[Webkit-unassigned] [Bug 30350] New: Reproducible crash on :hover - WebCore::RenderLayer::hitTest?

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=30350

           Summary: Reproducible crash on :hover -
                    WebCore::RenderLayer::hitTest?
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh Intel
        OS/Version: Mac OS X 10.5
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: federico.lebron at gmail.com


Created an attachment (id=41150)
 --> (https://bugs.webkit.org/attachment.cgi?id=41150)
Minimal test case

I'm not using 528+ but the nightly 532.2+, but there was no option for it.
However, it also crashes Safari 4.0.3.
Attached is a minimal test case. The crash is reproducible every time, on both
nightly and Safari 4.0.3.
All Safari extensions were disabled at the moment of the crashes.
Steps to reproduce:

Hover "fooooooooo". -> Crash.

Crash report: http://pastebin.com/f65b8e173
System info: http://pastebin.com/f6ebe5864

I'll also be attaching the crash report after submitting, just in case.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.