[Webkit-unassigned] [Bug 12780] New: Reproducible crash in "onselectstart" event when XMLNS:CUSTOM is included in HTML tag

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=12780

           Summary: Reproducible crash in "onselectstart" event when
                    XMLNS:CUSTOM is included in HTML tag
           Product: WebKit
           Version: 420+ (nightly)
          Platform: All
        OS/Version: Mac OS X 10.4
            Status: UNCONFIRMED
          Severity: Critical
          Priority: P1
         Component: WebCore JavaScript
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: tom at bungeelabs.com


When the "HTML" tag contains the "XMLNS:CUSTOM" declaration, any click on the
document causes an "onselectstart" event to fire. Within this event, the
srcElement points to an element which has no parent node. If this element is
appended to the DOM tree, and then removed from the DOM tree, webkit crashes.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.