WebKit Bugzilla
New
Browse
Log In
×
Sign in with GitHub
or
Remember my login
Create Account
·
Forgot Password
Forgotten password account recovery
RESOLVED FIXED
8542
large value= attributes in alphabetic list markers cause crash
https://bugs.webkit.org/show_bug.cgi?id=8542
Summary
large value= attributes in alphabetic list markers cause crash
Eric Seidel (no email)
Reported
2006-04-22 22:21:40 PDT
large value= attributes in alphabetic list markers cause crash This was reported via:
http://www.security-protocols.com/sp-x26-advisory.php
This was due to our bogus handling of value= arguments in alphabetical lists. I fixed our behavior to match WinIE, but not FireFox (since they differed).
Attachments
The fix
(5.14 KB, patch)
2006-04-23 00:27 PDT
,
Eric Seidel (no email)
hyatt
: review+
Details
Formatted Diff
Diff
View All
Add attachment
proposed patch, testcase, etc.
Eric Seidel (no email)
Comment 1
2006-04-23 00:27:37 PDT
Created
attachment 7919
[details]
The fix
Dave Hyatt
Comment 2
2006-04-23 00:35:37 PDT
Comment on
attachment 7919
[details]
The fix r=me, but let's get a test with a bunch of list items that cycles through the alphabet a few times. We want to have one that records our behavior there I think.
Eric Seidel (no email)
Comment 3
2006-04-23 01:23:46 PDT
Actually, this patch isn't 100% correct. it seems to get Z wrong. I'll tweak it tomorrow, adding an additional layout test and land.
Eric Seidel (no email)
Comment 4
2006-04-23 02:34:27 PDT
<
rdar://problem/4523889
> <li value=1234567890 type=A> causes crash
Note
You need to
log in
before you can comment on or make changes to this bug.
Top of Page
Format For Printing
XML
Clone This Bug