[Webkit-unassigned] [Bug 9806] New: REGRESSION: Large rowspan crashes WebKit

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=9806

           Summary: REGRESSION: Large rowspan crashes WebKit
           Product: WebKit
           Version: 420+ (nightly)
          Platform: Macintosh
        OS/Version: Mac OS X 10.4
            Status: NEW
          Keywords: HasReduction
          Severity: normal
          Priority: P1
         Component: Tables
        AssignedTo: webkit-unassigned at opendarwin.org
        ReportedBy: jonathanjohnsson at gmail.com


A table with a large rowspan crashes WebKit. The test case is simply <TABLE><TD
ROWSPAN=674227123>. This bug was found using the cgi-script at
http://lcamtuf.coredump.cx/mangleme/mangle.cgi , found in the sidebar at
http://browserfun.blogspot.com/ .

Looking through the nightlies, this crash doesn't occur before and including
revision 14807.


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.