[Webkit-unassigned] [Bug 11672] New: REGRESSION (r17068): Repro crash due to painting without layout

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=11672

           Summary: REGRESSION (r17068): Repro crash due to painting without
                    layout
           Product: WebKit
           Version: 420+ (nightly)
          Platform: Macintosh
               URL: http://www.mapa.co.il/
        OS/Version: Mac OS X 10.4
            Status: NEW
          Keywords: NeedsReduction, Regression
          Severity: Normal
          Priority: P1
         Component: Layout and Rendering
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: mitz at webkit.org
                CC: hyatt at apple.com, sam.weinig at gmail.com


The URL crashes WebKit or causes an assertion failure as it tries to paint a
table that is still marked as needing layout. Breaking in gdb reveals that the
entire render tree is marked for layout except for the root RenderView (which
is why the draw message from AppKit doesn't trigger layout; this logic in
-[WebCoreFrameBridge needsLayout] seems to be wrong anyway since there can be a
pending subtree relayout, but I don't think this is the case here).


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.