[Webkit-unassigned] [Bug 57897] Crash in WebCore::RenderMathMLSubSup::baselinePosition()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=57897


Kulanthaivel Palanichamy <kulanthaivel at codeaurora.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #91738|                            |review?, commit-queue?
               Flag|                            |




--- Comment #2 from Kulanthaivel Palanichamy <kulanthaivel at codeaurora.org>  2011-04-29 14:16:18 PST ---
Created an attachment (id=91738)
 --> (https://bugs.webkit.org/attachment.cgi?id=91738&action=review)
Proposed patch

This patch attempts to fix this crash by making container RenderMathMLBlock objects as anonymous render objects and removing them from render tree when all of their children are removed.

This patch also fixes the following bugs
https://bugs.webkit.org/show_bug.cgi?id=57900
https://bugs.webkit.org/show_bug.cgi?id=57901
https://bugs.webkit.org/show_bug.cgi?id=57902

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.