[Webkit-unassigned] [Bug 208397] New: ASSERT(m_column != unsetColumnIndex) in RenderTable::cellBefore

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=208397

            Bug ID: 208397
           Summary: ASSERT(m_column != unsetColumnIndex) in
                    RenderTable::cellBefore
           Product: WebKit
           Version: WebKit Local Build
          Hardware: Macintosh
                OS: macOS 10.15
            Status: NEW
          Keywords: InRadar
          Severity: Normal
          Priority: P2
         Component: Layout and Rendering
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: dougk at apple.com
                CC: bfulgham at webkit.org, koivisto at iki.fi,
                    rniwa at webkit.org, simon.fraser at apple.com,
                    webkit-bug-importer at group.apple.com, zalan at apple.com

When calling RenderTable::cellBefore as part of inserting a new cell in JavaScript on a table row that is not visible, cell->col() is coming back as unsetColumnIndex, which leads to an assert (and eventually, a crash).

<rdar://problem/59355313>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200228/b52bfe0e/attachment-0001.htm>