[Webkit-unassigned] [Bug 22200] New: Crash when close event is dispatched to MessagePort due to document destruction

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=22200

           Summary: Crash when close event is dispatched to MessagePort due
                    to document destruction
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh
        OS/Version: Mac OS X 10.5
            Status: NEW
          Severity: Normal
          Priority: P1
         Component: HTML DOM
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ap at webkit.org


According to current HTML5 text, a close event should be dispatched to
MessagePorts whose entangled ports belong to a document that is being
destructed.

This causes crashes for us in some circumstances, because the document can be
destroyed from the same GC run that destroys ports and their event listeners.
But also, this requirement is logically incorrect, because it makes behavior
depend on GC order in some cases.

This has not been resolved in HTML5 yet, but I want to fix the crash anyway.
Patch forthcoming.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.