Bug 12167 - REGRESSION: Iexploder crash in WebCore::RenderSlider::inDragMode()
Summary: REGRESSION: Iexploder crash in WebCore::RenderSlider::inDragMode()
Status: RESOLVED DUPLICATE of bug 12045
Alias: None
Product: WebKit
Classification: Unclassified
Component: Layout and Rendering (show other bugs)
Version: 420+
Hardware: Mac OS X 10.4
: P1 Normal
Assignee: Nobody
URL:
Keywords: Regression
Depends on:
Blocks:
 
Reported: 2007-01-08 13:05 PST by jonathanjohnsson
Modified: 2007-01-09 00:05 PST (History)
1 user (show)

See Also:

Attachments
Test case (136 bytes, text/html)
2007-01-08 13:07 PST, jonathanjohnsson 		no flags Details
Crash report (22.40 KB, text/plain)
2007-01-08 13:09 PST, jonathanjohnsson 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description jonathanjohnsson 2007-01-08 13:05:46 PST 
This code makes ToT (r18676) crash:

<head>
	<script language="javascript"></script>
</head>
<body>
<bgsound>
<wbr style="-webkit-appearance: sliderthumb-horizontal;">
_top

Found with Iexploder.
Comment 1 jonathanjohnsson 2007-01-08 13:07:12 PST 
Created attachment 12305 [details]
Test case
Comment 2 jonathanjohnsson 2007-01-08 13:09:40 PST 
Created attachment 12306 [details]
Crash report
Comment 3 jonathanjohnsson 2007-01-08 13:10:24 PST 
This is a regression from latest released Safari.
Comment 4 Mark Rowe (bdash) 2007-01-09 00:05:11 PST 

*** This bug has been marked as a duplicate of 12045 ***