[Webkit-unassigned] [Bug 10139] REGRESSION: Reproducible crash when selecting a popup with ::selection pseudostyle

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=10139





------- Comment #2 from opendarwin.org at mitzpettel.com  2006-07-28 03:08 PDT -------
The crash is due to elemen() being 0 here in RenderObject::getPseudoStyle():

    Node* node = element();
    if (isText())
        node = element()->parentNode();

The popup's "button text" is an anonymous RenderText, whose RenderStyle is
copied from the RenderMenuList. You can add special-case code in
getPseudoStyle() for this. I wonder if there's a more elegeant solution.


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.