[Webkit-unassigned] [Bug 12314] New: REGRESSION: Assertion failure and crash when going back in new window

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=12314

           Summary: REGRESSION: Assertion failure and crash when going back
                    in new window
           Product: WebKit
           Version: 420+ (nightly)
          Platform: Macintosh
               URL: data:text/html,<a href="http://webkit.org"
                    target="_blank">Click me!</a>
        OS/Version: Mac OS X 10.4
            Status: NEW
          Keywords: Regression
          Severity: Normal
          Priority: P1
         Component: History
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: pewtermoose at gmail.com


Load the URL in this bug report and click the link.  It'll open webkit.org in a
new window.  Click a link or two on the site, then go back to the previous
page.  You'll get the following assertion failure and crash (tested with
r18928):

ASSERTION FAILED: item->target().isEmpty() ||
m_mainFrame->tree()->find(item->target()) == m_mainFrame
(/Users/matt/Code/WebKit/WebCore/page/Page.cpp:130 void
WebCore::Page::goToItem(WebCore::HistoryItem*, WebCore::FrameLoadType))

And the relevant stack trace from the crash:
0   com.apple.WebCore           0x01223cb8
WebCore::Page::goToItem(WebCore::HistoryItem*, WebCore::FrameLoadType) + 312
(Page.cpp:130)
1   com.apple.WebCore           0x01223e08 WebCore::Page::goBack() + 88
(Page.cpp:111)
2   com.apple.WebKit            0x003867a0 -[WebView goBack] + 48
(WebView.mm:1939)


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.