[Webkit-unassigned] [Bug 12947] REGRESSION: ASSERTION FAILED: maxWidth >= 0 in StringTruncator.cpp:109 in WebCore::truncateString()

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=12947


bdash at webkit.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |bdash at webkit.org
             Status|NEW                         |ASSIGNED




------- Comment #7 from bdash at webkit.org  2007-03-05 00:23 PDT -------
The root of this problem is that kjs_window.cpp:1616 calls WebCore::screenRect
with null as the argument.  This results in toUserSpace invoking Objective-C
methods on nil objects, which will either return zero or an undefined value
depending on the return type of the method in question.  This looks to cause
userRect to be scaled by NaN, eventually leading to the assertion failure
mentioned in this bug report.

One strange thing I noticed while debugging this is that the x/y/width/height
members of the WindowFeatures structure are not initialized, and in many cases
are used before initialization.  This could lead in some cases for windows
created via window.open to have arbitrary sizes and locations while still being
constrained within the screens bounds.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.