-
rdar://problem/8765498mitz@apple.com authored
Reviewed by Adele Peterson. <rdar://problem/8884648> REGRESSION (r72141): Safari hangs when visiting a page on www.bfmtv.com https://bugs.webkit.org/show_bug.cgi?id=52765 <rdar://problem/8890909> REGRESSION (r72141): Very Slow Rendering With Certain Markup https://bugs.webkit.org/show_bug.cgi?id=52265 Source/WebCore: Test: fast/block/line-layout/negative-max-height.html Integer overflow detection led to a block having a huge height. This manifested as broken layout in the first bug and as extreme slowness in the latter bugs because of https://bugs.webkit.org/show_bug.cgi?id=52832 * rendering/RootInlineBox.cpp: (WebCore::RootInlineBox::alignBoxesInBlockDirection): Clamp maxHeight to 0 so the next line cannot start above this line. The negative maxHeight also caused the integer overflow detection logic to give the block a huge height. LayoutTests: * fast/block/line-layout: Added. * fast/block/line-layout/negative-max-height-expected.checksum: Added. * fast/block/line-layout/negative-max-height-expected.png: Added. * fast/block/line-layout/negative-max-height-expected.txt: Added. * fast/block/line-layout/negative-max-height.html: Added. git-svn-id: http://svn.webkit.org/repository/webkit/trunk@76273 268f45cc-cd09-0410-ab3c-d52691b4dbfc
d557175d