[Webkit-unassigned] [Bug 9016] crash loading live.com in TreeShared::ref because accessing RenderTextField::text() can destroy the RenderTextField

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=9016


ggaren at apple.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|crash @ live.com in         |crash loading live.com in
                   |TreeShared::ref because     |TreeShared::ref because
                   |accessing                   |accessing
                   |RenderTextField::text() can |RenderTextField::text() can
                   |destroy the RenderTextField |destroy the RenderTextField




------- Comment #1 from ggaren at apple.com  2006-05-20 14:02 PDT -------
Turning MallocScribble on makes this 100% reproducible.


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.