[webkit-reviews] review requested: [Bug 14714] REGRESSION:
ASSERTION FAILED: i < size() in Vector.h:401 on mangled HTML
: [Attachment 15628] Patch v1
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Sun Jul 22 14:43:51 PDT 2007
David Kilzer (ddkilzer) <ddkilzer at webkit.org> has asked for review:
Bug 14714: REGRESSION: ASSERTION FAILED: i < size() in Vector.h:401 on mangled
HTML
http://bugs.webkit.org/show_bug.cgi?id=14714
Attachment 15628: Patch v1
http://bugs.webkit.org/attachment.cgi?id=15628&action=edit
------- Additional Comments from David Kilzer (ddkilzer) <ddkilzer at webkit.org>
Proposed patch. Don't allow negative values for -webkit-column-width.
NOTE TO REVIEWER: I did not trace through the render code to determine why
negative values failed. I simply added the FNonNeg flag when parsing
-webkit-column-width values to prevent non-negative numbers from being
recognized as valid.
More information about the webkit-reviews
mailing list