Bug 94642

Summary:

Uninitialized read from CounterDirectives

Product:

WebKit

Reporter:

Elliott Sprehn <esprehn>

Component:

Layout and Rendering

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

jaepark

Priority:

Keywords:

EasyFix, HasReduction

Version:

528+ (Nightly build)

Hardware:

All

OS:

All

Bug Depends on:

94587

Bug Blocks:

Attachments:

Description	Flags
Reduction	none

Elliott Sprehn

Reported 2012-08-21 16:06:58 PDT

Created attachment 159789 [details] Reduction If you inherit a counter-increment and you have a counter-reset in an ancestor we'll read an uninitialized int.

Attachments
Reduction (302 bytes, text/html) 2012-08-21 16:06 PDT, Elliott Sprehn	no flags	Details
View All Add attachment proposed patch, testcase, etc.

Jae Hyun Park

Comment 1 2012-08-27 19:51:52 PDT

Should the result of the attachment be the following? 10 11Bar11 11

Elliott Sprehn

Comment 2 2012-08-27 20:35:57 PDT

(In reply to comment #1) > Should the result of the attachment be the following? > > 10 > 11Bar11 > 11 It should output: 10 10Bar10 10

Elliott Sprehn

Comment 3 2012-09-06 18:38:07 PDT

This is fixed by the refactoring in WKBug 94587.

Note You need to log in before you can comment on or make changes to this bug.