[Webkit-unassigned] [Bug 18803] CRASH: ContainerNode::willRemove() called on deleted node

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=18803


eric at webkit.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #20904|                            |review?
               Flag|                            |




------- Comment #7 from eric at webkit.org  2008-04-30 12:37 PDT -------
Created an attachment (id=20904)
 --> (http://bugs.webkit.org/attachment.cgi?id=20904&action=view)
First pass fix

 LayoutTests/ChangeLog                              |   13 +++++++++++++
 LayoutTests/fast/dom/removeChildren-crash.html     |   14 ++++++++++++++
 .../fast/dom/resources/removeChildren-crash.html   |    3 +++
 .../fast/dom/resources/removeChildren-crash.png    |  Bin 0 -> 144 bytes
 .../fast/dom/resources/removeChildren-crash2.html  |    6 ++++++
 .../fast/dom/resources/removeChildren-crash2.png   |  Bin 0 -> 10292 bytes
 WebCore/ChangeLog                                  |   12 ++++++++++++
 WebCore/dom/ContainerNode.cpp                      |   20 ++++++++------------
 8 files changed, 56 insertions(+), 12 deletions(-)


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.