[Webkit-unassigned] [Bug 18803] CRASH: ContainerNode::willRemove() called on deleted node

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Jun 11 00:58:31 PDT 2008


------- Comment #10 from eric at webkit.org  2008-06-11 00:58 PDT -------
(In reply to comment #9)
> (From update of attachment 20904 [edit])
> I tried to land this patch and:
>     1) Couldn't apply the patch because svn-apply didn't seem to understand the
> copied .png files.
>     2) Noticed the patch didn't include results for the test.
>     3) Couldn't get the test case to crash without the fix applied.
> So I need to change this to review-. Lets get a working regression test and
> then find a way to land this fix.

The regression test only crashes if you run under MallocScribble.  I have not
re-verified that today, but that was the case when I wrote the test (see
earlier comments in the bug).

I've rebased that git branch to TOT, and can re-post tomorrow (including test

Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

More information about the webkit-unassigned mailing list