[CSS Parser] Fix crash in -webkit-shape-outside parsing
authorhyatt@apple.com <hyatt@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 30 Nov 2016 18:42:14 +0000 (18:42 +0000)
committerhyatt@apple.com <hyatt@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 30 Nov 2016 18:42:14 +0000 (18:42 +0000)
commit49444c4e3ade03acf7160a6ea784022481487903
tree7b79790159b17ec9c1e55cc2cc053223b6f92e12
parentd0948443c24162ffe941469bef8da2a144b34ab1
[CSS Parser] Fix crash in -webkit-shape-outside parsing
https://bugs.webkit.org/show_bug.cgi?id=165202

Reviewed by Dean Jackson.

* css/CSSBasicShapes.cpp:
(WebCore::buildSerializablePositionOffset):
The old parser never passed in a singleton value ID for top/right/bottom/left.
The new parser does, and it exposed a bug in the serialization code for
shapes that didn't properly create the offset primitive value as a percentage
in those cases.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@209137 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Source/WebCore/ChangeLog
Source/WebCore/css/CSSBasicShapes.cpp