[Webkit-unassigned] [Bug 17559] REGRESSION(r30466): 15 out of 60 tests in fast/media crash under guard malloc

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Feb 28 22:02:53 PST 2008


------- Comment #6 from bfulgham at gmail.com  2008-02-28 22:02 PDT -------
There seems to be some kind of access to the CSSStyleSelector after it is
deallocated.  I keep hitting the destructor for a CSSStyleSelector (with
particular address), then enter the constructor (with a new address).  I then
enter the CSSStyleSelector::addViewportDependentMediaQueryResult for the
original (destroyed) this pointer.  The elements are all in an uninitialized
state, and then the program crashes.

Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

More information about the webkit-unassigned mailing list