[Webkit-unassigned] [Bug 19891] Broken HTML object elements cause de-reference of pointer to freed memory

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Jul 25 16:23:23 PDT 2008


chrisb at adobe.com changed:

           What    |Removed                     |Added
  Attachment #22469|0                           |1
        is obsolete|                            |
  Attachment #22484|                            |review?
               Flag|                            |

------- Comment #16 from chrisb at adobe.com  2008-07-25 16:23 PDT -------
Created an attachment (id=22484)
 --> (https://bugs.webkit.org/attachment.cgi?id=22484&action=view)
proposed fix with test

Added LayoutTest to proposed fix.

Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

More information about the webkit-unassigned mailing list