[Webkit-unassigned] [Bug 35014] Modifying UA rules from page JS crashes

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=35014


Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
           Severity|Critical                    |Normal
           Priority|P2                          |P1
                 CC|                            |ap at webkit.org,
                   |                            |mitz at webkit.org
     Ever Confirmed|0                           |1




--- Comment #2 from Alexey Proskuryakov <ap at webkit.org>  2010-02-17 14:40:53 PST ---
Looks like null dereference.

Thread 0 Crashed:
0   com.apple.WebCore                 0x019a07fb
WebCore::Document::updateStyleSelector() + 9 (Document.cpp:2459)
1   com.apple.WebCore                 0x018d887a
WebCore::CSSMutableStyleDeclaration::setNeedsStyleRecalc() + 232
(CSSMutableStyleDeclaration.cpp:488)
2   com.apple.WebCore                 0x018d96d4
WebCore::CSSMutableStyleDeclaration::setProperty(int, WebCore::String const&,
bool, bool) + 312 (CSSMutableStyleDeclaration.cpp:541)
3   com.apple.WebCore                 0x018d97fe
WebCore::CSSMutableStyleDeclaration::setProperty(int, WebCore::String const&,
bool, int&) + 62 (CSSMutableStyleDeclaration.cpp:512)
4   com.apple.WebCore                 0x01910b4c
WebCore::CSSStyleDeclaration::setProperty(WebCore::String const&,
WebCore::String const&, WebCore::String const&, int&) + 126
(CSSStyleDeclaration.cpp:101)
5   com.apple.WebCore                 0x01910c4b
WebCore::CSSStyleDeclaration::setProperty(WebCore::String const&,
WebCore::String const&, int&) + 119 (CSSStyleDeclaration.cpp:87)
6   com.apple.WebCore                 0x01c85ddc
WebCore::JSCSSStyleDeclaration::putDelegate(JSC::ExecState*, JSC::Identifier
const&, JSC::JSValue, JSC::PutPropertySlot&) + 242
(JSCSSStyleDeclarationCustom.cpp:186)
7   com.apple.WebCore                 0x01c84059
WebCore::JSCSSStyleDeclaration::put(JSC::ExecState*, JSC::Identifier const&,
JSC::JSValue, JSC::PutPropertySlot&) + 59 (JSCSSStyleDeclaration.cpp:255)
8   com.apple.JavaScriptCore          0x00e1c914
JSC::JSValue::put(JSC::ExecState*, JSC::Identifier const&, JSC::JSValue,
JSC::PutPropertySlot&) + 162 (JSObject.h:646)
9   com.apple.JavaScriptCore          0x00e4c138 cti_op_put_by_id + 156
(JITStubs.cpp:1231)
10  com.apple.JavaScriptCore          0x00e40ff4 jscGeneratedNativeCode + 0
(JITStubs.cpp:932)

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.