The InlineBox::m_hasVirtualLogicalHeight flag is only initialized by the constructor if built with ENABLE(SVG), and furthermore InlineBox::logicalHeight() only checks it if built with ENABLE(SVG). Since this mechanism is used by TrailingFloatsRootInlineBox, it shouldn't be limited to SVG builds.
Created attachment 109974 [details] Proposed patch
Comment on attachment 109974 [details] Proposed patch Clearing flags on attachment: 109974 Committed r96832: <http://trac.webkit.org/changeset/96832>
All reviewed patches have been landed. Closing bug.