[Webkit-unassigned] [Bug 62098] New: Updated layout for msub, msup, msubsup that handles script changes

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=62098

           Summary: Updated layout for msub, msup, msubsup that handles
                    script changes
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: MathML
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: alex at milowski.com


The renderer for msub, msup, and msubsup have incorrect assumptions about child order that has caused a crash in the past (see bug 57897).  The child order may change if a script changes the MathML element.  A modest attempt should be made to ensure the children are placed into the right part of the layout if the base, etc. are replaced.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.