[webkit-reviews] review requested: [Bug 21329] REGRESSION: crash in ScriptElement::notifyFinished : [Attachment 24077] v2 patch - same as before, but includes bug title in ChangeLog

[bugzilla-daemon at webkit.org]

Darin Fisher (Google) <darin at chromium.org> has asked  for review:
Bug 21329: REGRESSION: crash in ScriptElement::notifyFinished
https://bugs.webkit.org/show_bug.cgi?id=21329

Attachment 24077: v2 patch - same as before, but includes bug title in
ChangeLog
https://bugs.webkit.org/attachment.cgi?id=24077&action=edit

------- Additional Comments from Darin Fisher (Google) <darin at chromium.org>
I tried using GuardMalloc to help create a test, but it seems like there is
something else besides this issue that is causing DRT to crash under
GuardMalloc.  For example, fast/dom/script-element-gc.html crashes with or
without my fix under GuardMalloc.  I don't know how to get a call stack when
GuardMalloc detects an error, so I don't know why DRT is crashing under
GuardMalloc.