[Webkit-unassigned] [Bug 18803] CRASH: ContainerNode::willRemove() called on deleted node

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=18803





------- Comment #10 from eric at webkit.org  2008-06-11 00:58 PDT -------
(In reply to comment #9)
> (From update of attachment 20904 [edit])
> I tried to land this patch and:
> 
>     1) Couldn't apply the patch because svn-apply didn't seem to understand the
> copied .png files.
>     2) Noticed the patch didn't include results for the test.
>     3) Couldn't get the test case to crash without the fix applied.
> 
> So I need to change this to review-. Lets get a working regression test and
> then find a way to land this fix.

The regression test only crashes if you run under MallocScribble.  I have not
re-verified that today, but that was the case when I wrote the test (see
earlier comments in the bug).

I've rebased that git branch to TOT, and can re-post tomorrow (including test
results).


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.