[Webkit-unassigned] [Bug 13591] REPRODUCIBLE CRASH inspecting embedded YouTube video

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=13591


mitz at webkit.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mitz at webkit.org




------- Comment #3 from mitz at webkit.org  2007-05-05 05:27 PDT -------
I think there are two issues here, both in +[WebScriptObject
_convertValueToObjcValue:originExecutionContext:executionContext:]:

1) It casts the result of getInternalInstance into an ObjcInstance without
checking that it is an ObjcInstance (I think currently there is no way to check
the language of an Instance).

2) It always prefers the runtime object to the DOM wrapper, meaning that even
in the case of a Web plugin it would return the scriptable object rather than
the DOM node, which is not what the Web Inspector expects.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.