[Webkit-unassigned] [Bug 27275] New: Chromium popup menus can crash when the selected index is -1

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Jul 14 15:07:44 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=27275

           Summary: Chromium popup menus can crash when the selected index
                    is -1
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: paul at chromium.org


We've received crash dumps from users with call stacks indicating that
PopupListBox::isSelectableItem has been passed an index of -1. This method
should prevent such an invalid index from crashing.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list