Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: db7a388e601efca2a8cb67e07c4bf00931b78f3a
https://github.com/WebKit/WebKit/commit/db7a388e601efca2a8cb67e07c4bf00931b78f3a
Author: Alan Baradlay <za...@apple.com>
Date: 2024-06-03 (Mon, 03 Jun 2024)
Changed paths:
A LayoutTests/fast/dynamic/backdrop-remove-crash-expected.txt
A LayoutTests/fast/dynamic/backdrop-remove-crash.html
M Source/WebCore/rendering/updating/RenderTreeUpdater.cpp
Log Message:
-----------
Backdrop renderer removal leaves associated layout box behind
https://bugs.webkit.org/show_bug.cgi?id=275019
<rdar://128067952>
Reviewed by Antti Koivisto.
1. Backdrop render is always anchored to the viewport regardless of where the
associated content renderer is
2. While destroying the content renderer we also remove the backdrop renderer
In order to let invalidateLineLayout kick in (see
RenderTreeBuilder::detachFromRenderElement)
we have to make sure the content renderer is not considered as the "destroy
root" of the backdrop (see #1).
* LayoutTests/fast/dynamic/backdrop-remove-crash-expected.txt: Added.
* LayoutTests/fast/dynamic/backdrop-remove-crash.html: Added.
* Source/WebCore/rendering/updating/RenderTreeUpdater.cpp:
(WebCore::RenderTreeUpdater::tearDownRenderers):
Canonical link: https://commits.webkit.org/279651@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
