[Webkit-unassigned] [Bug 56004] REGRESSION: crash in nextLinePosition when extending selection forward by line in an empty document

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Mar 9 11:26:13 PST 2011


https://bugs.webkit.org/show_bug.cgi?id=56004





--- Comment #6 from Ryosuke Niwa <rniwa at webkit.org>  2011-03-09 11:26:13 PST ---
Wow! That was quick.

(In reply to comment #4)
> (From update of attachment 85201 [details])
> Seems like a null dereference and hence not security-sensitive.

Yes, I don't think this is a security vulnerability.

(In reply to comment #5)
> (From update of attachment 85201 [details])
> OK.  Should we do previousLinePosition too?

I can't reproduce the crash when I do backwards but you're right that we should probably fix there as well.  Should we include in this patch without a test?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list