[Webkit-unassigned] [Bug 22073] Palace in the Sky crashes WebKit

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=22073


jchaffraix at pleyo.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jchaffraix at pleyo.com
             Status|UNCONFIRMED                 |NEW
     Ever Confirmed|0                           |1
           Priority|P2                          |P1




------- Comment #4 from jchaffraix at pleyo.com  2008-11-23 17:11 PDT -------
Confirmed on Tip-Of-Trunk: the page attached to the bug does not crash for me
but one of the link pasted does. Trying it with a debug build, I get an
assertion failure:

ASSERTION FAILED: !m_pendingScripts.isEmpty()
(/Users/jchaffraix/WebKitTrunk/WebCore/html/HTMLTokenizer.cpp:1954 virtual void
WebCore::HTMLTokenizer::notifyFinished(WebCore::CachedResource*))

Moving it to P1 as it is a crasher.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.