[Webkit-unassigned] [Bug 57902] Crash in RenderMathMLSubSup::stretchToHeight()

Fri May 6 16:23:14 PDT 2011

https://bugs.webkit.org/show_bug.cgi?id=57902

Alex Milowski <alex at milowski.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |DUPLICATE
                 CC|                            |alex at milowski.com

--- Comment #2 from Alex Milowski <alex at milowski.com>  2011-05-06 16:23:14 PST ---
This is the same issue as bug 57897 where the base or sub/superscript has been removed via javascript and violates the assumption that the RenderMathMLBlock instance added by the renderer always has a child.  That's a bad assumption.

*** This bug has been marked as a duplicate of bug 57897 ***

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.