[Webkit-unassigned] [Bug 15886] New: LayoutTests/fast/events/mousedown_in_scrollbar.html crashes on WebKit/Qt

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=15886

           Summary: LayoutTests/fast/events/mousedown_in_scrollbar.html
                    crashes on WebKit/Qt
           Product: WebKit
           Version: 525+ (Nightly build)
          Platform: Other
        OS/Version: Mac OS X 10.4
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: freyther at handhelds.org


The above test case crashes on WebKit/Qt and I would like to get some feedback:

PlatformScrollBarQt (created by the RenderLayer) can crash in two ways:
   1.) It was removed from the FrameView and it acceses parent()
   2.) m_client is a dangling pointer after RenderLayer was destroyed.

1.) is easy to fix
2.) Adding a ScrollBar::setClient and calling it from
RenderLayer::destroyScrollBar to avoid the dangling pointer. I assume this
approach will be declared too scientific so see the other alternative


EventHandler gives the PlatformScrollBar a 2nd live because
m_lastScrollbarUnderMouse is a RefPtr and has the scrollbar stored. Rev 24942
introduced the test case and I extend the change to take
m_lastScrollbarUnderMouse into consideration.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.