Bug 260862

Summary: [IFC] LayoutState::destroyBlock/InlineFormattingState functions use the wrong map
Product: WebKit Reporter: zalan <zalan>
Component: Layout and RenderingAssignee: zalan <zalan>
Status: RESOLVED FIXED    
Severity: Normal CC: bfulgham, koivisto, simon.fraser, webkit-bug-importer, zalan
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch none

Description zalan 2023-08-29 07:32:25 PDT
ssia
Comment 1 zalan 2023-08-29 07:37:10 PDT
Created attachment 467484 [details]
Patch
Comment 2 Antti Koivisto 2023-08-29 07:42:39 PDT
Comment on attachment 467484 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=467484&action=review

> Source/WebCore/layout/LayoutState.cpp:190
> -    m_inlineFormattingStates.remove(&formattingContextRoot);
> +    m_blockFormattingStates.remove(&formattingContextRoot);

OOPS
Comment 3 EWS 2023-08-29 08:41:35 PDT
Committed 267407@main (443d49efd65f): <https://commits.webkit.org/267407@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 467484 [details].
Comment 4 Radar WebKit Bug Importer 2023-08-29 08:42:16 PDT
<rdar://problem/114629672>