachment 52313 [details] Patch > + Test for repainting where the repaintContainer is a descendent of the containing block. Google says: Did you mean: descendant > + So in this case, check to see whether repaintContainer is actually a descendent of the Ditto.
http://trac.webkit.org/changeset/56924