[Webkit-unassigned] [Bug 12768] REGRESSION (r19595): Crash in WebCore::RenderLayer::scrollToOffset leaving macupdate.com via bookmark

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Feb 14 15:50:11 PST 2007


http://bugs.webkit.org/show_bug.cgi?id=12768





------- Comment #16 from mitz at webkit.org  2007-02-14 15:50 PDT -------
(In reply to comment #15)
> Is the issue that the tree is sitll in good enough shape to dispatch blurs
> during willRemove, but during detach, we detect we can't fire blur because
> we're doing teardown?

Documents going into the b/f cache aren't really torn down, detach() doesn't
traverse the tree, so the blur-on-detach didn't use to happen in that case. For
documents not going into the b/f cache, the focused node is reset before the
any child nodes are detached, so again the blur event isn't dispatched.

> If so, we could in theory pass enough info to know that the document is being
> torn down so that willRemove could avoid firing the blur...

I think the info might be available e.g. in the form of document()->attached()
being false (despite the node itself being attached).


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list