[Webkit-unassigned] [Bug 12768] REGRESSION: Crash in WebCore::RenderLayer::scrollToOffset leaving macupdate.com via bookmark

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=12768





------- Comment #5 from mitz at webkit.org  2007-02-14 00:11 PDT -------
(In reply to comment #3)
> I'm using a bookmark to go to another site. It seems that typing url does not
> trigger the crash as you found.
> 

The search field on the page should be focused at the time the new page is
transitioned to. Focusing the URL field blurs the search field and avoids the
crash.

The document's focused node is sent a blur event as the new page comes in. In
trying to create a test case I noticed that the blur event is sent only if the
document is kept in the page cache. I don't know if the event is supposed to be
dispatched to a document that's being navigated away from, but I find it
suspicious that it depends on whether the document is staying in the page cache
or not (the reason being that Document::detach() nulls out the focused node
only if the document is not in the page cache).


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.