Ability to check inline/float/OOF without LayoutObject bits.

mstensho · chromium-wpt-export-bot · commit d5e6a87919e3 · 2025-05-13T13:17:43.000-07:00
As pointed out in LayoutBox::IsValidColumnSpanner(), this function may be called at "inconvenient" times, also before StyleDidChange() has finished, so we cannot trust the LayoutObject bits for inline-level, float, or position. Add the ability to provide this information without checking those bits. The information we need is computed style and layout object type. It was possible for the function to return true for `column-span:all` and `float:left`, which is wrong. Bug: 417256483 Change-Id: Iaa8903a716a5f9a1d4cc18d42c48680e7fb2c551 Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6540050 Commit-Queue: Morten Stenshorne <mstensho@chromium.org> Reviewed-by: Ian Kilpatrick <ikilpatrick@chromium.org> Cr-Commit-Position: refs/heads/main@{#1459638}
diff --git a/css/css-multicol/crashtests/float-cannot-be-spanner.html b/css/css-multicol/crashtests/float-cannot-be-spanner.html
@@ -0,0 +1,11 @@
+<!DOCTYPE html>
+<link rel="author" title="Morten Stenshorne" href="mailto:mstensho@chromium.org">
+<link rel="help" href="https://issues.chromium.org/issues/417256483">
+<div style="columns:2;">
+  <div id="e59" style="float:left; width:100px; column-span:all;"></div>
+  m
+</div>
+<script>
+  document.body.offsetTop;
+  e59.style.width = "101px";
+</script>
