[Webkit-unassigned] [Bug 57221] REGRESSION (r81992): Assertion failure: ASSERT(!m_hasBadParent)

Mon Mar 28 12:00:25 PDT 2011

https://bugs.webkit.org/show_bug.cgi?id=57221

Dave Hyatt <hyatt at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED

--- Comment #4 from Dave Hyatt <hyatt at apple.com>  2011-03-28 12:00:25 PST ---
I know what's causing this.  The trailingPositionedBoxes stuff is doing an out of bounds array access.  Why this code was avoiding the Vector (which would have asserted and caught this) is beyond me.  I am making a patch and converting the code to use a Vector.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.