[Webkit-unassigned] [Bug 12782] Reproducible crash in BidiContext::deref

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=12782





------- Comment #10 from mitz at webkit.org  2007-03-13 13:08 PDT -------
Created an attachment (id=13616)
 --> (http://bugs.webkit.org/attachment.cgi?id=13616&action=view)
Add an assert to InlineBox::root()

The test case fails this assertion. The illegal case leads to the crash down
the road. I think this assertion will be good to have in the code. For one, it
can help make a reliable regression test for this bug.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.