[Webkit-unassigned] [Bug 10127] REGRESSION: Crash undoing delete in textarea
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Thu Feb 15 07:30:11 PST 2007
http://bugs.webkit.org/show_bug.cgi?id=10127
------- Comment #16 from mitz at webkit.org 2007-02-15 07:30 PDT -------
I finally reproduced the bug. Setting a breakpoint in Document::removeMarkers()
and stepping into the initialization of the local variable marker, I ended up
in the constructor RefPtr<StringImpl>::RefPtr(const RefPtr& o), which I don't
know what to make of. I don't know where o's contents come from.
--
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
More information about the webkit-unassigned
mailing list