RESOLVED FIXED246139
REGRESSION(254755@main): Release assert in LayoutIntegration::BoxTree::rendererForLayoutBox with <fieldset> 
https://bugs.webkit.org/show_bug.cgi?id=246139
Summary REGRESSION(254755@main): Release assert in LayoutIntegration::BoxTree::render...
Antti Koivisto
Reported 2022-10-06 02:13:02 PDT
<style> fieldset { display: inline } span { float: left } </style> <span> <fieldset> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
Attachments
Patch (14.92 KB, patch)
2022-10-06 02:58 PDT, Antti Koivisto 		no flags
DetailsFormatted DiffDiff
Patch (15.07 KB, patch)
2022-10-06 03:09 PDT, Antti Koivisto 		ews-feeder: commit-queue-
DetailsFormatted DiffDiff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.
Antti Koivisto
Comment 1 2022-10-06 02:13:20 PDT
rdar://100493284
Antti Koivisto
Comment 2 2022-10-06 02:58:44 PDT
Created attachment 462831 [details] Patch
Antti Koivisto
Comment 3 2022-10-06 03:09:19 PDT
Created attachment 462832 [details] Patch
EWS
Comment 4 2022-10-06 14:19:13 PDT
Committed 255240@main (ca4898717f9e): <https://commits.webkit.org/255240@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 462832 [details].
Note You need to log in before you can comment on or make changes to this bug.