Chromium Code Reviews
DescriptionAdded another guard to the NodeRenderingContext::nextSibling() fast path and its twin.
Currently, NRC::nextSibling() checks Node::needsShadowTreeWalker() before taking a shortcut.
The flag is on when the node or its parent is a host, a shadowroot or an insertion point.
This check works for traversals from children to parents, there is a hole where
a sibling of the node is an insertion point. In such a case, we need to skip the insertion
point for the traversal and we cannot take the shortcut.
This changes adds guards for such cases and lets the traversal take its slow path.
BUG=229245
TEST=content-element-crash.html
Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=150157
Patch Set 1 #
Messages
Total messages: 8 (0 generated)
|
|||||||||||||||||||||||||||||||||||||