Bug 8542

Summary:

large value= attributes in alphabetic list markers cause crash

Product:

WebKit

Reporter:

Eric Seidel (no email) <eric>

Component:

Layout and Rendering

Assignee:

Eric Seidel (no email) <eric>

Status:

RESOLVED FIXED

Severity:

Blocker

Keywords:

InRadar

Priority:

Version:

420+

Hardware:

Mac

OS:

OS X 10.4

URL:

http://www.security-protocols.com/sp-x26-advisory.php

Attachments:

Description	Flags
The fix	hyatt: review+

Eric Seidel (no email)

Reported 2006-04-22 22:21:40 PDT

large value= attributes in alphabetic list markers cause crash This was reported via: http://www.security-protocols.com/sp-x26-advisory.php This was due to our bogus handling of value= arguments in alphabetical lists. I fixed our behavior to match WinIE, but not FireFox (since they differed).

Attachments
The fix (5.14 KB, patch) 2006-04-23 00:27 PDT, Eric Seidel (no email)	hyatt: review+	Details Formatted Diff Diff
View All Add attachment proposed patch, testcase, etc.

Eric Seidel (no email)

Comment 1 2006-04-23 00:27:37 PDT

Created attachment 7919 [details] The fix

Dave Hyatt

Comment 2 2006-04-23 00:35:37 PDT

Comment on attachment 7919 [details] The fix r=me, but let's get a test with a bunch of list items that cycles through the alphabet a few times. We want to have one that records our behavior there I think.

Eric Seidel (no email)

Comment 3 2006-04-23 01:23:46 PDT

Actually, this patch isn't 100% correct. it seems to get Z wrong. I'll tweak it tomorrow, adding an additional layout test and land.

Eric Seidel (no email)

Comment 4 2006-04-23 02:34:27 PDT

<rdar://problem/4523889> <li value=1234567890 type=A> causes crash

Note You need to log in before you can comment on or make changes to this bug.