[Webkit-unassigned] [Bug 31067] New: Chromium crashes when a plugin invokes the document.open function via NPAPI

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=31067

           Summary: Chromium crashes when a plugin invokes the
                    document.open function via NPAPI
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: WebCore JavaScript
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ananta at chromium.org


This is a chromium only issue.
If a plugin invokes the document.open function on the document object via the
NPN_Invoke function 
then the chrome renderer process crashes.

The crash occurs in the V8 bindings code.

The associated chromium bug is
http://code.google.com/p/chromium/issues/detail?id=25703

I will submit a patch for this.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.