[Webkit-unassigned] [Bug 20540] New: HTML/JavaScript causes Read AV[3c]@WebKit.dll+4c00 #bd95c6be

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Aug 27 04:08:06 PDT 2008


https://bugs.webkit.org/show_bug.cgi?id=20540

           Summary: HTML/JavaScript causes Read AV[3c]@WebKit.dll+4c00
                    #bd95c6be
           Product: WebKit
           Version: 525.x (Safari 3.1)
          Platform: PC
               URL: http://skypher.com/SkyLined/Repro/Safari/AVR%5B3c%5D@Web
                    Kit.dll+4c00%20%23bd95c6be/repro.html
        OS/Version: Windows Vista
            Status: NEW
          Severity: Critical
          Priority: P2
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: berendjanwever at gmail.com


The following HTML file triggers a NULL pointer AV:
<BODY onload=go()></BODY>
<SCRIPT>
        function go() {
                var oOldBody = document.body;
                document.addEventListener("DOMNodeRemoved", function () {
                       
event.relatedNode.parentElement.removeChild(event.relatedNode);
                },true);
                document.body.parentElement.removeChild(document.body);
                oOldBody.innerHTML = "x<l><html>";
        }
</SCRIPT>


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list