[webkit-changes] [WebKit/WebKit] 19d6fe: showRenderTree should not crash on damaged inline ...

[Alan Baradlay]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 19d6fe9d70b60bd603d540fa69ab6d7ac95db54f
      https://github.com/WebKit/WebKit/commit/19d6fe9d70b60bd603d540fa69ab6d7ac95db54f
  Author: Alan Baradlay <zalan at apple.com>
  Date:   2024-01-13 (Sat, 13 Jan 2024)

  Changed paths:
    M Source/WebCore/layout/integration/LayoutIntegrationBoxTree.cpp
    M Source/WebCore/layout/integration/LayoutIntegrationBoxTree.h
    M Source/WebCore/layout/integration/inline/LayoutIntegrationLineLayout.cpp

  Log Message:
  -----------
  showRenderTree should not crash on damaged inline content
https://bugs.webkit.org/show_bug.cgi?id=267495

Reviewed by Antti Koivisto.

showInlineContent crashes when we try to look up newly inserted and/or removed renderers.

* Source/WebCore/layout/integration/LayoutIntegrationBoxTree.cpp:
(WebCore::LayoutIntegration::showInlineContent):
* Source/WebCore/layout/integration/LayoutIntegrationBoxTree.h:
* Source/WebCore/layout/integration/inline/LayoutIntegrationLineLayout.cpp:
(WebCore::LayoutIntegration::LineLayout::outputLineTree const):
* Source/WebCore/page/LocalFrameViewLayoutContext.cpp:
(WebCore::LocalFrameViewLayoutContext::performLayout):

Canonical link: https://commits.webkit.org/273010@main