[Webkit-unassigned] [Bug 9425] New: Regression: Select some static text, delete containg div, crash

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=9425

           Summary: Regression: Select some static text, delete containg
                    div, crash
           Product: WebKit
           Version: 420+ (nightly)
          Platform: Macintosh
        OS/Version: Mac OS X 10.4
            Status: NEW
          Severity: normal
          Priority: P2
         Component: JavaScriptCore
        AssignedTo: webkit-unassigned at opendarwin.org
        ReportedBy: oster at google.com
OtherBugsDependingO 8370
             nThis:


Regression: Select some static text, delete containg div, crash

This bug shows up in Google Calendar with webKit. It does not show up in
shipping safari.

To reproduce:
Open the enclosed sample file in webKit. Select some text in the fake "alert
box" that comes up. Press the OK button on the "alert box". webKit dies in
dispose inside the javascript line:

dialog.innerHTML = '';

Guess of diagnosis:
some kind of double delete.


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.