netsurf/render
John Mark Bell 3776e49f02 Fix bug #3433840: <img style="display: table" src="..."> will crash if the image fetch completes before initial layout.
A number of things wrong here:
1) The BOX_TABLE generated for the img shouldn't ever have been associated with the object (it should have been associated with the implied BOX_TABLE_CELL)
2) The layout engine's decision to treat BOX_TABLE/BOX_INLINE_CONTAINER with associated objects differently from non-replaced TABLE/INLINE_CONTAINERs seems wrong (looking though SVN history, it appears that this was introduced as part of the very first frames implementation, since replaced (twice!))
3) Now we fetch objects in parallel with building the box tree, we're open to this kind of race condition.

svn path=/trunk/netsurf/; revision=13128
2011-11-05 21:03:52 +00:00
..
box.c Use lwc_string for box->id. 2011-10-29 11:37:05 +00:00
box.h Use lwc_string for box->id. 2011-10-29 11:37:05 +00:00
box_construct.c Give INLINE_END boxes their own id reference. 2011-10-29 12:03:54 +00:00
box_normalise.c Improve performance of style selection 2011-10-08 00:21:59 +00:00
font.c Saturated maths in css fixed point 2011-03-12 17:46:11 +00:00
font.h Document font APIs -- specifically, string lengths are specified in bytes, not characters 2011-01-09 00:02:47 +00:00
form.c Port more internals to nsurl. Front ends may need updating. 2011-10-03 15:56:47 +00:00
form.h Remove plotter table global. Pass a redraw context around redraw functions. Knockout could be handled better. Note: untested on most front ends. 2011-06-30 15:48:07 +00:00
html.c Fix bug #3433787: ignore empty meta refresh content attribute. 2011-11-05 18:36:21 +00:00
html.h Use lwc_string for box->id. 2011-10-29 11:37:05 +00:00
html_interaction.c More conversion to nsurl. (box->href, object params, imagemaps, (i)frames) 2011-10-03 20:28:29 +00:00
html_internal.h Improve performance of style selection 2011-10-08 00:21:59 +00:00
html_redraw.c Don't try to render overflow scrollbars for the root element. 2011-09-07 19:26:42 +00:00
hubbub_binding.c fix infinite loop when copying private data 2011-10-19 15:28:47 +00:00
imagemap.c More conversion to nsurl. (box->href, object params, imagemaps, (i)frames) 2011-10-03 20:28:29 +00:00
imagemap.h More conversion to nsurl. (box->href, object params, imagemaps, (i)frames) 2011-10-03 20:28:29 +00:00
layout.c Fix bug #3433840: <img style="display: table" src="..."> will crash if the image fetch completes before initial layout. 2011-11-05 21:03:52 +00:00
layout.h Merge branches/jmb/content-factory to trunk 2011-05-06 20:40:09 +00:00
list.c Squash memory leak 2009-11-22 13:53:44 +00:00
list.h Merge LibCSS port to trunk. 2009-07-23 23:05:34 +00:00
parser_binding.h Improve performance of style selection 2011-10-08 00:21:59 +00:00
search.c Core part of search improvement: 2011-08-24 12:29:30 +00:00
search.h Core part of search improvement: 2011-08-24 12:29:30 +00:00
table.c Fix build with NDEBUG defined 2011-04-03 22:23:14 +00:00
table.h Merge LibCSS port to trunk. 2009-07-23 23:05:34 +00:00
textinput.c Fix selection for non-gui browser windows (iframes). 2011-07-13 13:20:26 +00:00
textinput.h Remove unused structure. 2011-07-07 19:21:05 +00:00
textplain.c Virtualise content handler finalisation calls. Remove pointless implementations. 2011-09-15 22:47:50 +00:00
textplain.h Virtualise content handler finalisation calls. Remove pointless implementations. 2011-09-15 22:47:50 +00:00