[Webkit-unassigned] [Bug 12457] crash if set innerHTML in onchange event

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=12457





------- Comment #3 from nrlz at hotmail.com  2007-01-30 01:19 PDT -------
Out of curiosity, should I continue to file new bugs which crash Safari 419.3,
but which don't crash nightlies? This has been the case for both this bug and
bug 12191. If I am wasting your time, then please let me know.

By the way, I found another crasher for 419.3 (safe on nightlies again) with
this HTML:

<a href="javascript:doit();">click me</a>
<div id="menu" style="overflow:auto"></div>
<script>
function doit() {
  var m = document.getElementById("menu");
  document.body.appendChild(m);
  m.style.display = "none";
  m.scrollTop = 0;
}
</script>


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.