[wpt-sync] Sync PR 32818 - [tables] Fix producing negative columns.
Categories
(Core :: Layout: Tables, task, P4)
Tracking
()
Tracking | Status | |
---|---|---|
firefox99 | --- | fixed |
People
(Reporter: wpt-sync, Unassigned)
References
(Depends on 1 open bug, )
Details
(Whiteboard: [wptsync downstream])
Sync web-platform-tests PR 32818 into mozilla-central (this bug is closed when the sync is complete).
PR: https://github.com/web-platform-tests/wpt/pull/32818
Details from upstream follow.
Ian Kilpatrick <ikilpatrick@chromium.org> wrote:
[tables] Fix producing negative columns.
Previously we were using float logic within
DistributeInlineSizeToComputedInlineSizeAuto.This had the effect (when pushed to extremes) to produce negative
column widths, which would result in a negative available space
given to some children.This negative available space will cause some layouts (block) to do
bad things like try and do a null-deref read.This patch changes the logic to keep everything in the LayoutUnit
space.Bug: 1294634
Change-Id: Ic86cb54620bd1985024d60b7510c7281e6799ebfReviewed-on: https://chromium-review.googlesource.com/3451134
WPT-Export-Revision: 529abce5baa0e7c3d9e01ca8fb2e75d47688ddf6
Assignee | ||
Updated•3 years ago
|
Assignee | ||
Comment 1•3 years ago
|
||
Assignee | ||
Comment 2•3 years ago
|
||
CI Results
Ran 0 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI
Total 1 tests
Status Summary
Firefox
PASS : 1
Chrome
CRASH: 1
Safari
PASS : 1
Links
Comment 5•3 years ago
|
||
bugherder |
Description
•