Changeset 108933 in webkit

Timestamp:

Feb 26, 2012 10:06:55 AM (12 years ago)

Author:

inferno@chromium.org

Message:

Unreviewed, rolling out r108547.
​http://trac.webkit.org/changeset/108547
​https://bugs.webkit.org/show_bug.cgi?id=79606

Crashes on ClusterFuzz (Requested by inferno-sec on #webkit).

Patch by Sheriff Bot <​webkit.review.bot@gmail.com> on 2012-02-26

Source/WebCore:

• rendering/RenderBlockLineLayout.cpp:

(WebCore::RenderBlock::layoutInlineChildren):

LayoutTests:

• fast/css-generated-content/first-letter-textbox-parent-crash-expected.txt: Removed.
• fast/css-generated-content/first-letter-textbox-parent-crash.html: Removed.

Location:

trunk

Files:

• LayoutTests/ChangeLog (modified) (1 diff)
• LayoutTests/fast/css-generated-content/first-letter-textbox-parent-crash-expected.txt (deleted)
• LayoutTests/fast/css-generated-content/first-letter-textbox-parent-crash.html (deleted)
• Source/WebCore/ChangeLog (modified) (1 diff)
• Source/WebCore/rendering/RenderBlockLineLayout.cpp (modified) (1 diff)

trunk/LayoutTests/ChangeLog

@@ +1 @@
+2012-02-26  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r108547.
+        http://trac.webkit.org/changeset/108547
+        https://bugs.webkit.org/show_bug.cgi?id=79606
+
+        Crashes on ClusterFuzz (Requested by inferno-sec on #webkit).
+
+        * fast/css-generated-content/first-letter-textbox-parent-crash-expected.txt: Removed.
+        * fast/css-generated-content/first-letter-textbox-parent-crash.html: Removed.
+
 2012-02-25  Gyuyoung Kim  <gyuyoung.kim@samsung.com>
 

trunk/Source/WebCore/ChangeLog

@@ +1 @@
+2012-02-26  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r108547.
+        http://trac.webkit.org/changeset/108547
+        https://bugs.webkit.org/show_bug.cgi?id=79606
+
+        Crashes on ClusterFuzz (Requested by inferno-sec on #webkit).
+
+        * rendering/RenderBlockLineLayout.cpp:
+        (WebCore::RenderBlock::layoutInlineChildren):
+
 2012-02-25  Adam Barth  <abarth@webkit.org>
 

trunk/Source/WebCore/rendering/RenderBlockLineLayout.cpp

@@ -1463 +1463 @@
 
     if (isFullLayout)
-        deleteLineBoxTree();
+        lineBoxes()->deleteLineBoxes(renderArena());
 
     // Text truncation only kicks in if your overflow isn't visible and your text-overflow-mode isn't