[Webkit-unassigned] [Bug 52449] Crash when logging into gmail.com with frame flattening turned on.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=52449





--- Comment #12 from Yael <yael.aharon at nokia.com>  2011-01-19 05:50:21 PST ---
(In reply to comment #11)
> (From update of attachment 79384 [details])
> View in context: https://bugs.webkit.org/attachment.cgi?id=79384&action=review
> 
> > Source/WebCore/page/FrameView.cpp:2282
> > +    while (needsLayout());
> 
> What? :-)

Looks strange, doesn't it ?
When we do layout with frame flattening, the child frame marks its parent for layout again and again until there are no more changes.

Without this change, if we try to paint when a layout is pending (e.g. during load), we first call updateLayoutAndStyleIfNeededRecursive, but when we exit this function, the parent still has its layout flag set, and we ASSERT in paintContents()

Could you please suggest how to resolve this in a better way?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.