[Webkit-unassigned] [Bug 12782] Reproducible crash in BidiContext::deref

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=12782





------- Comment #11 from mitz at webkit.org  2007-03-13 13:42 PDT -------
Created an attachment (id=13618)
 --> (http://bugs.webkit.org/attachment.cgi?id=13618&action=view)
Reduction

This fails the ASSERT in InlineBox::root(), but doesn't crash.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.