[Webkit-unassigned] [Bug 19744] New: AV caused by DOM modification

Tue Jun 24 07:55:52 PDT 2008

https://bugs.webkit.org/show_bug.cgi?id=19744

           Summary: AV caused by DOM modification
           Product: WebKit
           Version: 525.x (Safari 3.1)
          Platform: PC
               URL: http://skypher.com/SkyLined/Repro/Safari/AccessViolation
                    %201b362643.html
        OS/Version: Windows Vista
            Status: NEW
          Severity: Normal
          Priority: P1
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: berendjanwever at gmail.com

The below HTML causes an Access Violation in Safari 3.1.1:

<BODY onload="go()"><SCRIPT>
    var i=0;
    function go() {
                document.body.outerHTML="";
                var o = document.createElement("kbd");
                o.innerHTML =
'<frameSet></frameset><noBR><small><dir><link></dir></small></noBR>';
    }
</SCRIPT></BODY> 

The repro's of a bunch of the bugs I filed recently (this one, 19516, 19517,
19536 and 19537) all look very similar. Though they all crash in different
locations, they may be different manifestations of the same problem.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.