<rdar://problem/9768483> REGRESSION: Crash in RenderBlock::removeFloatingObjectsBelow()

[WebKit-https.git] / Source / WebCore / ChangeLog

diff --git a/Source/WebCore/ChangeLog b/Source/WebCore/ChangeLog
index 6971c95a5d14f25a4b9a58c7a2cce5b66e2d0653..1ae95aef050604c27b87667ad90a885c26da6c1c 100644 (file)
--- a/Source/WebCore/ChangeLog
+++ b/Source/WebCore/ChangeLog
@@ -1,3 +1,17 @@
+2011-09-21  Dan Bernstein  <mitz@apple.com>
+
+        <rdar://problem/9768483> REGRESSION: Crash in RenderBlock::removeFloatingObjectsBelow()
+        https://bugs.webkit.org/show_bug.cgi?id=68550
+
+        Reviewed by Darin Adler.
+
+        Test: fast/multicol/null-lastFloat-in-removeFloatingObjectsBelow.html
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::removeFloatingObjectsBelow): Break out of the while() loop when the
+        floating object set is empty, which can happen if there were no floats on previous lines
+        (in which case, lastFloat is 0).
+

 2011-09-21  ChangSeok Oh  <shivamidow@gmail.com>
 
         [GTK] Fix build break when enabling webgl on r95593
 2011-09-21  ChangSeok Oh  <shivamidow@gmail.com>
 
         [GTK] Fix build break when enabling webgl on r95593