[CSSRegions]Crash while collecting svg elements in render flow thread.
authormihnea@adobe.com <mihnea@adobe.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Fri, 6 Jan 2012 21:15:14 +0000 (21:15 +0000)
committermihnea@adobe.com <mihnea@adobe.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Fri, 6 Jan 2012 21:15:14 +0000 (21:15 +0000)
commit89394f26102227500e7f714dd86efc4e81aa1412
treef577ca4649d2a319ffe924a5d3d46263547243b0
parentd0c745b91a6a3718aa39befbab6a8cacd8496710
[CSSRegions]Crash while collecting svg elements in render flow thread.
https://bugs.webkit.org/show_bug.cgi?id=73735

Reviewed by David Hyatt.

Source/WebCore:

Tests: fast/regions/svg-doc-fragment-not-collected-expected.html
       fast/regions/svg-doc-fragment-not-collected.html
       fast/regions/svg-element-not-collected-expected.html
       fast/regions/svg-element-not-collected.html
       fast/regions/svg-root-element-collected.html

By allowing only svg root elements to be collected in a render flow thread,
the svg render tree is properly constructed, thus prevented a possible further crash.

* dom/NodeRenderingContext.cpp:
(WebCore::NodeRenderingContext::moveToFlowThreadIfNeeded):

LayoutTests:

* fast/regions/resources/region-style.css:
* fast/regions/svg-doc-fragment-not-collected-expected.html: Added.
* fast/regions/svg-doc-fragment-not-collected.html: Added.
* fast/regions/svg-element-not-collected-expected.html: Added.
* fast/regions/svg-element-not-collected.html: Added.
* fast/regions/svg-root-element-collected-expected.txt: Added.
* fast/regions/svg-root-element-collected.html: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@104328 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/fast/regions/resources/region-style.css
LayoutTests/fast/regions/svg-doc-fragment-not-collected-expected.html [new file with mode: 0644]
LayoutTests/fast/regions/svg-doc-fragment-not-collected.html [new file with mode: 0644]
LayoutTests/fast/regions/svg-element-not-collected-expected.html [new file with mode: 0644]
LayoutTests/fast/regions/svg-element-not-collected.html [new file with mode: 0644]
LayoutTests/fast/regions/svg-root-element-collected-expected.txt [new file with mode: 0644]
LayoutTests/fast/regions/svg-root-element-collected.html [new file with mode: 0644]
Source/WebCore/ChangeLog
Source/WebCore/dom/NodeRenderingContext.cpp