[Webkit-unassigned] [Bug 13250] REGRESSION: Browser crash on clicking back button while at link specified above

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=13250





------- Comment #5 from mitz at webkit.org  2007-04-02 02:04 PDT -------
Created an attachment (id=13915)
 --> (http://bugs.webkit.org/attachment.cgi?id=13915&action=view)
Demo app (source)

To reproduce the bug with this application, build it an run it linked to TOT
WebKit. Do the following:

1) Press Return to load the "a" document.
2) Click the Store button to make and retain an Obj-C wrapper for the document.
3) Choose the "about:blank" document from the combo box, to load that into the
view. This destroys the JS wrapper for the document.
4) Click the Back button to go back to the "a" document.
5) Click the Use button to pass the document to JavaScript and try to use it.
This will trigger the crash.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.