[Webkit-unassigned] [Bug 19762] Crash in svg/webarchive/svg-cursor-subresources.svg
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Thu Jun 26 12:59:55 PDT 2008
https://bugs.webkit.org/show_bug.cgi?id=19762
rwlbuis at gmail.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #21958| |review?
Flag| |
------- Comment #2 from rwlbuis at gmail.com 2008-06-26 12:59 PDT -------
Created an attachment (id=21958)
--> (https://bugs.webkit.org/attachment.cgi?id=21958&action=view)
First attempt
The problem was that CSSCursorImageValue used getElementById to lookup the
stored ids, but the
element pointed to by the id could be already removed from the document. I
think this only happens
during GC calls, using removeChild API does remove the element from the id
cache in the document.
Cheers,
Rob.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
More information about the webkit-unassigned
mailing list