[Webkit-unassigned] [Bug 118269] 100% repro assertion failure with testcase (m_repaintRect == renderer()->clippedOverflowRectForRepaint(renderer()->containerForRepaint()))

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Jul 3 13:03:38 PDT 2013


Tobias Netzel <tobias.netzel at gmail.com> changed:

           What    |Removed                     |Added
                 CC|                            |tobias.netzel at gmail.com

--- Comment #5 from Tobias Netzel <tobias.netzel at gmail.com>  2013-07-03 13:05:36 PST ---
I can reproduce this in both Safari 5.0.6 and Minibrowser WK1 by doing the following (you'll need a google account for this):

1. go to [http://code.google.com/p/chromium/issues/detail?id=244592]
2. log in
3. scroll down and click in the box to add new comment, so that the text input cursor is blinking in that box
4. scroll up

Here the crash upon scrolling is "enabled" by the fact of having clicked in the box. Clicking inside the box and then clicking outside of it doesn't "disable" it.

Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

More information about the webkit-unassigned mailing list