WebKit Bugzilla
New
Browse
Log In
×
Sign in with GitHub
or
Remember my login
Create Account
·
Forgot Password
Forgotten password account recovery
RESOLVED FIXED
19745
Crash caused by DOM modification
https://bugs.webkit.org/show_bug.cgi?id=19745
Summary
Crash caused by DOM modification
Berend-Jan Wever
Reported
2008-06-24 08:12:36 PDT
The following HTML causes an Access Violation in Safari 3.1.1: <BODY onload="go()"><SCRIPT> function go() { document.body.outerHTML=''; document.createElement('map').innerHTML='<frameSet></frameSet><em><div><link></div></em><head></head><html>'; } </SCRIPT></BODY>
Attachments
Add attachment
proposed patch, testcase, etc.
David Kilzer (:ddkilzer)
Comment 1
2009-07-22 12:10:53 PDT
This does not reproduce in ToT WebKit. Marking as RESOLVED/FIXED.
Note
You need to
log in
before you can comment on or make changes to this bug.
Top of Page
Format For Printing
XML
Clone This Bug