<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>55596</bug_id>
          
          <creation_ts>2011-03-02 11:12:23 -0800</creation_ts>
          <short_desc>Add CRASH() for CSSSelector double frees</short_desc>
          <delta_ts>2011-03-02 13:24:34 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>CSS</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>53045</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Mihai Parparita">mihaip</reporter>
          <assigned_to name="Mihai Parparita">mihaip</assigned_to>
          <cc>abarth</cc>
    
    <cc>dglazkov</cc>
    
    <cc>eric</cc>
    
    <cc>koivisto</cc>
    
    <cc>webkit.review.bot</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>360929</commentid>
    <comment_count>0</comment_count>
    <who name="Mihai Parparita">mihaip</who>
    <bug_when>2011-03-02 11:12:23 -0800</bug_when>
    <thetext>Add CRASH() for CSSSelector double frees</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>360932</commentid>
    <comment_count>1</comment_count>
      <attachid>84440</attachid>
    <who name="Mihai Parparita">mihaip</who>
    <bug_when>2011-03-02 11:14:38 -0800</bug_when>
    <thetext>Created attachment 84440
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>360937</commentid>
    <comment_count>2</comment_count>
      <attachid>84440</attachid>
    <who name="Dimitri Glazkov (Google)">dglazkov</who>
    <bug_when>2011-03-02 11:29:12 -0800</bug_when>
    <thetext>Comment on attachment 84440
Patch

k</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>360953</commentid>
    <comment_count>3</comment_count>
    <who name="Mihai Parparita">mihaip</who>
    <bug_when>2011-03-02 11:56:19 -0800</bug_when>
    <thetext>Committed r80155: &lt;http://trac.webkit.org/changeset/80155&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>361032</commentid>
    <comment_count>4</comment_count>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2011-03-02 13:24:34 -0800</bug_when>
    <thetext>http://trac.webkit.org/changeset/80155 might have broken GTK Linux 64-bit Debug
The following tests are not passing:
fast/css-generated-content/005.html
fast/css-generated-content/beforeAfter-interdocument.html
fast/css-generated-content/no-openclose-quote.html
fast/invalid/residual-style.html</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>84440</attachid>
            <date>2011-03-02 11:14:38 -0800</date>
            <delta_ts>2011-03-02 11:29:12 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-55596-20110302111437.patch</filename>
            <type>text/plain</type>
            <size>2212</size>
            <attacher name="Mihai Parparita">mihaip</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogODAxMzUKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL0No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==
</data>
<flag name="review"
          id="76417"
          type_id="1"
          status="+"
          setter="dglazkov"
    />
          </attachment>
      

    </bug>

</bugzilla>