[Webkit-unassigned] [Bug 11924] WebCore crash on 64-bit code when loading a web page with a table tag

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Dec 22 17:39:18 PST 2006


http://bugs.webkit.org/show_bug.cgi?id=11924


darin at apple.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #11961|review?                     |review-
               Flag|                            |




------- Comment #2 from darin at apple.com  2006-12-22 17:39 PDT -------
(From update of attachment 11961)
This is a good fix for the numeric overflow.

However, the crash indicates that the caller doesn't handle the case where
ensureRows returns false. That should also be fixed. The callers that don't
check are addChild and recalcCells. addCell does check.

Setting review- on this because it needs change log and a test case and should
also fix the callers that don't check the return value from ensureRows.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list