[Webkit-unassigned] [Bug 7137] Crash if <table> is removed from DOM while being parsed if it contains bogus content

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=7137


ap at nypop.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Priority|P2                          |P1




------- Comment #1 from ap at nypop.com  2006-04-24 21:31 PDT -------
Reproducible crash -> P1.

Thread 0 Crashed:
0   com.apple.WebCore           0x01b4c778
WebCore::TreeShared<WebCore::Node>::parent() const + 20 (Shared.h:57)
1   com.apple.WebCore           0x01b4c7b0 WebCore::Node::parentNode() const +
36 (Node.h:89)
2   com.apple.WebCore           0x017a9a20
WebCore::HTMLParser::handleError(WebCore::Node*, bool, WebCore::AtomicString
const&, int) + 6404 (HTMLParser.cpp:490)
3   com.apple.WebCore           0x017aa760
WebCore::HTMLParser::insertNode(WebCore::Node*, bool) + 912
(HTMLParser.cpp:281)
4   com.apple.WebCore           0x017ac178
WebCore::HTMLParser::parseToken(WebCore::Token*) + 1388 (HTMLParser.cpp:208)
5   com.apple.WebCore           0x017b006c
WebCore::HTMLTokenizer::processToken() + 564 (HTMLTokenizer.cpp:1628)
6   com.apple.WebCore           0x017b37c0
WebCore::HTMLTokenizer::parseTag(WebCore::SegmentedString&,
WebCore::HTMLTokenizer::State) + 7376 (HTMLTokenizer.cpp:1206)
7   com.apple.WebCore           0x017b43ec
WebCore::HTMLTokenizer::write(WebCore::SegmentedString const&, bool) + 1744
(HTMLTokenizer.cpp:1432)
8   com.apple.WebCore           0x018a1728 WebCore::Frame::write(char const*,
int) + 952 (Frame.cpp:654)


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.