-
commit-queue@webkit.org authored
ASSERTION FAILED: !value || (value->isPrimitiveValue()) in WebCore::StyleProperties::getLayeredShorthandValue. https://bugs.webkit.org/show_bug.cgi?id=125146 Patch by László Langó <lango@inf.u-szeged.hu> on 2013-12-03 Reviewed by Darin Adler. Source/WebCore: Do not presume that |yValue| is primitive if |value| is implicit in StylePropertySerializer. An implicit y-value can become explicit if specified as a separate longhand. At the same time, its new value can be non-primitive. Backported from Blink: http://src.chromium.org/viewvc/blink?view=rev&rev=153678 Test: fast/css/webkit-mask-crash-implicit.html * css/StyleProperties.cpp: (WebCore::StyleProperties::getLayeredShorthandValue): LayoutTests: * fast/css/webkit-mask-crash-implicit-expected.txt: Added. * fast/css/webkit-mask-crash-implicit.html: Added. git-svn-id: http://svn.webkit.org/repository/webkit/trunk@160010 268f45cc-cd09-0410-ab3c-d52691b4dbfc
854bbedf