[Webkit-unassigned] [Bug 6236] REGRESSION: Crash in DOMString::replace() in ToT (12/25/05)

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=6236


opendarwin.org at mitzpettel.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |opendarwin.org at mitzpettel.co
                   |                            |m
             Status|UNCONFIRMED                 |NEW
     Ever Confirmed|0                           |1
           Keywords|                            |Regression
           Priority|P2                          |P1
            Summary|Crash in                    |REGRESSION: Crash in
                   |DOMString::replace() in ToT |DOMString::replace() in ToT
                   |(12/25/05)                  |(12/25/05)




------- Additional Comments From opendarwin.org at mitzpettel.com  2005-12-24 14:28 -------
The new method DOMString::replace() is missing a null check for m_impl.

-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.