Reproduction steps: 1. Go to GMail.com 2. Enable "Review Pane" on Gmail Labs 3. Select "Vertical split" from the right upper corner icon with three bars
Created attachment 143973 [details] expected
Created attachment 143974 [details] actual
Did you really mean http://trac.webkit.org/changeset/118466?
(In reply to comment #3) > Did you really mean http://trac.webkit.org/changeset/118466? Sorry, copy & paste error. The regression range is between the two nightly builds.
Maybe http://trac.webkit.org/changeset/118413 or http://trac.webkit.org/changeset/118416 ?
(In reply to comment #5) > Maybe http://trac.webkit.org/changeset/118413 or http://trac.webkit.org/changeset/118416 ? More likely http://trac.webkit.org/changeset/118416 than http://trac.webkit.org/changeset/118413 http://trac.webkit.org/changeset/118413 doesn't seem like it would affect x86, but I could be wrong.
(In reply to comment #6) > (In reply to comment #5) > > Maybe http://trac.webkit.org/changeset/118413 or http://trac.webkit.org/changeset/118416 ? > > More likely http://trac.webkit.org/changeset/118416 than http://trac.webkit.org/changeset/118413 > > http://trac.webkit.org/changeset/118413 doesn't seem like it would affect x86, but I could be wrong. Ah! This isn't a JSC regression. I can see the same regression on Chromium's latest trunk build.
This is a DOM or rendering regression.
Chromium r138925: bad! -> WebKit r118406 Chromium r138884: good! -> WebKit r118384 See http://src.chromium.org/viewvc/chrome/trunk/src/DEPS?view=log
Regression range: http://trac.webkit.org/log/?action=stop_on_copy&mode=stop_on_copy&rev=118406&stop_rev=118394&limit=100&verbose=on Maybe http://trac.webkit.org/changeset/118395/ ?
Confirmed.
Created attachment 143986 [details] reduction
Yahoo mail is also broken by the same revision, bug 87508.
Reverted in http://trac.webkit.org/changeset/118549
*** This bug has been marked as a duplicate of bug 87526 ***