48003 2010-10-20 13:21:55 -0700 REGRESSION [Chromium] Crash when mousing over <object> with padding or border 2010-10-20 13:42:32 -0700 1 1 1 Unclassified WebKit Plug-ins 528+ (Nightly build) PC OS X 10.5 RESOLVED DUPLICATE 47956 P2 Normal --- 1 mihaip jam oldest_to_newest 296965 0 71326 mihaip 2010-10-20 13:21:55 -0700 Created attachment 71326 Test case See attached test case. Mousing over the red area (which is the border on the <object> tag) results in a crash with the stack trace : *CRASHED* ( EXCEPTION_ACCESS_VIOLATION_EXEC @ 0x000000bc ) chromeclientimpl.cpp:600] WebKit::ChromeClientImpl::mouseDidMoveOverElement(WebCore::HitTestResult const &,unsigned int) chrome.cpp:333] WebCore::Chrome::mouseDidMoveOverElement(WebCore::HitTestResult const &,unsigned int) eventhandler.cpp:1399] WebCore::EventHandler::mouseMoved(WebCore::PlatformMouseEvent const &) webviewimpl.cpp:351] WebKit::WebViewImpl::mouseMove(WebKit::WebMouseEvent const &) webviewimpl.cpp:1101] WebKit::WebViewImpl::handleInputEvent(WebKit::WebInputEvent const &) http://trac.webkit.org/changeset/69154 touched the line that crashes in ChromeClientImpl::mouseDidMoveOverElement, so it's a likely culprit. (Originally reported as http://crbug.com/58803) 296989 1 jam 2010-10-20 13:42:32 -0700 *** This bug has been marked as a duplicate of bug 47956 *** 71326 2010-10-20 13:21:55 -0700 2010-10-20 13:21:55 -0700 Test case mouseover-crash.html text/html 94 mihaip PG9iamVjdCBkYXRhPSJhYm91dDpibGFuayIgaGVpZ2h0PSIyODUiIHdpZHRoPSI0NzkiIHN0eWxl PSJib3JkZXI6IHNvbGlkIHJlZCAxMDBweCI+PC9vYmplY3Q+Cg==