[Webkit-unassigned] [Bug 144644] New: [iOS] Scroll snap points trigger reentrant layout

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=144644

            Bug ID: 144644
           Summary: [iOS] Scroll snap points trigger reentrant layout
    Classification: Unclassified
           Product: WebKit
           Version: 528+ (Nightly build)
          Hardware: iOS
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: bfulgham at webkit.org

Created attachment 252417
  --> https://bugs.webkit.org/attachment.cgi?id=252417&action=review
Simple test case that crashes on Debug iOS builds

The attached test case triggers a crash in the WebProcess in debug builds, because it is attempting to trigger layout while in the middle of performing the initial layout.

This bad behavior was caused by the improper use of 'offsetLeft' and 'offsetTop' in the iOS code path for handling scroll snap-points. Instead, it should have just used the same code path as OS X. Apparently, the original author of that code had the misapprehension that the RenderBox::localToContainerPoint method did not work properly under iOS, which is certainly not true (at least today).

The fix here is to delete the bad iOS-only code path and use the standard drawing code.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150505/da97633d/attachment.html>