<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>112585</bug_id>
          
          <creation_ts>2013-03-18 09:32:34 -0700</creation_ts>
          <short_desc>[V8] Crash when accessing onclick attribute of document from XMLHttpRequest</short_desc>
          <delta_ts>2013-03-18 09:59:23 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Adam Barth">abarth</reporter>
          <assigned_to name="Adam Barth">abarth</assigned_to>
          <cc>eric</cc>
    
    <cc>haraken</cc>
    
    <cc>webkit.review.bot</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>857199</commentid>
    <comment_count>0</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2013-03-18 09:32:34 -0700</bug_when>
    <thetext>[V8] Crash when accessing onclick attribute of document from XMLHttpRequest</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>857202</commentid>
    <comment_count>1</comment_count>
      <attachid>193582</attachid>
    <who name="Adam Barth">abarth</who>
    <bug_when>2013-03-18 09:33:43 -0700</bug_when>
    <thetext>Created attachment 193582
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>857203</commentid>
    <comment_count>2</comment_count>
      <attachid>193582</attachid>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2013-03-18 09:35:52 -0700</bug_when>
    <thetext>Comment on attachment 193582
Patch

LGTM.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>857228</commentid>
    <comment_count>3</comment_count>
      <attachid>193582</attachid>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2013-03-18 09:59:20 -0700</bug_when>
    <thetext>Comment on attachment 193582
Patch

Clearing flags on attachment: 193582

Committed r146074: &lt;http://trac.webkit.org/changeset/146074&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>857229</commentid>
    <comment_count>4</comment_count>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2013-03-18 09:59:23 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>193582</attachid>
            <date>2013-03-18 09:33:43 -0700</date>
            <delta_ts>2013-03-18 09:59:20 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-112585-20130318092934.patch</filename>
            <type>text/plain</type>
            <size>4238</size>
            <attacher name="Adam Barth">abarth</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTQ2MDY4CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
      

    </bug>

</bugzilla>