<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>31559</bug_id>
          
          <creation_ts>2009-11-16 09:41:06 -0800</creation_ts>
          <short_desc>Crash when accessing webkitTransition property after setting webkitTransitionProperty with invalid value.</short_desc>
          <delta_ts>2009-12-18 16:23:06 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebCore Misc.</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>PC</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Matt Pennig">pennig</reporter>
          <assigned_to name="Simon Fraser (smfr)">simon.fraser</assigned_to>
          <cc>cmarrin</cc>
    
    <cc>simon.fraser</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>164008</commentid>
    <comment_count>0</comment_count>
    <who name="Matt Pennig">pennig</who>
    <bug_when>2009-11-16 09:41:06 -0800</bug_when>
    <thetext>Scenario:
1) Get an element with CSS property -webkit-transition applied, or set it using JavaScript.
2) Set webkitTransitionProperty to some invalid value
3) Access webkitTransition property.

See attachment for reduction.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>164009</commentid>
    <comment_count>1</comment_count>
      <attachid>43311</attachid>
    <who name="Matt Pennig">pennig</who>
    <bug_when>2009-11-16 09:43:32 -0800</bug_when>
    <thetext>Created attachment 43311
Reduction (WARNING: Will crash Safari/WebKit)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>172476</commentid>
    <comment_count>2</comment_count>
    <who name="Simon Fraser (smfr)">simon.fraser</who>
    <bug_when>2009-12-16 12:42:43 -0800</bug_when>
    <thetext>&lt;rdar://problem/7477760&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>172478</commentid>
    <comment_count>3</comment_count>
      <attachid>45007</attachid>
    <who name="Simon Fraser (smfr)">simon.fraser</who>
    <bug_when>2009-12-16 12:44:10 -0800</bug_when>
    <thetext>Created attachment 45007
Testcase</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>173382</commentid>
    <comment_count>4</comment_count>
      <attachid>45199</attachid>
    <who name="Simon Fraser (smfr)">simon.fraser</who>
    <bug_when>2009-12-18 16:17:52 -0800</bug_when>
    <thetext>Created attachment 45199
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>173389</commentid>
    <comment_count>5</comment_count>
    <who name="Simon Fraser (smfr)">simon.fraser</who>
    <bug_when>2009-12-18 16:23:06 -0800</bug_when>
    <thetext>http://trac.webkit.org/changeset/52354</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="0"
              isprivate="0"
          >
            <attachid>43311</attachid>
            <date>2009-11-16 09:43:32 -0800</date>
            <delta_ts>2009-12-16 12:44:10 -0800</delta_ts>
            <desc>Reduction (WARNING: Will crash Safari/WebKit)</desc>
            <filename>url.txt</filename>
            <type>text/plain</type>
            <size>40</size>
            <attacher name="Matt Pennig">pennig</attacher>
            
              <data encoding="base64">aHR0cDovL2NoaXB0LmNvbS93ZWJraXQvMzE1NTkvaW5kZXguaHRtbA==
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>45007</attachid>
            <date>2009-12-16 12:44:10 -0800</date>
            <delta_ts>2009-12-16 12:44:10 -0800</delta_ts>
            <desc>Testcase</desc>
            <filename>index.html</filename>
            <type>text/html</type>
            <size>248</size>
            <attacher name="Simon Fraser (smfr)">simon.fraser</attacher>
            
              <data encoding="base64">PHAgaWQ9InBhcmEiPjwvcD4KCjxzY3JpcHQ+CnBhcmEuc3R5bGUud2Via2l0VHJhbnNpdGlvbj0n
d2lkdGggMjAwbXMgbGluZWFyLCBwYWRkaW5nLXRvcCAyMDBtcyBsaW5lYXInOwpwYXJhLnN0eWxl
LndlYmtpdFRyYW5zaXRpb25Qcm9wZXJ0eSA9ICd3aWR0aCwgcGFkZGluZy10b3AsIHBhZGRpbmct
Ym90dG9tJzsKCi8vIHRoZSBuZXh0IGxpbmUgd2lsbCBjcmFzaApwYXJhLnN0eWxlLndlYmtpdFRy
YW5zaXRpb247Cjwvc2NyaXB0Pgo=
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>45199</attachid>
            <date>2009-12-18 16:17:52 -0800</date>
            <delta_ts>2009-12-18 16:19:48 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>31559_patch.txt</filename>
            <type>text/plain</type>
            <size>4470</size>
            <attacher name="Simon Fraser (smfr)">simon.fraser</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL0NoYW5nZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxv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</data>
<flag name="review"
          id="27184"
          type_id="1"
          status="+"
          setter="darin"
    />
          </attachment>
      

    </bug>

</bugzilla>