[Webkit-unassigned] [Bug 9016] crash loading live.com in TreeShared::ref because accessing RenderTextField::text() can destroy the RenderTextField

bugzilla-daemon at opendarwin.org bugzilla-daemon at opendarwin.org
Sat May 20 14:02:08 PDT 2006


ggaren at apple.com changed:

           What    |Removed                     |Added
            Summary|crash @ live.com in         |crash loading live.com in
                   |TreeShared::ref because     |TreeShared::ref because
                   |accessing                   |accessing
                   |RenderTextField::text() can |RenderTextField::text() can
                   |destroy the RenderTextField |destroy the RenderTextField

------- Comment #1 from ggaren at apple.com  2006-05-20 14:02 PDT -------
Turning MallocScribble on makes this 100% reproducible.

Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

More information about the webkit-unassigned mailing list