[Webkit-unassigned] [Bug 10127] REGRESSION: Crash undoing delete in textarea

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=10127





------- Comment #18 from mitz at webkit.org  2007-02-15 10:07 PDT -------
Created an attachment (id=13185)
 --> (http://bugs.webkit.org/attachment.cgi?id=13185&action=view)
[WIP] Don't abuse Vector iterators

The problem seems to be that a Vector iterator (essentially a pointer) was
begin used on a Vector while inserting objects into it, which caused its buffer
to move to a different address, rendering the iterator invalid. The solution is
to use an index instead of a fancy iterator. No change log or regression test
yet.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.