[Webkit-unassigned] [Bug 6066] New: WebKit Crashes when mousing out of a CSS a:hover:after that reflows text

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=6066

           Summary: WebKit Crashes when mousing out of a CSS a:hover:after
                    that reflows text
           Product: WebKit
           Version: 412+
          Platform: Macintosh
               URL: http://www.mnot.net/test/webkit-crash.html
        OS/Version: Mac OS X 10.4
            Status: UNCONFIRMED
          Severity: major
          Priority: P2
         Component: Layout and Rendering
        AssignedTo: webkit-unassigned at opendarwin.org
        ReportedBy: mnot at pobox.com


WebKit will crash hard when mousing out of an a element that has a CSS hover:after selector applied.

I've boiled this down to a minimal test case; see http://www.mnot.net/test/webkit-crash.html. When you 
mouse over the link and then mouse out, Safari will crash, repeatably. For the bug to be apparent, the 
mouseeover needs to re-flow the text (hence all of the 'test test test'; adjust your window to put this on 
more than one line).

I've noticed this bug in Safari as well as in other WebKit applications.

-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.