Changeset 121130 in webkit

Timestamp:

Jun 24, 2012, 7:14:26 PM (14 years ago)

Author:

Antti Koivisto

Message:

REGRESSION(r121124): LayoutTests/fast/block/inline-children-root-linebox-crash.html asserts
​https://bugs.webkit.org/show_bug.cgi?id=89844

Reviewed by Dan Bernstein.

We need to check for the flipped writing mode and take the slow path if it is used.

• rendering/RenderGeometryMap.cpp:

(WebCore::RenderGeometryMap::pushMappingsToAncestor):

Location:

trunk/Source/WebCore

Files:

• ChangeLog (modified) (1 diff)
• rendering/RenderGeometryMap.cpp (modified) (1 diff)

trunk/Source/WebCore/ChangeLog

@@ +1 @@
+2012-06-24  Antti Koivisto  <antti@apple.com>
+
+        REGRESSION(r121124): LayoutTests/fast/block/inline-children-root-linebox-crash.html asserts
+        https://bugs.webkit.org/show_bug.cgi?id=89844
+        
+        Reviewed by Dan Bernstein.
+
+        We need to check for the flipped writing mode and take the slow path if it is used.
+
+        * rendering/RenderGeometryMap.cpp:
+        (WebCore::RenderGeometryMap::pushMappingsToAncestor):
+
 2012-06-24  Luke Macpherson  <macpherson@chromium.org>
 

trunk/Source/WebCore/rendering/RenderGeometryMap.cpp

@@ -186 +186 @@
 
     // The simple case can be handled fast in the layer tree.
-    bool canConvertInLayerTree = ancestorLayer && renderer->style()->position() != FixedPosition;
+    bool canConvertInLayerTree = ancestorLayer && renderer->style()->position() != FixedPosition && !renderer->style()->isFlippedBlocksWritingMode();
     for (const RenderLayer* current = layer; current != ancestorLayer && canConvertInLayerTree; current = current->parent())
         canConvertInLayerTree = current->canUseConvertToLayerCoords();