[Webkit-unassigned] [Bug 13938] REGRESSION: Difficult to repro crash in RenderBlock::layoutBlock using iGoogle

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=13938


mitz at webkit.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mitz at webkit.org




------- Comment #2 from mitz at webkit.org  2007-05-30 13:04 PDT -------
Looks like a regression from
<http://trac.webkit.org/projects/webkit/changeset/20936> which was a fix for
bug 13375. Document::updateLayout() was changed to update the parent frame's
layout. In the case of this bug, the parent frame is already in the middle of
layout, so you get a nasty cycle (which is at least detected by the LayoutState
assertion).


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.