← WebKit — 2026-W35
c9d5b3f137ca209ef6ec4cd79dc1856377e5f4dd A block level box on a line is left behind when a column break moves the line
not a security fix
confidence 0.2
signal score 7.5
Source/WebCore/layout
Classified as not security-relevant.
Triage note: updateRenderTreePositions now moves block-level boxes by the pagination visual adjustment and relayouts them via a new relayoutAfterPaginationOffset helper. Layout correctness for block-in-inline content after pagination; not a memory-safety issue.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Triage note: updateRenderTreePositions now moves block-level boxes by the pagination visual adjustment and relayouts them via a new relayoutAfterPaginationOffset helper. Layout correctness for block-in-inline content after pagination; not a memory-safety issue.
This commit was flagged by the signal scorer and reviewed by AI (not a human). It is listed only so the triage is auditable; there is no root-cause analysis because this is not a vulnerability fix.
Structural signals: smartptr_member_added (+3.0), null_guard (+1.2), area:Source/WebCore/layout (+2.0), surgical (+1.3)
Before / after
Loading diff…
On This Page