[Webkit-unassigned] [Bug 13250] REGRESSION: Browser crash on clicking back button while at link specified above (inspector: ObjC wrapper outlives JS wrapper)

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=13250


mitz at webkit.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #13926|                            |review?
               Flag|                            |




------- Comment #12 from mitz at webkit.org  2007-04-02 14:18 PDT -------
Created an attachment (id=13926)
 --> (http://bugs.webkit.org/attachment.cgi?id=13926&action=view)
Check JS wrapper validity and recreate if needed

I don't think it's possible or desirable to "kill" the object as suggested in
comment #8 (the way I understood it). This patch just fetches a new JS wrapper
for the DOM node if the old one is gone (it is also possible that the root is
invalid but the old wrapper is still alive thanks to some other JS object
pointing to it or any part of the DOM, in which case I believe the same old
wrapper will be refetched and subsequently reprotected by a different, valid
root object).


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.