Constructing a table containing a cell with a larger than expected colspan attribute causes a crash.
Reduction:
<!DOCTYPE html>
<table border="1">
<tr>
<td>Column 1</td>
<td>Column 2</td>
</tr>
<tr>
<td colspan="3">Column 1 and 2</td>
<td>Column 3</td>
</tr>
</table>Stack trace:
VERIFICATION FAILED: i < m_size at /home/tim/repos/serenity/Meta/Lagom/../../AK/Vector.h:148
/home/tim/repos/serenity/Build/lagom/lib/liblagom-ak.so.0(ak_verification_failed+0xef) [0x7f0ed910b03f]
/home/tim/repos/serenity/Build/lagom/lib/liblagom-web.so.0 Web::Layout::TableFormattingContext::finish_grid_initialization(Web::Layout::TableGrid const&) 0x233) [0x7f0ed7f14953]
/home/tim/repos/serenity/Build/lagom/lib/liblagom-web.so.0 Web::Layout::TableFormattingContext::run_until_width_calculation(Web::Layout::Box const&, Web::Layout::AvailableSpace const&) 0x44) [0x7f0ed7f149c4]
/home/tim/repos/serenity/Build/lagom/lib/liblagom-web.so.0 Web::Layout::FormattingContext::compute_table_box_width_inside_table_wrapper(Web::Layout::Box const&, Web::Layout::AvailableSpace const&) 0x2ef) [0x7f0ed7ecbf2f]
/home/tim/repos/serenity/Build/lagom/lib/liblagom-web.so.0 Web::Layout::BlockFormattingContext::compute_width(Web::Layout::Box const&, Web::Layout::AvailableSpace const&, Web::Layout::LayoutMode) 0x457) [0x7f0ed7eb3667]
/home/tim/repos/serenity/Build/lagom/lib/liblagom-web.so.0 Web::Layout::BlockFormattingContext::layout_block_level_box(Web::Layout::Box const&, Web::Layout::BlockContainer const&, Web::Layout::LayoutMode, Web::CSSPixels&, Web::Layout::AvailableSpace const&) 0xd83) [0x7f0ed7eb9653]
/home/tim/repos/serenity/Build/lagom/lib/liblagom-web.so.0 Web::Layout::BlockFormattingContext::layout_block_level_children(Web::Layout::BlockContainer const&, Web::Layout::LayoutMode, Web::Layout::AvailableSpace const&) 0xa6) [0x7f0ed7eb2ae6]
/home/tim/repos/serenity/Build/lagom/lib/liblagom-web.so.0 Web::Layout::BlockFormattingContext::layout_block_level_box(Web::Layout::Box const&, Web::Layout::BlockContainer const&, Web::Layout::LayoutMode, Web::CSSPixels&, Web::Layout::AvailableSpace const&) 0xf2f) [0x7f0ed7eb97ff]
/home/tim/repos/serenity/Build/lagom/lib/liblagom-web.so.0 Web::Layout::BlockFormattingContext::layout_block_level_children(Web::Layout::BlockContainer const&, Web::Layout::LayoutMode, Web::Layout::AvailableSpace const&) 0xa6) [0x7f0ed7eb2ae6]
/home/tim/repos/serenity/Build/lagom/lib/liblagom-web.so.0 Web::Layout::BlockFormattingContext::run(Web::Layout::Box const&, Web::Layout::LayoutMode, Web::Layout::AvailableSpace const&) 0x5a) [0x7f0ed7eb22ea]
/home/tim/repos/serenity/Build/lagom/lib/liblagom-web.so.0 Web::Layout::BlockFormattingContext::layout_block_level_box(Web::Layout::Box const&, Web::Layout::BlockContainer const&, Web::Layout::LayoutMode, Web::CSSPixels&, Web::Layout::AvailableSpace const&) 0xe0a) [0x7f0ed7eb96da]
/home/tim/repos/serenity/Build/lagom/lib/liblagom-web.so.0 Web::Layout::BlockFormattingContext::layout_block_level_children(Web::Layout::BlockContainer const&, Web::Layout::LayoutMode, Web::Layout::AvailableSpace const&) 0xa6) [0x7f0ed7eb2ae6]
/home/tim/repos/serenity/Build/lagom/lib/liblagom-web.so.0 Web::DOM::Document::update_layout() 0x39f) [0x7f0ed7c5476f]
/home/tim/repos/serenity/Build/lagom/lib/liblagom-web.so.0 Web::HTML::EventLoop::process() 0x3fb) [0x7f0ed7d61a2b]
/home/tim/repos/serenity/Build/lagom/lib/liblagom-web.so.0(+0x9b28a0) [0x7f0ed7fb28a0]
/home/tim/repos/serenity/Build/lagom/lib/liblagom-core.so.0(+0x2fb59) [0x7f0ed9191b59]
/home/tim/repos/serenity/Build/lagom/lib/liblagom-core.so.0 Core::EventReceiver::dispatch_event(Core::Event&, Core::EventReceiver*) 0x75) [0x7f0ed9191035]
/home/tim/repos/serenity/Build/lagom/libexec/WebContent(+0xe1531) [0x558322758531]
SerenityOS / serenity
The Serenity Operating System 🐞
30.6k
Contributors get 100% of received funds after fees
How does funding with Polar work?
1
Pay now to fund the work behind this issue.
2
Get updates on progress being made.
3
Maintainer is rewarded once the issue is completed.
FAQ
Backer
You're funding impactful open source efforts
Contributor
You want to contribute to this effort
Maintainer
You want to get funding like this too