[Webkit-unassigned] [Bug 52983] Eliminate m_tagHistory pointer from CSSSelector

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=52983





--- Comment #8 from Antti Koivisto <koivisto at iki.fi>  2011-01-25 09:23:24 PST ---

> > Source/WebCore/css/CSSSelectorList.cpp:82
> > +    m_selectorArray[arrayIndex - 1].setLastInSelectorList();
> 
> Can the passed-in vector be empty? I see code above for size 1, but what about size 0?

These cover the case:

ASSERT(flattenedSize);
...
ASSERT(flattenedSize == arrayIndex);
Array[arrayIndex - 1].setLastInSelectorList();

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.