[Webkit-unassigned] [Bug 163459] ASSERTION FAILED: m_fonts in &WebCore::FontCascade::primaryFont

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=163459

--- Comment #1 from Myles C. Maxfield <mmaxfield at apple.com> ---
StyleBuilderCustom::applyValueFontSize()

This is because <math> elements get their on font-family.

We apply font properties in-order, so font-family comes first, then font-size.

When we apply font-family, if the element's font family matches the parent's font family, we don't create a new StyleInheritedData (because both elements can share). However, because <math> gets its own font family, the families don't match, so a new inherited data is created. This new inherited data's font descriptor hasn't been update()d. Then, we try to apply font-size, which erroneously tries to read from the current element's un-update()d font.

Font-dependent units are supposed to be resolved relative to the parent font size. We do this correctly with simple things like font-size: 2ch. However, once we start using calc(), StyleBuilderCustom::applyValueFontSize() takes a different code path.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20161022/7c77d629/attachment.html>