[Webkit-unassigned] [Bug 82896] Segmentation fault in JS drop-down menus in facebook.com

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Apr 2 09:49:36 PDT 2012


--- Comment #1 from chris fleizach <cfleizach at apple.com>  2012-04-02 09:49:36 PST ---
It's not happening for me with safari, but all i have is a fake Facebook account for testing so maybe i'm missing something. 

the backtrace would indicate that m_rendender is 0 while in

#1  0x00007ffff643c9b5 in WebCore::AccessibilityRenderObject::renderBoxModelObject() const () from /opt/gnome-3.0/lib64/libwebkitgtk-3.0.so.0

but there are checks for m_renderer in that method. 

    if (!m_renderer || !m_renderer->isBoxModelObject())
        return 0;

maybe those checks fixed the problem.

it would be interesting to attach to the process in gdb and while that menu disappeared observe that this same backtrace still occurs and that it does not crash

Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

More information about the webkit-unassigned mailing list