[Webkit-unassigned] [Bug 140581] setting the textContent of an element in a flex-box can trigger improper clipping of redraws

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=140581

--- Comment #2 from zalan <zalan at apple.com> ---
RenderBlockFlow::layoutInlineChildren() returns with the correct repaint rect (repaintLogicalTop, repaintLogicalBottom) as the result of deleting line boxes, but later in RenderBlockFlow::layoutBlock() we intersect this repaint rect with the newly computed size when clipping is present.
// Don't allow this rect to spill out of our overflow box.
repaintRect.intersect(LayoutRect(LayoutPoint(), size()));
So while shrinking the flow, we fail to clean up the bits that's outside of the current rect (unless we delete from the bottom/end of the line as then the repaint issued by the box-to-be-deleted takes care of the "outside" part.)
I wonder if we've got a different codepath responsible to clean up.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150117/b3a394c3/attachment-0002.html>