Stay inside the continuation while searching for a candidate ancestor for insertion.
authorzalan@apple.com <zalan@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 16 Mar 2017 18:43:26 +0000 (18:43 +0000)
committerzalan@apple.com <zalan@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 16 Mar 2017 18:43:26 +0000 (18:43 +0000)
commit537fbb8b9155fc1f1523ad918878c0f7d148ffab
tree69dc4405951f70512d27d2f3bfbc7588c7f39fd7
parent42b1675f1add395ffface3a87d298479e1652420
Stay inside the continuation while searching for a candidate ancestor for insertion.
https://bugs.webkit.org/show_bug.cgi?id=169768
<rdar://problem/30959936>

Reviewed by David Hyatt.

Source/WebCore:

Test: fast/inline/continuation-crash-with-anon-ancestors.html

* rendering/RenderInline.cpp:
(WebCore::RenderInline::addChildToContinuation):

LayoutTests:

* fast/inline/continuation-crash-with-anon-ancestors-expected.txt: Added.
* fast/inline/continuation-crash-with-anon-ancestors.html: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@214059 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/fast/inline/continuation-crash-with-anon-ancestors-expected.txt [new file with mode: 0644]
LayoutTests/fast/inline/continuation-crash-with-anon-ancestors.html [new file with mode: 0644]
Source/WebCore/ChangeLog
Source/WebCore/rendering/RenderInline.cpp