[Webkit-unassigned] [Bug 62098] Update layout for msub, msup, msubsup to handle script changes

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=62098





--- Comment #23 from Jacky Jiang <zkjiang008 at gmail.com>  2012-03-09 14:37:30 PST ---
Alex, the anonymous block can make childElement null and cause crash, is there a code path for the anonymous block?
See:

void RenderMathMLSubSup::addChild(RenderObject* child, RenderObject* beforeChild)
{

    // Note: The RenderMathMLBlock only allows element children to be added.
    Element* childElement = toElement(child->node());

    if (!childElement->previousElementSibling()) {

  .....
}

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.