[Webkit-unassigned] [Bug 13365] ASSERT in WebDocumentLoaderMac::decreaseLoadCount() un-discarding Gmail message

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=13365





------- Comment #2 from mbritto at pleyo.com  2007-06-14 08:20 PDT -------
(In reply to comment #1)
> <rdar://problem/5133420>
> 
> also, this seems almost certainly related to
> http://bugs.webkit.org/show_bug.cgi?id=13360
> 
The bug 13360 is fixed now but this one still occurs.
I think the problem is in the HTMLFrameElementBase::willRemove() call because :
 - if we "undo discard" on Gmail with a new message contentFrame() returns 0
 - if we "undo discard" on Gmail with a reply message (the one which leads to
the crash) the contentFrame() returns something so we get in the "if" condition
and then we crash.

I've also tried to comment everything inside the if and I can no longer
reproduce the crash ; obviously that is not the solution but it shows it's
related to this fonction and maybe we need to modify the condition by adding
something to handle this particulary case.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.