[Webkit-unassigned] [Bug 12353] REGRESSION: Crash on load (mutation event dispatch under the image element constructor deletes the element)

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=12353





------- Comment #7 from ddkilzer at webkit.org  2007-01-21 12:18 PDT -------
Created an attachment (id=12587)
 --> (http://bugs.webkit.org/attachment.cgi?id=12587&action=view)
Another reduction (will crash)

A different reduction based on the original web page.  The patch in Attachment
12586 also fixes this reduction.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.