[webkit-reviews] review requested: [Bug 22966] crash when destroying a webview that opened a page containing <script> tags : [Attachment 27531] fixes the crash

[bugzilla-daemon at webkit.org]

Gustavo Noronha (kov) <gns at gnome.org> has asked  for review:
Bug 22966: crash when destroying a webview that opened a page containing
<script> tags
https://bugs.webkit.org/show_bug.cgi?id=22966

Attachment 27531: fixes the crash
https://bugs.webkit.org/attachment.cgi?id=27531&action=review

------- Additional Comments from Gustavo Noronha (kov) <gns at gnome.org>
It seems like there is this one condition in which m_group can be made NULL
while m_singlePageGroup is left as it is, which causes the ASSERT on initGroup
to fail, causing the crash.