[Webkit-unassigned] [Bug 39966] New: Crash in qsort() because compareBorders() is not reliable

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=39966

           Summary: Crash in qsort() because compareBorders() is not
                    reliable
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: yong.li.webkit at gmail.com
                CC: staikos at kde.org


In RenderTableCell.cpp, compareBorders() is used to implement compareBorderStylesForQSort().

But it's not stable. When compareBorderStylesForQSort(a, b) returns 1, compareBorderStylesForQSort(b, a) can return 1 or 0.

We should pass a stable compare function to qsort().

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.