[Webkit-unassigned] [Bug 52325] New: Fix crashes when accessing speech input from script

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=52325

           Summary: Fix crashes when accessing speech input from script
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Critical
          Priority: P1
         Component: Forms
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: satish at chromium.org


If a webpage contains an input tag of type='search', enabling speech input for this element from script causes a crash. For e.g.
  <input type='search' id='field'>
  <script>
    document.getElementById('field').setAttribute('x-webkit-speech', '');  // <-- This causes a crash.
  </script>

This seems to happen because the child/inner elements of the input field are not reset properly causing a layout assertion.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.