[Webkit-unassigned] [Bug 9477] REGRESSION: fast/dom/replaceChild.html crashes on WebKit ToT in debug build
bugzilla-daemon at opendarwin.org
bugzilla-daemon at opendarwin.org
Sat Jun 17 04:25:23 PDT 2006
http://bugzilla.opendarwin.org/show_bug.cgi?id=9477
opendarwin.org at mitzpettel.com changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |opendarwin.org at mitzpettel.co
| |m
------- Comment #2 from opendarwin.org at mitzpettel.com 2006-06-17 04:25 PDT -------
The immediate cause for the bug is that when a frame is deallocated along with
its WebCoreScriptDebugger, the corresponding WebCoreScriptDebuggerImp is
deleted but not detached. I'm surprised that it's otherwise okay to execute a
script in a frame whose WebFrame has been deallocated.
--
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
More information about the webkit-unassigned
mailing list