<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>55693</bug_id>
          
          <creation_ts>2011-03-03 11:37:04 -0800</creation_ts>
          <short_desc>Add another CRASH() for CSSSelector double frees</short_desc>
          <delta_ts>2011-03-03 11:54:33 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>CSS</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          <dependson>53045</dependson>
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Mihai Parparita">mihaip</reporter>
          <assigned_to name="Mihai Parparita">mihaip</assigned_to>
          <cc>dglazkov</cc>
    
    <cc>koivisto</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>361790</commentid>
    <comment_count>0</comment_count>
    <who name="Mihai Parparita">mihaip</who>
    <bug_when>2011-03-03 11:37:04 -0800</bug_when>
    <thetext>Add another CRASH() for CSSSelector double frees</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>361792</commentid>
    <comment_count>1</comment_count>
      <attachid>84598</attachid>
    <who name="Mihai Parparita">mihaip</who>
    <bug_when>2011-03-03 11:39:07 -0800</bug_when>
    <thetext>Created attachment 84598
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>361794</commentid>
    <comment_count>2</comment_count>
      <attachid>84598</attachid>
    <who name="Dimitri Glazkov (Google)">dglazkov</who>
    <bug_when>2011-03-03 11:40:47 -0800</bug_when>
    <thetext>Comment on attachment 84598
Patch

k</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>361809</commentid>
    <comment_count>3</comment_count>
    <who name="Mihai Parparita">mihaip</who>
    <bug_when>2011-03-03 11:54:33 -0800</bug_when>
    <thetext>Committed r80269: &lt;http://trac.webkit.org/changeset/80269&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>84598</attachid>
            <date>2011-03-03 11:39:07 -0800</date>
            <delta_ts>2011-03-03 11:40:47 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-55693-20110303113906.patch</filename>
            <type>text/plain</type>
            <size>2004</size>
            <attacher name="Mihai Parparita">mihaip</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogODAyNjAKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL0No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</data>
<flag name="review"
          id="76596"
          type_id="1"
          status="+"
          setter="dglazkov"
    />
          </attachment>
      

    </bug>

</bugzilla>