WebKit Bugzilla
Attachment 6677 Details for
Bug 7428
: TOT REGRESSION: crash in QString::operator= when getting an element from an empty iframe
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
reduction
get-crash.html (text/html), 304 bytes, created by
Geoffrey Garen
on 2006-02-23 09:51:53 PST
(
hide
)
Description:
reduction
Filename:
MIME Type:
Creator:
Geoffrey Garen
Created:
2006-02-23 09:51:53 PST
Size:
304 bytes
patch
obsolete
><html> ><head> ><script> >function test() >{ > var d = window.frames[0].document; > var crash = document.getElementById("anyIdWillDo"); > alert(crash); >} ></script> ></head> > ><body> ><input type="button" value="click to crash" onclick="test()"></input> ><iframe src="doesNotExist"></iframe> ></body> ></html>
<html> <head> <script> function test() { var d = window.frames[0].document; var crash = document.getElementById("anyIdWillDo"); alert(crash); } </script> </head> <body> <input type="button" value="click to crash" onclick="test()"></input> <iframe src="doesNotExist"></iframe> </body> </html>
View Attachment As Raw
Actions:
View
Attachments on
bug 7428
: 6677