[Webkit-unassigned] [Bug 14714] REGRESSION: ASSERTION FAILED: i < size() in Vector.h:401 on negative -webkit-column-width

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=14714


darin at apple.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #15628|review?                     |review-
               Flag|                            |




------- Comment #10 from darin at apple.com  2007-07-24 08:46 PDT -------
(From update of attachment 15628)
The CSS specification doesn't say anything about column widths needing to be
positive, and I also think a column width of 0 could be a problem.

I think the fix for this should be in RenderBlock::calcColumnWidth. Setting
review- to keep the ball rolling on this. Hyatt should really take a look.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.