[Webkit-unassigned] [Bug 20765] Website crashes on load due to messy HTML in search form

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=20765


mrowe at apple.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |HasReduction, NeedsRadar,
                   |                            |ReviewedForRadar




------- Comment #2 from mrowe at apple.com  2008-09-10 12:51 PDT -------
Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_INVALID_ADDRESS at address: 0xbbadbeef
0x03559cdd in WebCore::RenderContainer::appendChildNode (this=0x1d00b97c,
newChild=0x1cb66e9c, fullAppend=true) at
WebCore/rendering/RenderContainer.cpp:417
417         ASSERT(!isBlockFlow() || (!newChild->isTableSection() &&
!newChild->isTableRow() && !newChild->isTableCell()));
(gdb) bt
#0  0x03559cdd in WebCore::RenderContainer::appendChildNode (this=0x1d00b97c,
newChild=0x1cb66e9c, fullAppend=true) at
WebCore/rendering/RenderContainer.cpp:417
#1  0x035752bc in WebCore::RenderInline::splitFlow (this=0x1d00b34c,
beforeChild=0x0, newBlockBox=0x1d00b88c, newChild=0x1d00b7ec, oldCont=0x0) at
WebCore/rendering/RenderInline.cpp:255
#2  0x035755a2 in WebCore::RenderInline::addChildToFlow (this=0x1d00b34c,
newChild=0x1d00b7ec, beforeChild=0x0) at WebCore/rendering/RenderInline.cpp:122


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.