[Webkit-unassigned] [Bug 114467] New: crash when floated element inside content of region with shape applied to it

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=114467

           Summary: crash when floated element inside content of region
                    with shape applied to it
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: gammon at adobe.com
                CC: mihnea at adobe.com, zoltan at webkit.org,
                    betravis at adobe.com


Created an attachment (id=197679)
 --> (https://bugs.webkit.org/attachment.cgi?id=197679&action=review)
example scenario crashes tab in chrome

An element with -webkit-flow-from and -webkit-shape-inside applied to it with a floated element inside the content of the flow crashes the browser.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.