[Webkit-unassigned] [Bug 15603] Slashdot Firehose Crash

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=15603





------- Comment #5 from john at johnmoe.com  2007-10-21 21:29 PDT -------
simple reduction.  simple fix (array_object.cpp line 66):

static inline void freeStorage(JSValue** storage)
{
  if (storage)   // <-- add this check
     fastFree(storage - 2);
}


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.