Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(10)

Unified Diff: Source/core/rendering/RenderObjectChildList.cpp

Issue 111873005: ASSERTION FAILED: !object || object->isTable() (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Created 7 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: Source/core/rendering/RenderObjectChildList.cpp
diff --git a/Source/core/rendering/RenderObjectChildList.cpp b/Source/core/rendering/RenderObjectChildList.cpp
index 80cee464c7d0afa6a8214a6949222d37a71e2a87..f13276f2566e680ea6c2ed003517e5af7d5603d2 100644
--- a/Source/core/rendering/RenderObjectChildList.cpp
+++ b/Source/core/rendering/RenderObjectChildList.cpp
@@ -115,6 +115,7 @@ void RenderObjectChildList::insertChildNode(RenderObject* owner, RenderObject* n
{
ASSERT(!newChild->parent());
ASSERT(!owner->isRenderBlockFlow() || (!newChild->isTableSection() && !newChild->isTableRow() && !newChild->isTableCell()));
+ ASSERT_WITH_SECURITY_IMPLICATION(!owner->isTable() || (newChild->isTableCaption() || newChild->isTableSection() || newChild->isRenderTableCol()));
while (beforeChild && beforeChild->parent() && beforeChild->parent() != owner)
beforeChild = beforeChild->parent();

Powered by Google App Engine
This is Rietveld 408576698