[Webkit-unassigned] [Bug 11421] REGRESSION (r17299): Crash in loadrequest when opening a link with target="_blank"

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=11421


mitz at webkit.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Crash with r17299+,         |REGRESSION (r17299): Crash
                   |loadrequest                 |in loadrequest when opening
                   |                            |a link with target="_blank"
           Priority|P2                          |P1
           Keywords|                            |EasyFix, Regression
     Ever Confirmed|0                           |1
          Component|WebCore Misc.               |Page Loading
             Status|UNCONFIRMED                 |NEW
                 CC|                            |mitz at webkit.org




------- Comment #3 from mitz at webkit.org  2006-10-26 07:24 PDT -------
Missing null check on the result of find() here:-    WebCoreFrameBridge
*targetFrame = [_bridge findFrameNamed:request.m_frameName];
-    if (![_bridge canTargetLoadInFrame:targetFrame]) {
+    WebCoreFrameBridge *targetFrame =
Mac(tree()->find(request.m_frameName))->bridge();
+    if (![_bridge canTargetLoadInFrame:targetFrame])


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.