Crash when doing mousedrag on specific html which triggers replacement of that html
Reported by
flug...@gmail.com,
Jul 11 2016
|
|||
Issue descriptionUserAgent: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 Steps to reproduce the problem: 1. Load the attached testcase in a tab 2. Do 2 mousedrags over one of the buttons (press down left mousebutton and move at least 1 pixel before releasing) 3. Exactly at the second drag event, the tab crashes What is the expected behavior? It should not crash What went wrong? Tab is crashing with "Aw, Snap!" Crashed report ID: How much crashed? Just one tab Is it a problem with a plugin? No Did this work before? N/A Chrome version: 51.0.2704.106 Channel: stable OS Version: 4.6.3-1-ARCH GNU/Linux Flash Version: Shockwave Flash 11.9 r900 This is about the most minimal testcase I could make. To reproduce it requires 2 button-tags on the page, both requires another tag inside with ::before content set through css. The event must be triggered in a child of the html which is replaced. Note that it works fine if you don't move the mouse while clicking. See attached html file, or here https://gist.github.com/flugsio/83ca2ac8e78ef70e4de44371150655e8
,
Jul 13 2016
,
Jul 12 2017
Not repro on Version 61.0.3154.4 (Official Build) canary (64-bit) |
|||
►
Sign in to add a comment |
|||
Comment 1 by durga.behera@chromium.org
, Jul 12 2016Labels: -Type-Bug M-51 OS-Mac OS-Windows Type-Bug-Regression
Owner: yoichio@chromium.org
Status: Assigned (was: Unconfirmed)