[Webkit-unassigned] [Bug 9806] REGRESSION: Large rowspan crashes WebKit

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=9806


ap at nypop.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ap at nypop.com




------- Comment #3 from ap at nypop.com  2006-07-09 11:36 PDT -------
Stack trace (from gdb):

#1  0x9012dfb4 in abort ()
#2  0x01cdbb7c in WTF::VectorBuffer<WebCore::RenderTableSection::RowStruct,
0ul>::allocateBuffer (this=0x18a31c50, newCapacity=674227123) at
/Users/ap/WebKit/WebKitBuild/Debug/JavaScriptCore.framework/PrivateHeaders/Vector.h:251
#3  0x01cdbd20 in WTF::Vector<WebCore::RenderTableSection::RowStruct,
0ul>::reserveCapacity (this=0x18a31c4c, newCapacity=674227123) at
/Users/ap/WebKit/WebKitBuild/Debug/JavaScriptCore.framework/PrivateHeaders/Vector.h:536
#4  0x01cdbde8 in WTF::Vector<WebCore::RenderTableSection::RowStruct,
0ul>::expandCapacity (this=0x18a31c4c, newMinCapacity=674227123) at
/Users/ap/WebKit/WebKitBuild/Debug/JavaScriptCore.framework/PrivateHeaders/Vector.h:493
#5  0x01cdbe90 in WTF::Vector<WebCore::RenderTableSection::RowStruct,
0ul>::resize (this=0x18a31c4c, size=674227123) at
/Users/ap/WebKit/WebKitBuild/Debug/JavaScriptCore.framework/PrivateHeaders/Vector.h:522
#6  0x01a07788 in WebCore::RenderTableSection::ensureRows (this=0x18a31bec,
numRows=674227123) at
/Users/ap/WebKit/WebCore/rendering/RenderTableSection.cpp:150

BTW, we have mangleme and iExploder tests in WebKitTools/Scripts:
run-mangleme-tests and run-iexploder-tests,


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.