[Webkit-unassigned] [Bug 19762] Crash in svg/webarchive/svg-cursor-subresources.svg

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Jun 26 12:59:55 PDT 2008


rwlbuis at gmail.com changed:

           What    |Removed                     |Added
  Attachment #21958|                            |review?
               Flag|                            |

------- Comment #2 from rwlbuis at gmail.com  2008-06-26 12:59 PDT -------
Created an attachment (id=21958)
 --> (https://bugs.webkit.org/attachment.cgi?id=21958&action=view)
First attempt

The problem was that CSSCursorImageValue used getElementById to lookup the
stored ids, but the
element pointed to by the id could be already removed from the document. I
think this only happens
during GC calls, using removeChild API does remove the element from the id
cache in the document.


Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

More information about the webkit-unassigned mailing list