[Webkit-unassigned] [Bug 21834] New: HTMLElement::isContentEditable() can cause an updateRendering() to happen in the middle of layout

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=21834

           Summary: HTMLElement::isContentEditable() can cause an
                    updateRendering() to happen in the middle of layout
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh
        OS/Version: Mac OS X 10.5
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: simon.fraser at apple.com


This stack shows a case where HTMLElement::isContentEditable() can cause
updateRendering to happen in the middle of layout. That's just wrong.

#7  0x0342bc58 in WebCore::Element::recalcStyle (this=0x1be359a0,
change=WebCore::Node::NoChange) at
/Volumes/InternalData/Development/WebKit/WebKit.git/WebCore/dom/Element.cpp:756
#8  0x0342bc58 in WebCore::Element::recalcStyle (this=0x1be35530,
change=WebCore::Node::NoChange) at
/Volumes/InternalData/Development/WebKit/WebKit.git/WebCore/dom/Element.cpp:756
#9  0x0342bc58 in WebCore::Element::recalcStyle (this=0x1be30460,
change=WebCore::Node::NoChange) at
/Volumes/InternalData/Development/WebKit/WebKit.git/WebCore/dom/Element.cpp:756
#10 0x0342bc58 in WebCore::Element::recalcStyle (this=0x1be2ed50,
change=WebCore::Node::NoChange) at
/Volumes/InternalData/Development/WebKit/WebKit.git/WebCore/dom/Element.cpp:756
#11 0x0342bc58 in WebCore::Element::recalcStyle (this=0x1a13e450,
change=WebCore::Node::NoChange) at
/Volumes/InternalData/Development/WebKit/WebKit.git/WebCore/dom/Element.cpp:756
#12 0x033e4443 in WebCore::Document::recalcStyle (this=0x688a800,
change=WebCore::Node::NoChange) at
/Volumes/InternalData/Development/WebKit/WebKit.git/WebCore/dom/Document.cpp:1226
#13 0x033d779f in WebCore::Document::updateRendering (this=0x688a800) at
/Volumes/InternalData/Development/WebKit/WebKit.git/WebCore/dom/Document.cpp:1249
#14 0x034c28fa in WebCore::HTMLElement::isContentEditable (this=0x1bee14b0) at
/Volumes/InternalData/Development/WebKit/WebKit.git/WebCore/html/HTMLElement.cpp:613
#15 0x036efbf4 in WebCore::RenderBlock::hasLineIfEmpty (this=0x1ce384fc) at
/Volumes/InternalData/Development/WebKit/WebKit.git/WebCore/rendering/RenderBlock.cpp:4204
#16 0x038f4496 in WebCore::RenderBlock::layoutInlineChildren (this=0x1ce384fc,
relayoutChildren=false, repaintTop=@0xbfffe120, repaintBottom=@0xbfffe11c) at
/Volumes/InternalData/Development/WebKit/WebKit.git/WebCore/rendering/bidi.cpp:1139
#17 0x036fdd34 in WebCore::RenderBlock::layoutBlock (this=0x1ce384fc,
relayoutChildren=false) at
/Volumes/InternalData/Development/WebKit/WebKit.git/WebCore/rendering/RenderBlock.cpp:656
#18 0x036eb5e0 in WebCore::RenderBlock::layout (this=0x1ce384fc) at
/Volumes/InternalData/Development/WebKit/WebKit.git/WebCore/rendering/RenderBlock.cpp:565
#19 0x038f4a09 in WebCore::RenderObject::layoutIfNeeded (this=0x1ce384fc) at
RenderObject.h:511
#20 0x036f7891 in WebCore::RenderBlock::layoutPositionedObjects
(this=0x1be3291c, relayoutChildren=false) at
/Volumes/InternalData/Development/WebKit/WebKit.git/WebCore/rendering/RenderBlock.cpp:


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.