[Webkit-unassigned] [Bug 11672] New: REGRESSION (r17068): Repro crash due to painting without layout

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Nov 21 14:41:50 PST 2006


           Summary: REGRESSION (r17068): Repro crash due to painting without
           Product: WebKit
           Version: 420+ (nightly)
          Platform: Macintosh
               URL: http://www.mapa.co.il/
        OS/Version: Mac OS X 10.4
            Status: NEW
          Keywords: NeedsReduction, Regression
          Severity: Normal
          Priority: P1
         Component: Layout and Rendering
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: mitz at webkit.org
                CC: hyatt at apple.com, sam.weinig at gmail.com

The URL crashes WebKit or causes an assertion failure as it tries to paint a
table that is still marked as needing layout. Breaking in gdb reveals that the
entire render tree is marked for layout except for the root RenderView (which
is why the draw message from AppKit doesn't trigger layout; this logic in
-[WebCoreFrameBridge needsLayout] seems to be wrong anyway since there can be a
pending subtree relayout, but I don't think this is the case here).

Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

More information about the webkit-unassigned mailing list