[Webkit-unassigned] [Bug 8452] mangleme(0x58c22e11): Random crashes

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=8452





------- Comment #2 from opendarwin.org at mitzpettel.com  2006-04-18 09:32 PDT -------
Created an attachment (id=7802)
 --> (http://bugzilla.opendarwin.org/attachment.cgi?id=7802&action=view)
Reduced test case

Memory smashing happens at render_frames.cpp:303 when the column- (or
row-)length array is empty:
                gridLayout[gridLen - 1] += remainingLen[k];


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.