[Webkit-unassigned] [Bug 57897] Crash in WebCore::RenderMathMLSubSup::baselinePosition()

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri May 6 16:08:33 PDT 2011


https://bugs.webkit.org/show_bug.cgi?id=57897





--- Comment #10 from Alex Milowski <alex at milowski.com>  2011-05-06 16:08:32 PST ---
I would take this fix slightly farther.  The block wrappers from the super/subscript or base handling needs to be removed in the dom child is removed.  The rendering will be wrong if it is manipulated via the DOM API.  The addChild() method needs to be much more intelligent.

I'd rather file a separate bug for that and fix the crash.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list