<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>49108</bug_id>
          
          <creation_ts>2010-11-05 16:07:28 -0700</creation_ts>
          <short_desc>[Chromium] crasher on Mac with select elements that remove themselves on the change event</short_desc>
          <delta_ts>2010-11-08 12:05:42 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKit Misc.</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>PC</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>0</everconfirmed>
          <reporter name="Jay Civelli">jcivelli</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>commit-queue</cc>
    
    <cc>fishd</cc>
    
    <cc>levin</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>305608</commentid>
    <comment_count>0</comment_count>
    <who name="Jay Civelli">jcivelli</who>
    <bug_when>2010-11-05 16:07:28 -0700</bug_when>
    <thetext>In Chromium on Mac, open the attached page.
Click the select, select an item.
Chromium crashes.

Notes:
This happens because the select element removes himself from the DOM on the onchange event.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>305610</commentid>
    <comment_count>1</comment_count>
      <attachid>73134</attachid>
    <who name="Jay Civelli">jcivelli</who>
    <bug_when>2010-11-05 16:07:56 -0700</bug_when>
    <thetext>Created attachment 73134
Test page to recreate the crasher.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>305730</commentid>
    <comment_count>2</comment_count>
      <attachid>73165</attachid>
    <who name="Jay Civelli">jcivelli</who>
    <bug_when>2010-11-05 22:29:22 -0700</bug_when>
    <thetext>Created attachment 73165
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>305785</commentid>
    <comment_count>3</comment_count>
      <attachid>73165</attachid>
    <who name="Kent Tamura">tkent</who>
    <bug_when>2010-11-06 06:44:59 -0700</bug_when>
    <thetext>Comment on attachment 73165
Patch

LGTM</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>305868</commentid>
    <comment_count>4</comment_count>
      <attachid>73165</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2010-11-07 01:42:21 -0800</bug_when>
    <thetext>Comment on attachment 73165
Patch

Clearing flags on attachment: 73165

Committed r71480: &lt;http://trac.webkit.org/changeset/71480&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>305869</commentid>
    <comment_count>5</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2010-11-07 01:42:26 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>305904</commentid>
    <comment_count>6</comment_count>
    <who name="David Levin">levin</who>
    <bug_when>2010-11-07 15:35:42 -0800</bug_when>
    <thetext>I hope a test a was added somewhere.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>306271</commentid>
    <comment_count>7</comment_count>
    <who name="Jay Civelli">jcivelli</who>
    <bug_when>2010-11-08 12:05:42 -0800</bug_when>
    <thetext>@levin
Yes, we have a test for this in the Chromium tree
https://bugs.webkit.org/show_bug.cgi?id=49108

It will go in as soon as this patch makes it to the Chromium tree.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>73134</attachid>
            <date>2010-11-05 16:07:56 -0700</date>
            <delta_ts>2010-11-05 16:07:56 -0700</delta_ts>
            <desc>Test page to recreate the crasher.</desc>
            <filename>select_crash.html</filename>
            <type>text/html</type>
            <size>221</size>
            <attacher name="Jay Civelli">jcivelli</attacher>
            
              <data encoding="base64">PHNlbGVjdCBvbmNoYW5nZT0ic2VsZWN0Q2hhbmdlZCh0aGlzKSI+CiAgPG9wdGlvbj5IZWxsbzwv
b3B0aW9uPgogIDxvcHRpb24+Qmlqb3VyPC9vcHRpb24+CiAgPG9wdGlvbj5TYWx1dDwvb3B0aW9u
Pgo8L3NlbGVjdD4KIAo8c2NyaXB0PgpmdW5jdGlvbiBzZWxlY3RDaGFuZ2VkKHNlbGVjdCkgewpz
ZWxlY3QucGFyZW50Tm9kZS5yZW1vdmVDaGlsZChzZWxlY3QpOwp9Cjwvc2NyaXB0Pgo=
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>73165</attachid>
            <date>2010-11-05 22:29:22 -0700</date>
            <delta_ts>2010-11-07 01:42:21 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-49108-20101105222921.patch</filename>
            <type>text/plain</type>
            <size>2051</size>
            <attacher name="Jay Civelli">jcivelli</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1dlYktpdC9jaHJvbWl1bS9DaGFuZ2VMb2cgYi9XZWJLaXQvY2hyb21pdW0v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=
</data>

          </attachment>
      

    </bug>

</bugzilla>