DescriptionMerge 184123 "Don't delete objects from the floating list during..."
Merging to branch
BUG=423891
> Don't delete objects from the floating list during layout
>
> In https://codereview.chromium.org/635533003 I was wrong to treat isInPerformLayout
> as equivalent to when a shape is being computed. This crash reveals there are cases
> where that doesn't hold - so reinstating the check.
>
> This is a reduced version of the clusterfuzz test - it resisted my attempts to remove
> anything further from it.
>
> BUG=423891
>
> Review URL: https://codereview.chromium.org/647953004
TBR=robhogan@gmail.com
Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=184801
Patch Set 1 #
Messages
Total messages: 2 (0 generated)
|