[Webkit-unassigned] [Bug 108187] New: Assertion faulire in RenderObject::drawLineForBoxSide

Tue Jan 29 06:04:16 PST 2013

https://bugs.webkit.org/show_bug.cgi?id=108187

           Summary: Assertion faulire in RenderObject::drawLineForBoxSide
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: CSS
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: reni at webkit.org

During HTML fuzzing I've found the following assert:

ASSERTION FAILED: y2 >= y1
/home/reni/repos/webkit2/Source/WebCore/rendering/RenderObject.cpp(1033) : void WebCore::RenderObject::drawLineForBoxSide(WebCore::GraphicsContext*, int, int, int, int, WebCore::BoxSide, WebCore::Color, WebCore::EBorderStyle, int, int, bool)

Test case:

<html>

    <body>
        Test for <a style="outline: solid; outline-offset: -70px;"</a>assertion.  
    </body> 

</html>

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.