[Webkit-unassigned] [Bug 15765] ASSERTION FAILED: m_frame->page() in FrameLoader::tokenizerProcessedData using the new GMail interface

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=15765





------- Comment #1 from mitz at webkit.org  2007-10-30 12:03 PDT -------
As far as I can tell this is a document in an Iframe containing a script to
remove the Iframe from the owner document. If that script gets written and run
under the write() call in HTMLTokenizer::timerFired(), then you will hit the
assert in FrameLoader::tokenizerProcessedData() because the page has been taken
out of the frame (and the document no longer points to the frame either).


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.