[Webkit-unassigned] [Bug 8486] iExploder(#25865): Failed assertion in RenderText::layout()

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=8486


bdash at webkit.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |NeedsRadar




------- Comment #5 from bdash at webkit.org  2007-02-01 18:10 PDT -------
This assertion failure is also triggered by Hamachi, via different input:

<script type="text/javascript">
    window.onload = function() {
        var c = document.createElement('colgroup');
        c.appendChild(document.createElement('br'));
        c.appendChild(document.createElement('xmp'));
        document.documentElement.appendChild(c);
    }
</script>


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.