[Webkit-unassigned] [Bug 31642] New: Crash in RenderObject::destroy()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=31642

           Summary: Crash in RenderObject::destroy()
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
               URL: http://journal.mycom.co.jp/news/2009/11/18/015/index.h
                    tml
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: jamesr at chromium.org


The URL above consistently crashes WebKit nightlies during page load (be sure
to click through the ad if one shows).  It looks like a virtual function is
being called on a destroyed/corrupt object.

This looks like a regression from Safari 4.0.3's version of WebKit.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.