[Webkit-unassigned] [Bug 19891] Broken HTML object elements cause de-reference of pointer to freed memory

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=19891


chrisb at adobe.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #22469|                            |review?
               Flag|                            |




------- Comment #10 from chrisb at adobe.com  2008-07-24 13:45 PDT -------
Created an attachment (id=22469)
 --> (https://bugs.webkit.org/attachment.cgi?id=22469&action=view)
Proposed fix

Attaching proposed fix.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.