[Webkit-unassigned] [Bug 19891] Broken HTML object elements cause de-reference of pointer to freed memory
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Fri Jul 25 16:23:23 PDT 2008
https://bugs.webkit.org/show_bug.cgi?id=19891
chrisb at adobe.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #22469|0 |1
is obsolete| |
Attachment #22484| |review?
Flag| |
------- Comment #16 from chrisb at adobe.com 2008-07-25 16:23 PDT -------
Created an attachment (id=22484)
--> (https://bugs.webkit.org/attachment.cgi?id=22484&action=view)
proposed fix with test
Added LayoutTest to proposed fix.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
More information about the webkit-unassigned
mailing list