commit d417eb117f5d955c7ef305721ee96180a24fda3d
author stavila@adobe.com <stavila@adobe.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Wed May 21 15:31:20 2014 +0000
committer stavila@adobe.com <stavila@adobe.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Wed May 21 15:31:20 2014 +0000
tree b16a491b47ff52189ed464b024d964c81472fdb3
parent abc7c229be522017fbab01805c5e2297e28cab17

REGRESSION (r168046): Invalid layout in WebCore::RenderBox::containingBlockLogicalWidthForPositioned
https://bugs.webkit.org/show_bug.cgi?id=132933

Reviewed by Darin Adler.

Source/WebCore:
Invalid layout is performed when calling containingBlockLogicalWidthForPositioned for a RenderTableSection object.

Test: fast/multicol/newmulticol/table-section-crash.html

* rendering/RenderBox.cpp:
(WebCore::RenderBox::containingBlockLogicalWidthForPositioned):

LayoutTests:
Added test for crash caused by invalid layout for RenderTableSection.

* fast/multicol/newmulticol/table-section-crash-expected.txt: Added.
* fast/multicol/newmulticol/table-section-crash.html: Added.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@169160 268f45cc-cd09-0410-ab3c-d52691b4dbfc