[Webkit-unassigned] [Bug 52144] chrome.dll!WebCore::RenderInline::computeRectForRepaint RecursionSOV (1183ea20d0a009e322db9c207b75d525)

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Mar 3 06:58:44 PST 2011


https://bugs.webkit.org/show_bug.cgi?id=52144





--- Comment #1 from Berend-Jan Wever <skylined at chromium.org>  2011-03-03 06:58:44 PST ---
More details: this is a recursive function call in chrome.dll!WebCore::RenderInline::computeRectForRepaint.

I bet the repro causes a loop in the renderer tree. When it gets rendered, the computeRectForRepaint funtion calls itself over and over until the all stack space is used. The browser then crashes.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list