<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>42391</bug_id>
          
          <creation_ts>2010-07-15 12:01:20 -0700</creation_ts>
          <short_desc>AX: Crash when table has empty thead tag</short_desc>
          <delta_ts>2010-07-15 14:48:00 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Accessibility</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>PC</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>0</everconfirmed>
          <reporter name="Chris Guillory">ctguil</reporter>
          <assigned_to name="chris fleizach">cfleizach</assigned_to>
          <cc>bdakin</cc>
    
    <cc>cfleizach</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>252028</commentid>
    <comment_count>0</comment_count>
      <attachid>61699</attachid>
    <who name="Chris Guillory">ctguil</who>
    <bug_when>2010-07-15 12:01:20 -0700</bug_when>
    <thetext>Created attachment 61699
layout test that reproduces crash

A crash is occurring in the chromium renderer.
http://code.google.com/p/chromium/issues/detail?id=47131

I have produced a layout test reproduces the crash on chromium testshell and webkit dumprendertree.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>252029</commentid>
    <comment_count>1</comment_count>
    <who name="chris fleizach">cfleizach</who>
    <bug_when>2010-07-15 12:05:44 -0700</bug_when>
    <thetext>great. we have a radar for this same crash that i could not repro. do you want me to work on a fix</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>252037</commentid>
    <comment_count>2</comment_count>
    <who name="Chris Guillory">ctguil</who>
    <bug_when>2010-07-15 12:23:34 -0700</bug_when>
    <thetext>If you can that would be great.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>252129</commentid>
    <comment_count>3</comment_count>
      <attachid>61727</attachid>
    <who name="chris fleizach">cfleizach</who>
    <bug_when>2010-07-15 14:44:58 -0700</bug_when>
    <thetext>Created attachment 61727
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>252131</commentid>
    <comment_count>4</comment_count>
      <attachid>61727</attachid>
    <who name="Darin Adler">darin</who>
    <bug_when>2010-07-15 14:46:05 -0700</bug_when>
    <thetext>Comment on attachment 61727
Patch

&gt; +        AX: Crash when table has empty thread tag

thead, not thread</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>252134</commentid>
    <comment_count>5</comment_count>
    <who name="chris fleizach">cfleizach</who>
    <bug_when>2010-07-15 14:48:00 -0700</bug_when>
    <thetext>http://trac.webkit.org/changeset/63466</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>61699</attachid>
            <date>2010-07-15 12:01:20 -0700</date>
            <delta_ts>2010-07-15 14:44:56 -0700</delta_ts>
            <desc>layout test that reproduces crash</desc>
            <filename>MyPatch.txt</filename>
            <type>text/plain</type>
            <size>1981</size>
            <attacher name="Chris Guillory">ctguil</attacher>
            
              <data encoding="base64">SW5kZXg6IExheW91dFRlc3RzL2FjY2Vzc2liaWxpdHkvdGFibGUtd2l0aC1lbXB0eS10aGVhZC1j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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>61727</attachid>
            <date>2010-07-15 14:44:58 -0700</date>
            <delta_ts>2010-07-15 14:46:05 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-42391-20100715144457.patch</filename>
            <type>text/plain</type>
            <size>3930</size>
            <attacher name="chris fleizach">cfleizach</attacher>
            
              <data encoding="base64">SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09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</data>
<flag name="review"
          id="49800"
          type_id="1"
          status="+"
          setter="darin"
    />
          </attachment>
      

    </bug>

</bugzilla>