[Webkit-unassigned] [Bug 74846] chrome.dll!WebCore..Render... RecursionSOV

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Dec 20 06:16:24 PST 2011


https://bugs.webkit.org/show_bug.cgi?id=74846





--- Comment #2 from Berend-Jan Wever <skylined at chromium.org>  2011-12-20 06:16:24 PST ---
Another repro:
<style>*{float:left}</style><body onload='
document.execCommand("SelectAll");
document.designMode="on";
document.execCommand("Underline",false);
document.execCommand("bold",false);
document.execCommand("insertorderedlist",false);
document.execCommand("InsertHorizontalRule",false);
document.execCommand("InsertUnorderedList");
document.execCommand("InsertUnorderedList");
document.execCommand("outdent");
document.execCommand("InsertOrderedList");
document.execCommand("insertunorderedlist");
'><!>-

Stack loop:
                  chrome.dll!WebCore::RenderBlock::layoutRunsAndFloats
                  chrome.dll!WebCore::RenderBlock::layoutInlineChildren
                  chrome.dll!WebCore::RenderBlock::layoutBlock
                  chrome.dll!WebCore::RenderBlock::layout
                  chrome.dll!WebCore::RenderBlock::insertFloatingObject
                  chrome.dll!WebCore::RenderBlock::LineBreaker::skipLeadingWhitespace
                  chrome.dll!WebCore::RenderBlock::LineBreaker::nextLineBreak
                  chrome.dll!WebCore::RenderBlock::layoutRunsAndFloatsInRange

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list