Crash in WebCore::RenderTableSection::addChild due to assert failure
[WebKit-https.git] / Source / WebCore / ChangeLog
index fa463c3c199eee7ad71f176269351172d37406ac..71be84a91f00d438c977319be7801a4307fc72dc 100644 (file)
@@ -1,3 +1,25 @@
+2011-10-25  Fady Samuel  <fsamuel@chromium.org>
+
+        Crash in WebCore::RenderTableSection::addChild due to assert failure
+        https://bugs.webkit.org/show_bug.cgi?id=70678
+
+        Reviewed by David Hyatt.
+
+        Tests: fast/table/table-anonymous-cell-bug.html
+               fast/table/table-anonymous-row-bug.html
+               fast/table/table-anonymous-section-bug.html
+
+        If the child being added is not a Section/Row/Cell, and the previous sibling is not anonymous, 
+        we need to create a new anonymous Section/Row/Cell respectively, instead of failing an
+        assert.
+
+        * rendering/RenderTable.cpp:
+        (WebCore::RenderTable::addChild):
+        * rendering/RenderTableRow.cpp:
+        (WebCore::RenderTableRow::addChild):
+        * rendering/RenderTableSection.cpp:
+        (WebCore::RenderTableSection::addChild):
+
 2011-10-25  Mark Hahnenberg  <mhahnenberg@apple.com>
 
         Add getOwnPropertySlot to MethodTable
 2011-10-25  Mark Hahnenberg  <mhahnenberg@apple.com>
 
         Add getOwnPropertySlot to MethodTable