[Webkit-unassigned] [Bug 13558] REGRESSION: Crash when loading document with absolutely positioned generated content on inline element

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue May 1 15:07:38 PDT 2007


http://bugs.webkit.org/show_bug.cgi?id=13558





------- Comment #5 from hyatt at apple.com  2007-05-01 15:07 PDT -------
Mitz, if you allow block display types (of non-positioned generated content)
inside an inline, you will crash.  The flow splitting code can't deal with
having to split flows across a generated content block.  The mutation of the
style was a stopgap measure until those crashes could be dealt with.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list