Lines Matching full:crash
706 Test: fast/innerHTML/innerHTML-script-tag-crash.xhtml
1046 Remove static variables from removeAllChildren causing crash.
1050 Test: fast/images/svg-background-crash-on-refresh.html
2405 Fixes: http://bugs.webkit.org/show_bug.cgi?id=13611 (Crash in setAttributeNS setting href of SVG <use> to nonexistent symbol)
3653 <rdar://5530519> REGRESSION (303-310A18): Crash when closing tab with
3733 Fixed <rdar://5464402> Crash when running fast/frames/onload-remove-iframe-crash.html in DRT
3764 Test: fast/innerHTML/innerHTML-script-tag-crash.xhtml
3772 Fix Bug 15305: Crash when dragging an image when "load images automatically" preference is off
3793 disabled, any page load causes a crash in PropertyMap::put
3833 any page load causes a crash in PropertyMap::put
3928 fix a crash in the FrameLoader that can happen under certain
3931 Test: fast/loader/iframe-crash-on-missing-image.xhtml
4203 <rdar://problem/5511128> Crash closing or reloading this SVG
5614 Fix for <rdar://problem/5466459> CrashTracer: [USER] 1 crash in
5617 Mitz discovered that this crash appeared because r25128 made it
5621 layout and is what led to this crash. This patch fixes that by
5677 no big deal and the new code caused a crash on quit.
5981 <rdar://problem/5495790> NULL dereference crash beneath Bindings::RootObject::interpreter when saving Dashcode document
5983 The changes to WebScriptObject's _isSafeScript call also fixed the crash in Dashcode.
5990 is non-zero. We would return YES here when it wasn't safe and later crash with my modified layout tests.
5992 this fixed the Dashcode crash.
6107 Repro crash loading http://www.tivo.com/whatistivo/tivohd/index.html
6549 Test: fast/dom/Range-insertNode-crash.html
6621 * fast/table/large-rowspan-crash-expected.txt:
6706 crash at vw.com WebCore::PluginViewWin::disconnectStream.
6708 The following events would lead to this crash:
6715 The fix is to port NetscapePluginStreamLoader over from the Mac code and use it instead. This fixes the crash
6747 Crash loading http://www.microsoft.com if Silverlight 1.0 is installed.
6789 Leopard9A551 with Dashcode 112: Dashcode crash when dragging image into canvas.
6965 * fast/table/large-rowspan-crash-expected.txt:
7410 Crash seen on Windows
7762 Fixed: <rdar://problem/5472402> crash due to infinite recursion in expandUseElementsInShadowTree on SVG from wikipedia
7773 Fix for <rdar://problem/5473046> - Crash when resetting all icons
7808 <rdar://problem/5467203> CrashTracer: [USER] 1 crash in Mail at <unknown binary>: WebCore::Range::startContainer const
8667 Crash when using mouse wheel with plug-ins disabled.
8688 ADOBE: Safari 3 on Windows is passing bogus values in stream->headers in NPP_NewStream, causing Flash Player to crash.
8737 That's possibly a bug too, but it's better to fix the crash first.
8802 - fixed <rdar://problem/5455457> REGRESSION (9A527-9A535): Colloquy crash on launch in WebCoreScriptDebugger initWithDelegate (with announce.js plug-in installed)
9113 REGRESSION (r25283): Reproducible crash in HTMLObjectElement::getInstance under guard malloc
9129 Crash after QT movie completes playback at apple.com/imac
9294 - fix <rdar://problem/5423270> CrashTracer: [USER] 1 crash in Safari at com.apple.WebCore:
9709 Crash in RenderBlock::skipWhitespace during layout <rdar://problem/5439631>
9722 Mail crash at WebCore::Frame::styleForSelectionStart() when deleting a selection in a HTML message (http://www.yahoo.com/)
9724 Test: editing/style/temporary-span-crash.html
9975 Crash in WebCore::FontData::platformInit
9980 crash dumps this seems to occasionally happen when running Mail under guard malloc.
10026 <rdar://problem/5156801> REGRESSION: Crash at DeleteSelectionCommand::doApply() when deleting table content
10097 <rdar://problem/5418891> CrashTracer: [USER] 1 crash in Mail at -[WebViewEditor webView:shouldInsertText:replacingDOMRange:givenAction:]
10102 it out first, we'll assume that there was a new one and crash.
10313 Crash when visiting http://www.rockonflash.com/blog/?p=58
10399 Test: fast/images/text-content-crash-2.html
10427 Fix crash in http://www.infobae.com/interior/home.html
10509 <rdar://problem/5319511> REPRODUCIBLE CRASH: Canvas createPattern(canvas, ...) crashes on Windows (14189)
10621 - fix <rdar://problem/5415029> In Mail, a crash occurs at WebCore::Node::isDescendantOf()
10647 is non-0. If this happens, we would crash later because pastEndNode would
10648 not be in the tree. This change alone would prevent the crash, but we'd get
10651 won't crash immediately on documents that are not in a frame. For the
10748 Crash while setting display:none for a table cell with selection
10751 in middle of RenderTableCell::destroy(), cleaning section dirty bit. This would later crash in
10757 they could crash in similar way as cell.
10818 this patch to crash SVG tests. It's fixed now!
10821 crash in WebCore::FontFallbackList::fontDataAt() after dragging
11013 <rdar://problem/5394708> - Crash on launch with corrupt icon database
11115 Fix for <rdar://problem/5404899> REGRESSION: Mail crash in
11122 Style information was not up to date at the time of the crash
11129 counter before the crash point. The fix here is only to increment
11146 Font style information should not cause a crash if there are still
12033 <rdar://problem/5387578> Crash at ReplaceSelectionCommand::doApply() when pasting just after table cell content
12140 Fix for <rdar://problem/5393798> 100% reproducible crash in WebCore::Scrollbar::setValue
12177 Malformed table innerHTML causes Safari to crash in HTMLParser::handleError (14894)
12361 Some QStyles don't handle negative maximum well (crash)
12464 - fix <rdar://problem/5366582> crash on it.eurosport.yahoo.com page
12466 Test: fast/dynamic/inline-to-block-crash.html
12474 child list in the tree is no good, so we will crash
12561 is invoked with document still dirty which can then crash in number of interesting ways.
12588 <rdar://problem/5369110> CrashTracer: [USER] reproducible crash opening particular mail messages
12705 This is essentially a better fix for the crash in <rdar://problem/5362783>.
12934 <rdar://problem/5376156> Mail crash in DeleteButtonController::hide() when dropping selected image on DIV's border
13054 <rdar://problem/5369009> Crash due to infinite recursion in moveParagraphs on delete
13302 Fix crash when using QtWebKit canvas support.
13488 allocate an instance of a JSObject subclass on the stack which could lead to a crash during garbage collection.
13830 In Mail, a crash occurs at WTF::fastMalloc() when attempting to create a new HTML message from http://nytimes.com/
13903 Fixed NULL-dereference crash seen on buildbot.
13916 <rdar://problem/5361106> Crash in user style sheet when loading webpage
14082 CrashTracer: [USER] 1 crash in Mail at WebCore::PluginTokenizer::writeRawData(char const*, int)
14213 REGRESSION: reproducible crash in CoreFoundation!CFRunLoopFinished on Flash pages
14520 which could lead to a crash due to a dangling pointer.
14545 * manual-tests/remove-form-node-with-radio-buttons-crash.html: Added.
14639 - fix <rdar://problem/5126394> REGRESSION: Crash after clicking back button in test application (13250)
14693 - fix <rdar://problem/5350604> REGRESSION: Crash in inspector controller code after
14697 Replace an assertion that was firing with some code that at least doesn't immediately crash.
14703 - improve the fix for <rdar://problem/5298816> Crash redirecting message,
14704 in -[SharedBufferData initWithSharedBuffer:]; fixes a crash seen on the buildbot
14739 <rdar://problem/5336105> - WebBackForwardList created from scratch is unusable (always leads to crash)
14882 <rdar://problem/5298816> Crash redirecting message, in -[SharedBufferData initWithSharedBuffer:]
15293 Crash playing a very large QuickTime movie in Safari
15365 Dashcode Client crash when clicking on placemarks in Maps widget in WebCore::DeprecatedPtrListImpl::addIterator
15379 Safari Crash at http://www.exlibrisgroup.com/sfx_openurl.htm
15769 apps sometimes crash in WebCore::FontData::platformInit
16094 Repro crash due to saved state not being cleared when select and textarea elements
16097 Test: fast/forms/saved-state-adoptNode-crash.html
17058 Calling window.closed on a closed window causes Safari to crash
17065 Test: fast/dom/Window/window-closed-crash.html
17161 Fix for <rdar://problem/5329712> GMail crash when trying to compose new message
17563 - fix crash introduced by my patch for 5318732, only seen in release builds
17656 - fix <rdar://problem/5318732> REGRESSION: In Mail, a crash occurs when attempting to send
17851 REGRESSION: Crash when deleting table content in Leopard Mail
17856 current node is deleted. In the crash reported in the radar, we
17857 crash because the next node is the div that holds the delete button
17947 <rdar://problem/5295734> Repro crash closing tab/window @ maps.google.com in
17961 - fixed <rdar://problem/5220706> REGRESSION (TOT): repro crash in -[WebView(WebViewInternal) _addObject:forIdentifier:] [14425]
17981 * manual-tests/new-window-subresource-crash.html: Added.
18108 Repro crash (ASSERTION FAILED: oldText in RenderBlock::updateFirstLetter() during relayout of :before content with first-letter style)
18229 REGRESSION (r21854-r21869): Repro crash in RenderBlock::updateFirstLetter @ nola.com/rose/
18565 Bug 14516: crash loading multipart/x-mixed-replace data on windows safari
18567 NULL check m_resourceData to prevent a crash in Safari on Windows.
18788 <rdar://problem/5279521> REGRESSION: In Mail, a crash occurs at WebCore::Range::startPosition() when attempting to apply alignment to selected image/text in message body
19141 Fix Repro crash due to infinite recursion in HTMLParser::handleError @ youos.com
19662 Crash playing MP11 on cnbc.com
19927 Crash in Mail at WebCore::Frame::setUserStyleSheetLocation (reproducible w/ particular message)
19944 Fix a crash in ~PluginViewWin()
19946 This crash was introduced in r23827.
20228 <rdar://problem/5299513> REGRESSION: In Mail, a crash occurs when attempting to undo a newly created To Do
20705 Crash under gmalloc at WTF::RefPtr<WebCore::HTMLSliderThumbElement>::operator->
20709 Test: fast/forms/thumbslider-crash.html
21158 <rdar://problem/5290534> Crash at RenderTextControl::calcHeight() after deleting text in a search field
21433 Crash playing a very large QuickTime movie inside Safari.
21545 Fix for <rdar://problem/5266928> REGRESSION: crash/assert failure beneath RenderFrameSet::layOutAxis when loading
21553 Fix for <rdar://problem/5286978>, large font sizes crash Windows.
21907 <rdar://problem/5283789> Crash after dismissing JavaScript alert at end of test on http://lcamtuf.coredump.cx/ierace/
22010 Fix crash in fast/dom/dir-no-body.html
22882 Keypress causes typeahead crash on empty selects due to modulo 0.
23613 <rdar://problem/5204016> Repro crash on nytimes.com in MimeTypeRegistry::getMIMETypeForExtension
23799 Fix crash when using "check spelling while typing".
23871 Fix crash when retrieving title of context menu after it has been selected.
24457 Crash when destroying "null plugin"
24540 Fix <rdar://problem/5076610> Crash in PluginViewWin::updateWindow when
24793 Fixed <rdar://problem/5061807> STRESS (2): Crash in PlatformScrollbar::setRect
24945 Repro crash when viewing fast/dom/HTMLObjectElement/object-as-frame.html
24956 Crash in suggestedFilenameForResponse in two fast/encoding tests.
25240 - fixed <rdar://problem/5005120> Crash: selecting View all RSS Articles from context menu of bookmark folder
25670 Regression: Crash loading mp3.com
25903 Crash in plugin code watching yahoo news video
26327 (WebCore::ResourceRequest::doUpdatePlatformRequest): Prevent a crash if a null
26991 <rdar://problem/4818840> Crash occurs after selecting Print Preview from under the File menu if no printer is selected
27347 Crash launching Boomer after all options deselected in pref->security
27536 Fixed <rdar://problem/4760682> Crash clicking nav links at left loading
27874 <rdar://4866288> Crash on boomer quit
27884 Fixed a couple of things while investigating <rdar://4866288> (note this doesn't fix the crash yet):
28304 Crash loading pdf page (W4 form)
28416 Fixes a crash in SVG caused by an attempt to
29677 <rdar://problem/4760429> Crash in PluginStreamWin::~PluginStreamWin when
30370 Crash when <input type="file"> element removed while file chooser is open
30478 Crash in Settings::mediumFontSize() on ebay.com
30590 Fix a crash caused by focused children not being cleaned up
30608 Fixed <rdar://4768789> Crash on ebay.com in Frame::didOpenURL
30650 Crash on cnettv.com - PluginStreamWin::receivedResponse
30899 This fixes <rdar://problem/4766859> Crash in ResourceLoaderWndProc - line 232 at televisionwithoutpity.com, washingtonpost.com
31698 Fix crash in plugins due to Flash on nytimes.com
31886 Crash/ASSERT in plugins at Fark.com
31933 Make notImplemented() crash even when not linked against the debug CRT.
32066 a frame in it causes a crash because WebCore depends on WebKit to manage frame lifetime.
32237 <rdar://problem/4734743> Crash accessing YouTube.
33541 <rdar://problem/5250997> A crash occurs when selecting Undo Typing for a page that has been closed in tab
33550 Fix crash. Null check layer. Bug 13984.
33751 that are render-less, we'll crash when we try to remove
33964 <rdar://problem/5247178> REGRESSION: With CSS Edit 2.5, a crash occurs at WebCore::DeprecatedString::DeprecatedString when page fails to be extracted
34369 fixed this crash, but we have been inspired to add the same guard
34405 REGRESSION: crash on accessing a new iframe's contentWindow property
34771 - fix crash in http://bugs.webkit.org/show_bug.cgi?id=13792
34774 Test: fast/frames/removal-before-attach-crash.html
35883 create a To Do results in a crash
36595 REGRESSION: Crash loading message in Yahoo! Mail
36597 Tests: fast/css/stale-style-selector-crash-1.html
36598 fast/css/stale-style-selector-crash-2.html
36610 crash under recalcStyle() during updateRendering() or simply not recalculate
36887 REGRESSION (r13744-13750): Crash with empty gradient when drawing to canvas
36889 Fix crash by testing for zero stops, and returning transparent black
36900 Crash when loading nonexisting symbol
37007 Crash in [NSInputContext currentInputContext] when you click on this map
37414 REGRESSION: Crash emailing blog entry using Google Reader
37416 Test: fast/table/stale-grid-crash.html
37612 Fix for <rdar://problem/5211122> DRT crash below
37814 <rdar://problem/5209984> REGRESSION: Crash on click after clearing Facebook status
37863 - avoid crash on layout tests.
37865 Patched up my last change so that widgets don't crash.
37910 <rdar://problem/5207369> Crash when removing ordering from a nested list
37966 Gmail Editor: Crash when removing list style from underlined, multi-item list
38101 - fix <rdar://problem/4928671> Crash due to runaway recursion when fieldset has display: table-row (12066)
38271 REGRESSION: Crash closing live web cam viewer page
38628 Fix for <rdar://problem/5200081> Repro crash in PopupMenu::show clicking popup menu button after reload
39072 Crash starting Safari with JavaScript disabled.
39127 REGRESSION (r21367): Crash due to null document deref when closing bookmarks
39655 (WebCore::externalRepresentation): Don't crash if the frame lacks a view.
39967 Fix <rdar://problem/5188938> arc method on Canvas causes hang or crash
40293 Crash when dragging selection over absolutely positioned generated content on block element
40295 Test: fast/css-generated-content/positioned-background-hit-test-crash.html
40597 <rdar://problem/5120281> CrashTracer: [USER] 1 crash in Mail at WebCore::CSSComputedStyleDeclaration::copyInheritableProperties() const
40787 Justin backed out the whole patch on 2007-04-30 to avoid the crash.
40801 <rdar://problem/5174862> Crash resulting from DeprecatedString::insert()
40869 Fix for 13558, crash when using absolutely positioned generated content
41116 Crash when deleting a link inside an input field
41121 the document and crash.
41165 REGRESSION: Crash at WTF::fastFree() when arrowing or deleting backward through editable text (13493)
41645 REGRESSION (r20997-21003): Crash in WebCore::Node::document
41936 Fix for 13511, crash on a counters page. Make sure that RenderTexts
41972 Crash when creating a link in Leopard wiki server
42020 Crash when referencing an undefined entity in an XHTML document
42059 Reproducible crash (infinite recursion) with a layout test that submits on unload (13078)
42364 Crash occurs at WebCore::Frame::loader() when switching to Bookmarks view while loading standalone image
42739 Crash when dragging text into a link inside a table cell
42754 <rdar://problem/5133011> 64-bit: Attempting to paste copied text in a input field results in a crash at WebCore::Range::startPosition()
42757 The LONG_MAX on 64-bit was overflowing the int variables, causing this crash on paste.
42883 Fix for <rdar://problem/5155507> REGRESSION: Crash in
43454 Reproducible crash opening anekdot.ru
43498 Repro crash when the first argument to getMatchedCSSRules is not an element
43500 Test: fast/dom/Window/getMatchedCSSRules-null-crash.html
43510 Repro crash after referencing the user stylesheet from JavaScript
43771 GoogleDocs: Crash at WebCore::Range::startPosition() when creating a list from a link
43779 (null) and crash.
43992 Crash when indenting a selected ToDo
43996 causing the crash.
44249 all the logic on the path to this crash it appears that
44365 <rdar://problem/5080987> - Crash in DocumentLoader::frameLoader() const
44422 Crash opening a link in a new window from Gmail
44428 For now, adding a null check prevents this crash and restores the original, long standing regression
44765 Closing a page during slow cloning causes crash in setJSStatusBarText (13247)
44898 Reproducible crash loading an old version of amazon.com as a web archive
44984 Fixed <rdar://problem/5112273> REGRESSION(TOT): Reproducible crash loading
45030 REGRESSION: Crash deleting a selection that starts in an editable table cell
45036 of mergeDestination fails, and using it causes a crash.
45181 Reproducible crash loading an old version of amazon.com as a web archive
45217 Reproducible crash loading an old version of amazon.com as a web archive
45340 TOT REGRESSION: Crash deleting text in email (infinite recursion in shouldInsertNode)
45414 Reproducible crash after call to window.close()
45774 REGRESSION (r20506): Repro crash/assert when using scroll wheel on a list box taller than its contents
45786 REGRESSION: Repro crash when specifying the content property for an image
45788 Test: fast/images/text-content-crash.html
46512 Fixed <rdar://problem/5088234> REGRESSION: Crash occurs at WebCore::Node::
46516 The cause of the crash was the insertion of a <script> element whose
46533 Manual test case for: REGRESSION (r19559): Java applet crash
46579 Gmail Editor: Dragging message text in the message body results in a crash at WebCore::Frame::eventHandler()
46759 Another debug build crash from ASSERTION FAILED: !needsLayout()
46877 REGRESSION: Reproducible crash in Widget::getView
46879 Test: fast/frames/hover-timer-crash.html
46889 Crash in in ReplaceSelectionCommand if the fragment contains only a style span
47047 CrashTracer: [USER] repro crash in Safari at com.apple.WebCore: WebCore::FrameLoader::activeDocumentLoader const + 6
47134 <rdar://problem/5077892> In RapidWeaver 3.5.1, a crash occurs when attempting to load Safari Bookmarks in iMedia Browser
47166 catastrophic scenario that will (much of the time) result in a crash in RenderTableSection::paint.
47204 and ImageSource::setData(). This particular crash involved the ImageSource::setData() case.
47347 Crash after loading SVG fragment with XMLHttpRequest (Yosemite Map Geology Layer)
47359 Fix for <rdar://problem/5072678> Crash in
47404 In NetNewsWire 2.1.1 and 3.0d62, a crash occurs after triple-clicking a link on the page
47416 Crash in IconDatabase when private browsing is enabled.
47463 <rdar://5071341> - Crash in IconLoader::finishLoading()
47465 Though the reproducibility of the crash is still elusive, there's been a crasher likely uncovered
47466 Hyatt's recent caching changings to the IconLoader. This crash tends to hit on sites without favicons,
47508 Fix for <rdar://problem/5072678> Crash in
47515 MallocScribble crash revealed that this assumption was a bit too
47516 broad; the cause of the crash was that we were propagating events
47800 Fix crash when opening a SVG document which contains SVG elements, but no <svg> root element.
48014 * manual-tests/first-line-style-crash.html:
48209 Fixed <rdar://problem/5070967> REGRESSION (r20211): Repro crash when
48778 Adding null check to prevent the crash that happens on 2nd run of iBench HTML load test
48957 Reproducible crash in BidiContext::deref
48966 is what caused this crash. The boxes will be deleted on the next layout, but
49341 since we've established that ImageIO can actually crash if you yank the rug out from under it like that.
49682 REGRESSION (r17233-r17241): Repro crash when leaving a page whose unload handler submits a form
49684 Test: fast/loader/onunload-form-submit-crash-2.html
49711 REGRESSION: Gmail Editor: Dragging text into Reply (textarea) field results in a crash at WebCore::InsertNodeBeforeCommand::doApply()
50307 REGRESSION: crash on logging in on mijnpostbank.nl
50309 Test: http/tests/misc/onload-remove-iframe-crash-2.html
50604 REGRESSION: crash loading web archive (12634)
50718 REGRESSION: Painter IX:register - Crash in WebCore:: ResourceLoader::willSendRequest()
51032 (This fix was speculative. I didn't actually see a crash from this.)
51038 I didn't actually see a crash from this.)
51042 was speculative. I didn't actually see a crash from this.)
51263 have to use special code, as calling attach() on the shadow tree root element will crash,
51285 same number of member variables. The fact that some fields were not initialized could (and would) crash the
51584 4XPath tests crash on lang() function
51589 (WebCore::StringImpl::reverseFind): Do not crash with empty strings.
51591 (WebCore::XPath::FunLang::doEvaluate): Do not crash when an element has no
51875 REGRESSION: Reproducible crash at IMDb in WebCore::FrameLoader::stopLoadingSubframes
51892 Fix ARM crash due to accessing non-4-byte-aligned memory
51912 <rdar://problem/5030628> - Crash opening a new window with the
51934 Fix <rdar://problem/5024233> Crash while using Find on empty document
52280 crash in http/tests/incremental/frame-focus-before-load.html
53159 Crash with Scriptalicious javascript library
53338 REGRESSION: Crash when navigating forward from an error page in WebFrameLoaderClient::dispatchDidReceiveContentLength
54022 <rdar://problem/5014313> - Crash in FrameLoader::restoreScrollPositionAndViewState()
54759 - <rdar://problem/5006414> REGRESSION: Crash occurs at WebCore::Frame::loader()
55250 may cause a crash.
55466 REGRESSION (r19341-r19385): Reproducible crash in "onselectstart" event
55664 <rdar://problem/4995250> REGRESSION: Crash occurs at WebCore::RenderLayer::scrollToOffset() when leaving page that has focus in field
55666 No test case added. This crash doesn't occur in DumpRenderTree because the B/F cache is turned off.
55813 REGRESSION: Crash when closing the web inspector with text selected
55836 REGRESSION: Crash undoing delete in textarea
55872 REGRESSION (r19490): Crash on ipx-server.de
56133 Crash in WebCore:: ResourceLoader::willSendRequest()
56135 This fix was causing a crash in at least one layout test.
56182 Fixes <rdar://problem/4985497> - Crash when opening a new window to "Same Page"
56411 Fixed: <rdar://problem/4874059> REGRESSION: Painter IX:register - Crash in WebCore:: ResourceLoader::willSendRequest()
56611 - fixed <rdar://problem/4928675> REGRESSION: Crash in CGBlt_copyBytes under WebCore::Font::drawGlyphs (12083)
56637 - fixed <rdar://problem/4975133> ASSERT failure and crash right-clicking on image in SVG use test
56640 Test: svg/cust/use-events-crash.svg
56741 Crash when enumerating XPath namespace axis
56949 WebDataSource to be reattached and thus causing a crash.
57060 REGRESSION: Crash with user stylesheet set
57620 Very large (~500MB) images cause reproducible Safari crash
57950 A crash when trying to use XPath functions normalize-space(), string-length() and number()
58097 Test: fast/layers/generated-layer-scrollbar-crash.html
58608 REGRESSION: Crash in checkForHeadCharset() under GuardMalloc
58668 Fixes: http://bugs.webkit.org/show_bug.cgi?id=12502 (Reproducible crash when browsing SVG map.)
59352 - fixed <rdar://problem/4939366> REGRESSION: Assertion failure and crash when going back in history (12314)
59362 - fixed <rdar://problem/4963871> REGRESSION: Crash occurs at WebCore::Frame::loader() when attempting to open a saved archive file
59441 REGRESSION: Repro crash when a second background image is animated
59443 Test: fast/images/animated-background-image-crash.html
59966 Bug 12458: Crash in W3C-SVG-1.1/animate-elem-09-t.svg running layout tests under guard malloc
60149 Repro crash when onscroll handler deletes the scrolled object
61046 Reproducible crash in WebCore::SVGPreserveAspectRatio::parsePreserveAspectRatio
61220 Fix for <rdar://problem/4948128> REGRESSION: A crash occurs at
61286 eBay Editor: Crash occurs at WebCore::Range::startPosition() after applying ordered list styling to selected text
61292 designMode outdent causes crash (11750)
61577 REGRESSION: GMail Editor: Attempting to remove formatting from selection results in a crash at WebCore::Range::checkDeleteExtract()
62183 Fix for <rdar://problem/4912129> REGRESSION: Crash occurs at
62198 on before or after causes a crash.
62451 Bug 12357: Reproducible crash in WebCore::Settings::isJavaScriptEnabled in svg/custom/js-update-bounce.svg under guard-malloc
62474 Bug 12355: Reproducible crash in WebCore::parseNumber in svg/custom/js-update-bounce.svg under guard-malloc
62504 REGRESSION: Crash on load (mutation event dispatch under the image element constructor deletes the element)
62622 crash in css2.1/t1202-counter-09-b.html
62664 REGRESSION: Crash on Flickr after hitting cancel from adding a note
62666 Test: fast/forms/text-set-value-crash.html
62678 Repro crash when onscroll handler deletes the scrolled object
63213 Bug 7926: Crash using -callWebScriptMethod to access offsetTop property
63360 REGRESSION: Repro crash when dragging an image from the window to the address bar
63545 REGRESSION: A crash occurs at WebCore::Range::processContents () when removing formatting from selected text (that contains a link)
63640 <rdar://problem/4823028> REGRESSION: Reproducible crash when selecting a popup/button with ::selection pseudostyle
65176 Fix for bug 11924: WebCore would crash on any HTML content
65206 Don't crash when constructing a GraphicsContext with a 0
65873 Fix crash on platforms that don't use the new loader yet.
65989 REGRESSION(r18614-18640): Crash in WebCore::SharedBuffer::hasPlatformData()
66837 REGRESSION: Mail crash when dragging text into a link
67000 This fixes the crash seen on Windows -- the underlying problem
67935 (WebCore::XSLTProcessor::transformToString): Fix the crash for real this time.
69198 GMail Editor: Crash when dropping content into certain list items
69202 inside that space causes a crash because positionForCoordinates
69305 REGRESSION: Reproducible crash going back in Back/Forward history
69688 REGRESSION (r18333): Crash in RenderFrameSet::layOutAxis()
69690 Test: fast/frames/negative-remaining-length-crash.html
69722 will cause a crash), but we at least handle inline-table and inline-block now.
69890 http://bugs.webkit.org/show_bug.cgi?id=12105 - Crash visiting Acid2 test page
70674 Bug 12061: Crash in WebCore::Shared<WebCore::StringImpl>::deref
