[Webkit-unassigned] [Bug 25759] [Invalid memory write] HTMLCanvasElement object accessed after deletion

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=25759


eric at webkit.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
     Ever Confirmed|0                           |1




------- Comment #1 from eric at webkit.org  2009-05-13 18:34 PDT -------
Scribbled and guarded I'm not able to produce a crash here.

MallocScribble=1 run-webkit-tests --guard
LayoutTests/fast/canvas/canvas-as-image.html

But I was able to see this happening in the debugger.

I have a patch to fix this which I'll post shortly.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.