When activating a fixed element, the touch-highlighting code will trigger an assert in RenderObject::offsetFromAncestorContainer. ASSERT(nextContainer); This happens because the RenderObject::container skipped the supplied container, due to the element being either fixed or absolute positioned.
Created attachment 157993 [details] Patch
Comment on attachment 157993 [details] Patch Clearing flags on attachment: 157993 Committed r125433: <http://trac.webkit.org/changeset/125433>
All reviewed patches have been landed. Closing bug.