[Webkit-unassigned] [Bug 10127] REGRESSION: Crash undoing delete in textarea

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Feb 15 07:30:11 PST 2007


http://bugs.webkit.org/show_bug.cgi?id=10127





------- Comment #16 from mitz at webkit.org  2007-02-15 07:30 PDT -------
I finally reproduced the bug. Setting a breakpoint in Document::removeMarkers()
and stepping into the initialization of the local variable marker, I ended up
in the constructor RefPtr<StringImpl>::RefPtr(const RefPtr& o), which I don't
know what to make of. I don't know where o's contents come from.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list