[Webkit-unassigned] [Bug 13557] Crash when dragging selection over absolutely positioned generated content on block element

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=13557





------- Comment #7 from macdome at opendarwin.org  2007-05-04 00:51 PDT -------
This assert demonstrates the real problem here:

Index: rendering/RenderLayer.cpp
===================================================================
--- rendering/RenderLayer.cpp   (revision 21246)
+++ rendering/RenderLayer.cpp   (working copy)
@@ -1557,6 +1557,7 @@
     // Now determine if the result is inside an anchor; make sure an image map
wins if
     // it already set URLElement and only use the innermost.
     Node* node = result.innerNode();
+    ASSERT(!!insideLayer == !!node);
     while (node) {
         // for imagemaps, URLElement is the associated area element not the
image itself
         if (node->isLink() && !result.URLElement() &&
!node->hasTagName(imgTag))

I'm just not sure how to fix it yet.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.