[Webkit-unassigned] [Bug 49579] New: REGRESSION (r72040): Error image with alt text can cause style to be frozen in a subtree

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=49579

           Summary: REGRESSION (r72040): Error image with alt text can
                    cause style to be frozen in a subtree
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Keywords: HasReduction, NeedsRadar, Regression
          Severity: Critical
          Priority: P1
         Component: Layout and Rendering
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: mitz at webkit.org


Created an attachment (id=73964)
 --> (https://bugs.webkit.org/attachment.cgi?id=73964&action=review)
Test case

See attached test case. The problem is that RenderImage::imageChanged() is called during attach() when an ancestor is attaching during recalcStyle(), and imageChanged() calls setNeedsStyleRecalc(). After recalcStyle() calls attach, it clears the childNeedsStyleRecalc state for itself, but not for all of its descendants leading down to the image. Now there is an island out of which setNeedsStyleRecalc() cannot propagate to the root.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.