[Webkit-unassigned] [Bug 39389] REGRESSION: Renderer crash in WebCore::HTMLElement::isContentEditable() const

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed May 19 16:43:15 PDT 2010


https://bugs.webkit.org/show_bug.cgi?id=39389





--- Comment #1 from Ojan Vafai <ojan at chromium.org>  2010-05-19 16:43:15 PST ---
The issue seems to be in HTMLElement::isContentEditable. renderer() points to something sane before document()->updateStyleIfNeeded() and to garbage after.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list