Bug 12167

Summary:

REGRESSION: Iexploder crash in WebCore::RenderSlider::inDragMode()

Product:

WebKit

Reporter:

jonathanjohnsson

Component:

Layout and Rendering

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED DUPLICATE

Severity:

Normal

CC:

ddkilzer

Priority:

Keywords:

Regression

Version:

420+

Hardware:

Mac

OS:

OS X 10.4

Attachments:

Description	Flags
Test case	none
Crash report	none

jonathanjohnsson

Reported 2007-01-08 13:05:46 PST

This code makes ToT (r18676) crash: <head> <script language="javascript"></script> </head> <body> <bgsound> <wbr style="-webkit-appearance: sliderthumb-horizontal;"> _top Found with Iexploder.

Attachments
Test case (136 bytes, text/html) 2007-01-08 13:07 PST, jonathanjohnsson	no flags	Details
Crash report (22.40 KB, text/plain) 2007-01-08 13:09 PST, jonathanjohnsson	no flags	Details
View All Add attachment proposed patch, testcase, etc.

jonathanjohnsson

Comment 1 2007-01-08 13:07:12 PST

Created attachment 12305 [details] Test case

jonathanjohnsson

Comment 2 2007-01-08 13:09:40 PST

Created attachment 12306 [details] Crash report

jonathanjohnsson

Comment 3 2007-01-08 13:10:24 PST

This is a regression from latest released Safari.

Mark Rowe (bdash)

Comment 4 2007-01-09 00:05:11 PST

*** This bug has been marked as a duplicate of 12045 ***

Note You need to log in before you can comment on or make changes to this bug.