[Webkit-unassigned] [Bug 18460] New: Webkit crashes in WebCore::AccessibilityObject::clearChildren when reading slashdot comments

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=18460

           Summary: Webkit crashes in
                    WebCore::AccessibilityObject::clearChildren when reading
                    slashdot comments
           Product: WebKit
           Version: 526+ (Nightly build)
          Platform: Macintosh
               URL: http://slashdot.org
        OS/Version: Mac OS X 10.5
            Status: UNCONFIRMED
          Severity: Major
          Priority: P1
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: anssi at aketzu.net


When I go to slashdot and read comments webkit (nightly, r31848) seems to crash
pretty much every time. Crash occurs just after scrolling down to some critical
point. If page is opened "normally" then everything works.

Steps to reproduce:
1. Go to http://slashdot.org
2. Open some article (with enough comments) to background tab
3. Change to that tab
4. Scroll down
5. Crash!


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.