DescriptionEnable sticky positioning for table elements.
Also includes fix for bug ​https://bugs.webkit.org/show_bug.cgi?id=105654
I don't have access to this bug, but from commit message I assume it says about "Heap use after free problem".
Debugging showed that it wasn't heap use after free. The real problem that RenderObject::container() returns object which is not RenderBlock and it is used as RenderBlock in
RenderBox::containingBlockLogicalHeightForPositioned() method.
BUG=231751
Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=166355
Patch Set 1 #Patch Set 2 : Add fix for crash in fast/block/sticky-position-con~ng-block-crash.html layout test. #Patch Set 3 : Got better fix for containingBlock() from webkit and updated by review comments. #
Messages
Total messages: 10 (0 generated)
|