[Webkit-unassigned] [Bug 23900] Crash if any frame in a frameset is named _top

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=23900





------- Comment #11 from dglazkov at chromium.org  2009-03-01 13:11 PDT -------
Created an attachment (id=28145)
 --> (https://bugs.webkit.org/attachment.cgi?id=28145&action=view)
The original crash reduction

I went ahead and uploaded the crash reduction as you described. It does not
cause a crash on WebKit r41279 or Chromium r10680. BTW, you don't have to build
WebKit or Chromium: you can download nightlies from http://nightly.webkit.org/
or http://build.chromium.org/buildbot/continuous/.

I think the issue still exists, because naming inner frame "_top" causes
overwrite of the outer frame. But there's no crash. Right?


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.