[Webkit-unassigned] [Bug 22080] CRASH at Scrollbar::invalidateRect due to null m_client

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Nov 5 00:22:01 PST 2008


https://bugs.webkit.org/show_bug.cgi?id=22080


darin at chromium.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|                            |http://www.megajogos.com.br/




------- Comment #2 from darin at chromium.org  2008-11-05 00:22 PDT -------
Our crash data shows that this bug happens frequently on
http://www.megajogos.com.br/

I could not manually repro, but one thing I noticed about that site is that it
repeatedly creates and destroys a DIV with overflow.  The contents of the
widget titled "Megajogos Informa" appears to change over time.  Sometimes the
DIV requires scrollbars, and sometimes it does not.

Given the way EventHandler and Scrollbar work (namely that Scrollbar is a
reference counted object), I'm beginning to suspect that the right answer is
for Scrollbar to null-check all accesses to its m_client.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list