[Webkit-unassigned] [Bug 23814] Crasher: Random unicode characters inserted into select options and

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=23814


ap at webkit.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mitz at webkit.org
          Component|HTML DOM                    |Layout and Rendering




------- Comment #12 from ap at webkit.org  2009-03-04 10:48 PDT -------
The problem seems to be that layout is not performed for the select element.
InlineTextBox::m_len is only set once (to the length of first option), so
random bytes are used for other options:

    TextRun textRun(textRenderer()->text()->characters() + m_start, m_len,
textRenderer()->allowTabs(), textPos(), m_toAdd, direction() == RTL,
m_dirOverride || styleToUse->visuallyOrdered());


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.