[Webkit-unassigned] [Bug 20403] [Gtk] Segfault after a table with an iframe is attempted to be added twice to DOM model with javascript.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=20403





------- Comment #15 from lkcl at lkcl.net  2008-09-19 09:39 PDT -------
Created an attachment (id=23568)
 --> (https://bugs.webkit.org/attachment.cgi?id=23568&action=view)
move g_object_unref() and m_frame = 0 into frameLoaderDestroyed()

no more crashes.
the clue was the two occurrences where m_frame is set to 0.
that, and looking at the qt and wx frame loaders, they do
exactly what this patch does - get rid of the m_frame in
frameLoaderDestroyed() and do nothing - at all - in any of
the detachedFromParentN() functions.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.