commit dc7303ea9d96a98f51adaef2821870034443ebe7
author stavila@adobe.com <stavila@adobe.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Mon May 12 15:23:34 2014 +0000
committer stavila@adobe.com <stavila@adobe.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Mon May 12 15:23:34 2014 +0000
tree e66c3779b1125e2ffe6dc2040cc9a6668a11140e
parent f1f96e01dd7c4cbeb3706d68a892e51098415a3b

Invalid information remaining in lineToRegion map of RenderFlowThread.
https://bugs.webkit.org/show_bug.cgi?id=132690

Reviewed by Antti Koivisto.

Source/WebCore:
Test: fast/multicol/newmulticol/lines-region-map-crash.html

* rendering/RenderFlowThread.cpp:
(WebCore::RenderFlowThread::deleteLines):
* rendering/RenderFlowThread.h:

LayoutTests:
Added test for crash caused by invalid information in the lineToRegion map.

* fast/multicol/newmulticol/lines-region-map-crash-expected.html: Added.
* fast/multicol/newmulticol/lines-region-map-crash.html: Added.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@168621 268f45cc-cd09-0410-ab3c-d52691b4dbfc