[Webkit-unassigned] [Bug 17543] FixedTableLayout::layout() corrupts the heap

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Feb 25 17:24:04 PST 2008


http://bugs.webkit.org/show_bug.cgi?id=17543


mjs at apple.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
     Ever Confirmed|0                           |1




------- Comment #2 from mjs at apple.com  2008-02-25 17:24 PDT -------
Heap corruption is a potential security issue but not flagging as such since we
don't have an exploit.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list