• mitz@apple.com's avatar
    WebCore: · 9f7cc0e3
    mitz@apple.com authored
            Reviewed by Darin Adler.
    
            - fix https://bugs.webkit.org/show_bug.cgi?id=19519
              <rdar://problem/6007345> DOM modification causes stack exhaustion (BUTTON OBJECT COLGROUP)
    
            Test: fast/table/prepend-in-anonymous-table.html
    
            * rendering/RenderBlock.cpp:
            (WebCore::RenderBlock::addChildToFlow): Added code to handle the case
            of inserting before a child that has been wrapped by an anonymous table,
            in which case if the new child is the type that needs to be in a table,
            it is inserted into the table, and otherwise it is inserted before the
            table.
            * rendering/RenderTable.cpp:
            (WebCore::RenderTable::addChild): Added table-column-group alongside
            table-caption as content that can exist inside an anonymous table
            without being wrapped in a table section.
    
    LayoutTests:
    
            Reviewed by Darin Adler.
    
            - test for https://bugs.webkit.org/show_bug.cgi?id=19519
              <rdar://problem/6007345> DOM modification causes stack exhaustion (BUTTON OBJECT COLGROUP)
    
            * fast/table/prepend-in-anonymous-table.html: Added.
            * platform/mac/fast/table/prepend-in-anonymous-table-expected.checksum: Added.
            * platform/mac/fast/table/prepend-in-anonymous-table-expected.png: Added.
            * platform/mac/fast/table/prepend-in-anonymous-table-expected.txt: Added.
    
    
    
    git-svn-id: http://svn.webkit.org/repository/webkit/trunk@34692 268f45cc-cd09-0410-ab3c-d52691b4dbfc
    9f7cc0e3
RenderBlock.cpp 180 KB