[Webkit-unassigned] [Bug 63365] New: ASSERTs in RenderInline::layout()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=63365

           Summary: ASSERTs in RenderInline::layout()
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: SVG
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: timothy_horton at apple.com
                CC: zimmermann at kde.org


Steps to repro:

1. Open the attached SVG in a debug build of a WebKit browser.

Expected result: Nothing is drawn.
Actual result: Crash due to an assertion.

<rdar://problem/7403871>

Diagnosis:

There are a variety of text elements which are laid out by their (expected) parents. If their parent is something else instead, they fall back on RenderInline, which isn't too happy about this.

What's the right fix? Technically this is invalid.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.