[Webkit-unassigned] [Bug 62098] Update layout for msub, msup, msubsup to handle script changes

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Mar 9 14:37:30 PST 2012


--- Comment #23 from Jacky Jiang <zkjiang008 at gmail.com>  2012-03-09 14:37:30 PST ---
Alex, the anonymous block can make childElement null and cause crash, is there a code path for the anonymous block?

void RenderMathMLSubSup::addChild(RenderObject* child, RenderObject* beforeChild)

    // Note: The RenderMathMLBlock only allows element children to be added.
    Element* childElement = toElement(child->node());

    if (!childElement->previousElementSibling()) {


Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

More information about the webkit-unassigned mailing list