[Webkit-unassigned] [Bug 138772] REGRESSION: Crash due to integer overflow beneath ComplexGetStatus::computeFor

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sun Nov 16 00:03:33 PST 2014


https://bugs.webkit.org/show_bug.cgi?id=138772

Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Repeated Load               |REGRESSION: Crash due to
                   |problem...cause screen to   |integer overflow beneath
                   |go blank                    |ComplexGetStatus::computeFo
                   |                            |r
           Keywords|                            |InRadar
           Priority|P2                          |P1
          Component|New Bugs                    |JavaScriptCore

--- Comment #1 from Alexey Proskuryakov <ap at webkit.org> ---
rdar://problem/18967311

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20141116/fcd31cee/attachment-0002.html>


More information about the webkit-unassigned mailing list