[Webkit-unassigned] [Bug 27275] [Chromium] popup menus can crash when the selected index is -1

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sun Jul 19 23:02:27 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=27275


Eric Seidel <eric at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #32908|review?                     |review-
               Flag|                            |




--- Comment #9 from Eric Seidel <eric at webkit.org>  2009-07-19 23:02:25 PDT ---
(From update of attachment 32908)
This seems wrong:
     if (index < 0 || index >= numItems())
 890         return;
 891 
888892     if (index == -1 && m_popupClient) {

You've made some of the code unreachable.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list