[Webkit-unassigned] [Bug 32374] marquee with display:inline causes crash
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Fri Dec 11 17:49:55 PST 2009
https://bugs.webkit.org/show_bug.cgi?id=32374
--- Comment #6 from Shinichiro Hamaji <hamaji at chromium.org> 2009-12-11 17:49:55 PST ---
> renderMarquee() could be const, no?
Fixed, thanks.
> I expect there is lots of code which uses layer()->renderBox(). I wonder how
> much of the rest of it is wrong.
Yeah, I think there would be some other crashes, but I couldn't find other
crashes so far. I'm guessing toRenderBox in RenderLayer::calculate{,Clip}Rects
can cause crashes, but I'm not sure.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list