[Webkit-unassigned] [Bug 118269] 100% repro assertion failure with testcase (m_repaintRect == renderer()->clippedOverflowRectForRepaint(renderer()->containerForRepaint()))

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=118269


Tobias Netzel <tobias.netzel at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |tobias.netzel at gmail.com




--- Comment #5 from Tobias Netzel <tobias.netzel at gmail.com>  2013-07-03 13:05:36 PST ---
I can reproduce this in both Safari 5.0.6 and Minibrowser WK1 by doing the following (you'll need a google account for this):

1. go to [http://code.google.com/p/chromium/issues/detail?id=244592]
2. log in
3. scroll down and click in the box to add new comment, so that the text input cursor is blinking in that box
4. scroll up

Here the crash upon scrolling is "enabled" by the fact of having clicked in the box. Clicking inside the box and then clicking outside of it doesn't "disable" it.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.