Closed Bug 1964162 Opened 17 days ago Closed 7 days ago

[wpt-sync] Sync PR 52306 - Don't allow fixedpos CBs to be inline when fragmenting

Categories

(Core :: Layout, task, P4)

task

Tracking

()

RESOLVED FIXED
140 Branch
Tracking Status
firefox140 --- fixed

People

(Reporter: wpt-sync, Unassigned)

References

()

Details

(Whiteboard: [wptsync downstream])

Attachments

(1 file)

Sync web-platform-tests PR 52306 into mozilla-central (this bug is closed when the sync is complete).

PR: https://github.com/web-platform-tests/wpt/pull/52306
Details from upstream follow.

Alison Maher <almaher@microsoft.com> wrote:

Don't allow fixedpos CBs to be inline when fragmenting

CL:3573056 added support for fixedpos elements nested in an abspos,
nested in an inline container when fragmenting. In summary, the change
intended to avoid setting the fixedpos containing block that we pass up
within a fragmentation context to an inline element.

The logic for handling this missed a case where the fixedpos inline
container was already set, but we run into another ancestor that is a
candidate for a fixedpos CB, but is inline.

Previously, we allowed this element to be set as the fixedpos CB. This
CL adjusts the logic to avoid this, which fixes a crash we were hitting
in this case.

Bug: 406053621
Change-Id: I709d7f36643898ed5bc910a1685e3bcaeb9e1617
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6506648
Auto-Submit: Alison Maher \<almaher@microsoft.com>
Commit-Queue: Morten Stenshorne \<mstensho@chromium.org>
Reviewed-by: Morten Stenshorne \<mstensho@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1455050}

Component: web-platform-tests → CSS Parsing and Computation
Product: Testing → Core
Component: CSS Parsing and Computation → Layout

CI Results

Ran 11 Firefox configurations based on mozilla-central, and Firefox, Chrome, and Safari on GitHub CI

Total 1 tests

Status Summary

Firefox

PASS : 1

Chrome

CRASH: 1

Safari

PASS : 1

Links

Gecko CI (Treeherder)
GitHub PR Head
GitHub PR Base

Automatic update from web-platform-tests
Don't allow fixedpos CBs to be inline when fragmenting

CL:3573056 added support for fixedpos elements nested in an abspos,
nested in an inline container when fragmenting. In summary, the change
intended to avoid setting the fixedpos containing block that we pass up
within a fragmentation context to an inline element.

The logic for handling this missed a case where the fixedpos inline
container was already set, but we run into another ancestor that is a
candidate for a fixedpos CB, but is inline.

Previously, we allowed this element to be set as the fixedpos CB. This
CL adjusts the logic to avoid this, which fixes a crash we were hitting
in this case.

Bug: 406053621
Change-Id: I709d7f36643898ed5bc910a1685e3bcaeb9e1617
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6506648
Auto-Submit: Alison Maher <almaher@microsoft.com>
Commit-Queue: Morten Stenshorne <mstensho@chromium.org>
Reviewed-by: Morten Stenshorne <mstensho@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1455050}

--

wpt-commits: 5dad7f0970ccfd5a0f6760a74c91331e8fc8cc89
wpt-pr: 52306

Pushed by aborovova@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/244270eb05fa [wpt PR 52306] - Don't allow fixedpos CBs to be inline when fragmenting,
Status: NEW → RESOLVED
Closed: 7 days ago
Resolution: --- → FIXED
Target Milestone: --- → 140 Branch
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: