[Webkit-unassigned] [Bug 70678] Crash in WebCore::RenderTableSection::addChild due to assert failure

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=70678





--- Comment #3 from Abhishek Arya <inferno at chromium.org>  2011-10-24 11:13:04 PST ---
(In reply to comment #2)
> I'm seeing this bug in Chromium on Linux as well.

We would need a reduction to see what is going on. But as i understand, we should probably need to change that assert into a hard check, and not adding it as a child when previous sibling is not anonymous. We should just continue forward in that function and let it get shoved into a new anonymous block. note that you would need fixes in rendertable, rendertablesection, rendertablerow and rendertablecell. (same code exists there, check out bug 69536.)

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.