[Webkit-unassigned] [Bug 109837] New: Crash in iOS Safari and Chrome with overflow styles set on TD element

Thu Feb 14 08:26:42 PST 2013

https://bugs.webkit.org/show_bug.cgi?id=109837

           Summary: Crash in iOS Safari and Chrome with overflow styles
                    set on TD element
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Other
        OS/Version: Other
            Status: UNCONFIRMED
          Severity: Critical
          Priority: P1
         Component: CSS
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: gary.olliffe at mercer.com

Created an attachment (id=188361)
 --> (https://bugs.webkit.org/attachment.cgi?id=188361&action=review)
HTML file that demonstrates the crash

The following HTML crashes both Safari and Chrome (AppleWebKit/536.26 tested) immeidately on loading.  The issue occurs when a TD element with an overflow-x CSS style applied is nested within an element that has the "-webkit-overflow-scrolling: touch;" style applied.

The issue seems to only happen for TD elements, and only when the overflow-x style is set to something other than "visible" (the default). 

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html lang="en-us">
<head>
    <title>Overflow webkit bug</title>
</head>
<body>
    <style>
        .parent { -webkit-overflow-scrolling: touch; }
        .child { overflow-x:hidden; }
    </style>
    <div class="parent">
       <table>
                <tr >
                    <td class="child">Hi there!</td>
                </tr>
        </table> 
    </div>
</body>
</html>

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.