[Webkit-unassigned] [Bug 22052] New: Assert and eventual crash when destroying element in an animation CB

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=22052

           Summary: Assert and eventual crash when destroying element in an
                    animation CB
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh
        OS/Version: Mac OS X 10.5
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: CSS
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: cmarrin at apple.com


Dean has an example which occasionally asserts and later crashes when
destroying an element in an animation end callback. It looks like it is
crashing when the element happens to get GC'ed during the callback. 

The assert is at AnimationBase.cpp:475.

I've asked Dean to submit the preliminary test case. I will try to get a layout
test which causes the crash when I do the patch.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.