[Webkit-unassigned] [Bug 7048] Reproducible crash in JavaScript/WebCore while scrolling to location
bugzilla-daemon at opendarwin.org
bugzilla-daemon at opendarwin.org
Fri Feb 3 07:28:24 PST 2006
http://bugzilla.opendarwin.org/show_bug.cgi?id=7048
------- Comment #2 from opendarwin.org at mitzpettel.com 2006-02-03 07:28 PDT -------
Created an attachment (id=6219)
--> (http://bugzilla.opendarwin.org/attachment.cgi?id=6219&action=view)
Testcase (scroll to crash)
The problem is that RenderLayer::scrollToOffset calls the onscroll handler,
which may delete the renderer (and the layer!).
--
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
More information about the webkit-unassigned
mailing list