[Webkit-unassigned] [Bug 56773] REGRESSION(81035): crash in RenderDetails::removeChild

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=56773


Abhishek Arya <inferno at chromium.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |inferno at chromium.org




--- Comment #2 from Abhishek Arya <inferno at chromium.org>  2011-03-22 09:10:21 PST ---
This introduced multiple security regressions including this one and another one in acccessibility code. See testcase in http://trac.webkit.org/changeset/81648 in Chrome.

Luiz, can you please take a look.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.