commit | 91998d20e96a9f323d950ae2a789f96d16a7ed7c | [log] [tgz] |
---|---|---|
author | Rune Lillesveen <futhark@chromium.org> | Mon Jun 24 21:53:55 2019 |
committer | Commit Bot <commit-bot@chromium.org> | Mon Jun 24 21:53:55 2019 |
tree | d624bbe3e1c96469a6f147941beed3b1555bbacc | |
parent | 535d8e87da2846497b8baf3a25896c1c3d91c765 [diff] |
Don't retain next_sibling being re-attached or skipped. We ended keeping a deleted LayoutObject as part of whitespace re- attachement because the previous next_sibling was detached at the next iteration. Reset the next_sibling for each iteration. I have not been able to reproduce the issue locally with the clusterfuzz cases, and not figured out how to construct a case which causes this to happen, so this is a speculative fix. Bug: 977616 Change-Id: I31c840096897b757aaeccb3d8085ad57cf6b3060 Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1674019 Reviewed-by: Anders Hartvoll Ruud <andruud@chromium.org> Commit-Queue: Rune Lillesveen <futhark@chromium.org> Cr-Commit-Position: refs/heads/master@{#671810}
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.
The project's web site is https://www.chromium.org.
Documentation in the source is rooted in docs/README.md.
Learn how to Get Around the Chromium Source Code Directory Structure .