[Webkit-unassigned] [Bug 11115] REGRESSION: Crash on Flickr after hitting cancel from adding a note

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=11115





------- Comment #4 from mitz at webkit.org  2006-10-21 06:35 PDT -------
Created an attachment (id=11175)
 --> (http://bugs.webkit.org/attachment.cgi?id=11175&action=view)
Reduction (will crash)

What a mess. Since the textarea contains the selection (thanks to focus()),
Document::updateRendering() is invoked under setInnerText. Because of the style
change, this deletes the inner div whose text is being set, and things just go
downhill from there.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.