[Webkit-unassigned] [Bug 82566] RenderTextControlSingleLine::scrollWidth/Height/Left/Top should not call back to DOM tree

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=82566





--- Comment #14 from Tien-Ren Chen <trchen at chromium.org>  2012-05-09 17:15:21 PST ---
(In reply to comment #12)
> Can we include a test case for the crash?

I can try but I don't know exactly know how to trigger this.

Basically we want to find a situation that calling layout once won't stabilize the render tree, leaving a single-line textbox that is dirty, and doing a layout on that textbox will cause its ancestor to be removed from the tree.

The original crash is from a complex webpage has lots of javascript and animation (and the crash is hardly reproducible). Not easy to isolate a minimal test case.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.