Assertion failure in RenderTreePosition::computeNextSibling
https://bugs.webkit.org/show_bug.cgi?id=151337
rdar://problem/23250075
Reviewed by Zalan Bujtas.
Source/WebCore:
Test: fast/html/details-mathml-crash.html
* html/ads: Added.
* style/StyleResolveTree.cpp:
(WebCore::Style::resolveChildAtShadowBoundary):
Factor common code for resolving child here from resolveShadowTree.
(WebCore::Style::resolveShadowTree):
We don't need StyleResolverParentPusher because shadow tree uses different style resolver anyway.
(WebCore::Style::resolveSlotAssignees):
This needs to call renderTreePosition.invalidateNextSibling() if there is a renderer already.
Achieve this by calling the new common function resolveChildAtShadowBoundary.
LayoutTests:
Test case by Pranjal Jumde.
* fast/html/details-mathml-crash-expected.txt: Added.
* fast/html/details-mathml-crash.html: Added.
git-svn-id: http://svn.webkit.org/repository/webkit/trunk@192608 268f45cc-cd09-0410-ab3c-d52691b4dbfc
5 files changed
