[webkit-reviews] review requested: [Bug 13250] REGRESSION: Browser crash on clicking back button while at link specified above (inspector: ObjC wrapper outlives JS wrapper) : [Attachment 13926] Check JS wrapper validity and recreate if needed

[bugzilla-daemon at webkit.org]

mitz at webkit.org has asked  for review:
Bug 13250: REGRESSION: Browser crash on clicking back button while at link
specified above (inspector: ObjC wrapper outlives JS wrapper)
http://bugs.webkit.org/show_bug.cgi?id=13250

Attachment 13926: Check JS wrapper validity and recreate if needed
http://bugs.webkit.org/attachment.cgi?id=13926&action=edit

------- Additional Comments from mitz at webkit.org
I don't think it's possible or desirable to "kill" the object as suggested in
comment #8 (the way I understood it). This patch just fetches a new JS wrapper
for the DOM node if the old one is gone (it is also possible that the root is
invalid but the old wrapper is still alive thanks to some other JS object
pointing to it or any part of the DOM, in which case I believe the same old
wrapper will be refetched and subsequently reprotected by a different, valid
root object).