[Webkit-unassigned] [Bug 15765] ASSERTION FAILED: m_frame->page() in FrameLoader::tokenizerProcessedData using the new GMail interface

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=15765


freyther at handhelds.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #18170|                            |review?
               Flag|                            |




------- Comment #7 from freyther at handhelds.org  2007-12-29 10:44 PDT -------
Created an attachment (id=18170)
 --> (http://bugs.webkit.org/attachment.cgi?id=18170&action=view)
Remove the two asserts

I know a reduction needs to be done. But here is what is happening:

WebCore::Frame::pageDestroyed() is called because a Frame gets removed from the
FrameSet as the result of JavaScript code. But there were data for the
HTMLTokenizer of the Document and the m_timer was started. The timer fires
after we have removed the Frame from the FrameSet.

FrameLoader::tokenizerProcessedData calls checkCompleted() and checkCompleted()
is checking for if (m_frame->document()) and (m_frame->page()) at various
places and I would argue that removing the asserts is fine as the methods may
return 0 and checkCompleted() will continue to work


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.