Updates:
Cc: [email protected]
Comment #9 on issue 18830 by [email protected]: Tab crash because of
specially crafted SVG-file when visiting webpage
http://code.google.com/p/chromium/issues/detail?id=18830
Looks like stack overflow:
chrome_62f30000!WebCore::RenderObject::isInline(void)+0x3
chrome_62f30000!WebCore::RenderBoxModelObject::verticalPosition(bool
firstLine = false)+0x24
chrome_62f30000!WebCore::RenderInline::verticalPositionFromCache(bool
firstLine = false)+0x5b
chrome_62f30000!WebCore::RenderBoxModelObject::verticalPosition(bool
firstLine = false)+0x13b
chrome_62f30000!WebCore::RenderInline::verticalPositionFromCache(bool
firstLine = false)+0x5b
chrome_62f30000!WebCore::RenderBoxModelObject::verticalPosition(bool
firstLine = false)+0x13b
chrome_62f30000!WebCore::RenderInline::verticalPositionFromCache(bool
firstLine = false)+0x5b
chrome_62f30000!WebCore::RenderBoxModelObject::verticalPosition(bool
firstLine = false)+0x13b
chrome_62f30000!WebCore::RenderInline::verticalPositionFromCache(bool
firstLine = false)+0x5b
chrome_62f30000!WebCore::RenderBoxModelObject::verticalPosition(bool
firstLine = false)+0x13b
chrome_62f30000!WebCore::RenderInline::verticalPositionFromCache(bool
firstLine = false)+0x5b
chrome_62f30000!WebCore::RenderBoxModelObject::verticalPosition(bool
firstLine = false)+0x13b
chrome_62f30000!WebCore::RenderInline::verticalPositionFromCache(bool
firstLine = false)+0x5b
chrome_62f30000!WebCore::RenderBoxModelObject::verticalPosition(bool
firstLine = false)+0x13b
chrome_62f30000!WebCore::RenderInline::verticalPositionFromCache(bool
firstLine = false)+0x5b
chrome_62f30000!WebCore::RenderBoxModelObject::verticalPosition(bool
firstLine = false)+0x13b
chrome_62f30000!WebCore::RenderInline::verticalPositionFromCache(bool
firstLine = false)+0x5b
chrome_62f30000!WebCore::RenderBoxModelObject::verticalPosition(bool
firstLine = false)+0x13b
chrome_62f30000!WebCore::RenderInline::verticalPositionFromCache(bool
firstLine = false)+0x5b
chrome_62f30000!WebCore::RenderBoxModelObject::verticalPosition(bool
firstLine = false)+0x13b
chrome_62f30000!WebCore::RenderInline::verticalPositionFromCache(bool
firstLine = false)+0x5b
chrome_62f30000!WebCore::RenderBoxModelObject::verticalPosition(bool
firstLine = false)+0x13b
chrome_62f30000!WebCore::RenderInline::verticalPositionFromCache(bool
firstLine = false)+0x5b
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---
