[webkit-changes] [WebKit/WebKit] 840533: [IFC][out-of-flow bidi] Crash when bidi includes i...

[Alan Baradlay]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 840533a730b15a1a82a683b697f5311d9a1129d5
      https://github.com/WebKit/WebKit/commit/840533a730b15a1a82a683b697f5311d9a1129d5
  Author: Alan Baradlay <zalan at apple.com>
  Date:   2023-09-12 (Tue, 12 Sep 2023)

  Changed paths:
    A LayoutTests/fast/inline/out-of-flow-box-in-bidi-simple-expected.txt
    A LayoutTests/fast/inline/out-of-flow-box-in-bidi-simple.html
    M Source/WebCore/layout/formattingContexts/inline/display/InlineDisplayContentBuilder.cpp

  Log Message:
  -----------
  [IFC][out-of-flow bidi] Crash when bidi includes inline boxes with "unicode-code"
https://bugs.webkit.org/show_bug.cgi?id=261473

Reviewed by Antti Koivisto.

Use the correct index when checking for visual order.

* LayoutTests/fast/inline/out-of-flow-box-in-bidi-simple-expected.txt: Added.
* LayoutTests/fast/inline/out-of-flow-box-in-bidi-simple.html: Added.
* Source/WebCore/layout/formattingContexts/inline/display/InlineDisplayContentBuilder.cpp:
(WebCore::Layout::InlineDisplayContentBuilder::processBidiContent):
(WebCore::Layout::InlineDisplayContentBuilder::setGeometryForBlockLevelOutOfFlowBoxes):

Canonical link: https://commits.webkit.org/267924@main