[Webkit-unassigned] [Bug 9477] REGRESSION: fast/dom/replaceChild.html crashes on WebKit ToT in debug build

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=9477


ddkilzer at kilzer.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #8889|                            |review?
               Flag|                            |




------- Comment #4 from ddkilzer at kilzer.net  2006-06-17 12:27 PDT -------
Created an attachment (id=8889)
 --> (http://bugzilla.opendarwin.org/attachment.cgi?id=8889&action=view)
Patch v1

Patch v1 assumes that the WebFrame may get deallocated when the function is
called, so it refetches the debugger before using it again in
FunctionImp::callAsFunction().

I am running run-webkit-tests now.  Will report results when completed.


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.