commit 2343fab9030c57e9b25322da9b5aace75e9fd9ba
author rniwa@webkit.org <rniwa@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Fri Nov 25 20:21:06 2011 +0000
committer rniwa@webkit.org <rniwa@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Fri Nov 25 20:21:06 2011 +0000
tree b15aa76c216eddcb02d79040147c33c74a6d63bb
parent 65987fb561286917973be4fbecf9146d391ab683

Crash in BidiRunList<Run>::replaceRunWithRuns with an empty bdi element
https://bugs.webkit.org/show_bug.cgi?id=73116

Reviewed by Eric Seidel.

Source/WebCore:

The assertion failure was caused because isolatedResolver is initialized with
null start object due to the isolated run being empty.

Fixed the failure by skipping empty isolated runs.

Test: fast/text/empty-bdi-crash.html

* rendering/RenderBlockLineLayout.cpp:
(WebCore::constructBidiRuns):

LayoutTests:

Added a regression test.

* fast/text/empty-bdi-crash-expected.txt: Added.
* fast/text/empty-bdi-crash.html: Added.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@101180 268f45cc-cd09-0410-ab3c-d52691b4dbfc