[Webkit-unassigned] [Bug 26342] Absolutely positioned HTML element within foreignObject of absolutely positioned SVG crashes Safari

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=26342


Charles Wei <charles.wei at torchmobile.com.cn> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #39844|                            |review?
               Flag|                            |
  Attachment #39760|0                           |1
        is obsolete|                            |




--- Comment #18 from Charles Wei <charles.wei at torchmobile.com.cn>  2009-09-21 02:42:32 PDT ---
Created an attachment (id=39844)
 --> (https://bugs.webkit.org/attachment.cgi?id=39844)
re-submission

re-submission of the patch .

1.  This patch focuses on the crash of the webkit,  simpifying the original
"while" statement raised by Eric is not in the scope of this bug. I would
rather leave that alone as is,  you can have a separate bug to track that
change .

2.  o->node()->hasTagName(SVGNames::foreignObjectTag) replaced by
RenderObject::isSVGForeignObject(), as suggested by Eric

3.  Test case as a dumpAsText() , following Eric's suggestion .

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.