[Webkit-unassigned] [Bug 63023] [chromium] Searching may cause a segmentation fault in WebPluginDocument

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Jun 20 16:09:14 PDT 2011


https://bugs.webkit.org/show_bug.cgi?id=63023


Andrew Russell <deadhead at google.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Searching may cause a       |[chromium] Searching may
                   |segmentation fault in       |cause a segmentation fault
                   |WebPluginDocument           |in WebPluginDocument




--- Comment #3 from Andrew Russell <deadhead at google.com>  2011-06-20 16:09:14 PST ---
This happens when the embed object is removed from the DOM.  The WebPluginDocument will then segmentation fault since |container| is null.  Since extensions are able to modify the DOM of a WebPluginPage, this could happen to a user without them knowing what has just occurred.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list