Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
View
3  src/qt/src/3rdparty/webkit/Source/WebCore/rendering/RenderInline.cpp
@@ -99,7 +99,8 @@ void RenderInline::destroy()
for (InlineFlowBox* box = firstLineBox(); box; box = box->nextLineBox())
box->remove();
}
- }
+ } else if (parent())
+ parent()->dirtyLinesFromChangedChild(this);
}
m_lineBoxes.deleteLineBoxes(renderArena());
View
6 test/webkit-spec.js
@@ -8,4 +8,10 @@ describe("WebKit", function() {
var date = Date.parse("2012-01-01");
expect(date).toEqual(1325376000000);
});
+
+ it("should not crash when failing to dirty lines while removing a inline.", function () {
+ var p = require("webpage").create();
+ p.open('../test/webkit-spec/inline-destroy-dirty-lines-crash.html');
+ waits(50);
+ });
});
View
15 test/webkit-spec/inline-destroy-dirty-lines-crash.html
@@ -0,0 +1,15 @@
+<html>
+<body onload="runTest()">
+Test passes if it does not crash.
+<script>
+ function runTest()
+ {
+ document.body.offsetTop;
+ child = document.getElementById('test');
+ child.parentNode.removeChild(child);
+ }
+</script>
+<br>
+<span id="test"></span>
+</body>
+</html>
Please sign in to comment.
Something went wrong with that request. Please try again.