[webkit-reviews] review requested: [Bug 6796] Reproducible CSS Crasher (infinite recursion adding/removing scrollbar) : [Attachment 7062] Single-bit guard around layoutBlock() call

[bugzilla-request-daemon at opendarwin.org]

Beth Dakin <bdakin at apple.com> has asked Dave Hyatt <hyatt at apple.com> for
review:
Bug 6796: Reproducible CSS Crasher (infinite recursion adding/removing
scrollbar)
http://bugzilla.opendarwin.org/show_bug.cgi?id=6796

Attachment 7062: Single-bit guard around layoutBlock() call
http://bugzilla.opendarwin.org/attachment.cgi?id=7062&action=edit

------- Additional Comments from Beth Dakin <bdakin at apple.com>
Like this, Dave? In the specific test case for this bug, this patch prevents
the crash but yields a nasty layout. "foobar" is on one line and a scroll bar
is drawn over most of the "bar" as if "foo" and "bar" were stacked. It is worth
noting, though, that some of the other sites that we know of that crash in this
same way (like the one in the bug that is marked as a dup of this bugzilla) no
longer crash with this patch and lay out just fine.