[Webkit-unassigned] [Bug 9031] REGRESSION: Crash when closing tabs on newegg.com

bugzilla-daemon at opendarwin.org bugzilla-daemon at opendarwin.org
Sun Jun 4 17:13:36 PDT 2006


http://bugzilla.opendarwin.org/show_bug.cgi?id=9031


darin at apple.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |darin at apple.com,
                   |                            |ggaren at apple.com




------- Comment #3 from darin at apple.com  2006-06-04 17:13 PDT -------
I tried a few times and could not reproduce it.

But the backtrace makes it look like a problem where a timer fires after the
DOMWindow is gone. Looks like the code is calling defaultView on a document and
getting a 0 back.

So I think the fix is to add a nil check to the toJS function that takes a
DOMWindow in kjs_window.cpp.


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list