[Webkit-unassigned] [Bug 52629] [Qt] Crash in WebCore::ScrollView::repaintContentRectangle

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=52629


Benjamin Poulain <benjamin.poulain at nokia.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |QtTriaged
           Priority|P3                          |P1
                 CC|                            |benjamin.poulain at nokia.com,
                   |                            |noam.rosenthal at nokia.com




--- Comment #2 from Benjamin Poulain <benjamin.poulain at nokia.com>  2011-01-23 08:29:31 PST ---
Untested by me but I still set P1 since it is a crash in common path.

> This patch seems to fix the issue, but as I'm new to WebKit, I'm unsure whether it just hides the real problem or not.

This is not good enough. If the element removed from the array is <= current index, a rect will be ignored. You need to find what is modifying the data structure, and add a test case.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.