[Webkit-unassigned] [Bug 142333] [GTK] WebCore::TransformationMatrix::multiply segfaults when loading last.fm

Thu Mar 5 04:32:46 PST 2015

https://bugs.webkit.org/show_bug.cgi?id=142333

Joanmarie Diggs (irc: joanie) <jdiggs at igalia.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mcatanzaro at igalia.com

--- Comment #1 from Joanmarie Diggs (irc: joanie) <jdiggs at igalia.com> ---
Turns out it is simple to get this crash. Load this:

<html>
<body>
<div style="-webkit-transform: translate3d(0, 0, 0);">foo</div>
</body>
</html>

Reliably crashes for me. Both machines are F22, MiniBrowser with current master, not using the WebKitGtk jhbuild deps at the moment.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150305/9a6aeef4/attachment-0002.html>