Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 43d9ae9cf94b5690df5b33144b0ed7491bf38d74
      
https://github.com/WebKit/WebKit/commit/43d9ae9cf94b5690df5b33144b0ed7491bf38d74
  Author: Alan Baradlay <[email protected]>
  Date:   2025-10-02 (Thu, 02 Oct 2025)

  Changed paths:
    A LayoutTests/fast/table/orthogonal-td-with-rowspan-crash-expected.txt
    A LayoutTests/fast/table/orthogonal-td-with-rowspan-crash.html
    M Source/WebCore/rendering/RenderTableCell.cpp
    M Source/WebCore/rendering/RenderTableSection.cpp

  Log Message:
  -----------
  ASSERT in RenderTreeNeedsLayoutChecker when orthogonal table cell has rowspan
https://bugs.webkit.org/show_bug.cgi?id=299991

Reviewed by Antti Koivisto.

RenderTableCell::setCellLogicalWidth marks both the cell and its row as dirty, 
assuming the caller will handle the row layout via RenderTableSection::layout.
However, the caller only lays out the grid's current row, which -due to row 
spanning- may differ from cell.row(), the row where the cell was originally 
created.

Test: fast/table/orthogonal-td-with-rowspan-crash.html

* LayoutTests/fast/table/orthogonal-td-with-rowspan-crash-expected.txt: Added.
* LayoutTests/fast/table/orthogonal-td-with-rowspan-crash.html: Added.
* Source/WebCore/rendering/RenderTableCell.cpp:
(WebCore::RenderTableCell::setCellLogicalWidth):
* Source/WebCore/rendering/RenderTableSection.cpp:
(WebCore::RenderTableSection::layout):

Canonical link: https://commits.webkit.org/300879@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes

Reply via email to