[Webkit-unassigned] [Bug 25096] CRASH in WebCore::appendChildToContainer

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=25096


eric at webkit.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #29362|                            |review?
               Flag|                            |




------- Comment #6 from eric at webkit.org  2009-04-09 03:24 PDT -------
Created an attachment (id=29362)
 --> (https://bugs.webkit.org/attachment.cgi?id=29362&action=view)
Fix and test case

 LayoutTests/ChangeLog                              |   15 ++
 .../createDocument-namespace-err-expected.txt      |   51 +++++++
 .../createDocument-namespace-err.html              |   13 ++
 .../resources/createDocument-namespace-err.js      |  146 ++++++++++++++++++++
 WebCore/ChangeLog                                  |   14 ++
 WebCore/dom/ContainerNode.cpp                      |    1 +
 WebCore/dom/DOMImplementation.cpp                  |    5 +-
 7 files changed, 243 insertions(+), 2 deletions(-)


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.