nephele
/
haikuwebkit
1
0
Fork 0
Code Issues Releases Activity
haikuwebkit/LayoutTests/css3/flexbox/anonymous-block-merge-crash...

2 lines
50 B
Plaintext
Raw Permalink Normal View History

invalid cast in WebCore::toRenderBox / WebCore::RenderBox::firstChildBox https://bugs.webkit.org/show_bug.cgi?id=72668 Reviewed by David Hyatt. Source/WebCore: For new flexible boxes, we were setting childrenInline to true when merging anonymous blocks, which we should never do. Do the same thing we do for the deprecated flexboxes. Test: css3/flexbox/anonymous-block-merge-crash.html * rendering/RenderBlock.cpp: (WebCore::RenderBlock::removeChild): * rendering/RenderObject.h: (WebCore::RenderObject::setChildrenInline): The default value of true was never used. Better to keep it explicit. LayoutTests: * css3/flexbox/anonymous-block-merge-crash-expected.txt: Added. * css3/flexbox/anonymous-block-merge-crash.html: Added. Canonical link: https://commits.webkit.org/89892@main git-svn-id: https://svn.webkit.org/repository/webkit/trunk@101411 268f45cc-cd09-0410-ab3c-d52691b4dbfc
2011-11-29 21:22:10 +00:00
If this page doesn't crash then this test passes.