Bug 4088

Summary: Crash: Drag element with CSS ::Before absolute positioning applied to it
Product: WebKit Reporter: David Storey <dstorey>
Component: CSSAssignee: Darin Adler <darin>
Status: RESOLVED FIXED    
Severity: Major CC: darin
Priority: P1    
Version: 312.x   
Hardware: Mac   
OS: OS X 10.3   
URL: http://www.literarymoose.info/=/destroy/image-replacement.xhtml
Attachments:
Description Flags
reduction
none
Stack trace of crash
none
patch to add null check so we don't crash eric: review+

Description David Storey 2005-07-20 17:41:47 PDT
Steps to reproduce:

go to http://www.literarymoose.info/=/destroy/image-replacement.xhtml
drag image

Expected result:  nothing.

Actual result (10.3.9):  Safari crashes.  

I'm not sure if this happens with later versions.  I've created a reduction and the ::before statement 
needs a content, position: absolute;, and width and height to crash.  The text in the testcase can not be 
be selected, like in other browsers.  Testcase follows
Comment 1 David Storey 2005-07-20 17:42:57 PDT
Created attachment 3036 [details]
reduction
Comment 2 Chris Petersen 2005-07-28 23:09:12 PDT
Confirmed with Safari 2.0 (412.2) and TOT WebKit under 10.4.2 (8C46).
Comment 3 Chris Petersen 2005-07-28 23:11:46 PDT
Created attachment 3145 [details]
Stack trace of crash
Comment 4 Darin Adler 2005-10-10 08:25:51 PDT
It's easy to add enough nil checking that this doesn't crash. That still leaves us unable to select in this 
element, though.
Comment 5 Darin Adler 2005-10-10 08:28:11 PDT
Created attachment 4290 [details]
patch to add null check so we don't crash
Comment 6 Eric Seidel (no email) 2005-10-11 01:30:25 PDT
Comment on attachment 4290 [details]
patch to add null check so we don't crash

Looks good.  r=me.
Comment 7 Timothy Hatcher 2005-10-12 00:24:09 PDT
Landed.