[Webkit-unassigned] [Bug 25394] CRASH in DocumentLoader::addResponse due to bad |this| pointer

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=25394





------- Comment #8 from fishd at chromium.org  2009-04-26 07:14 PDT -------
> Is onabort dispatched asynchronously? XMLHttpRequest used to not start from
> onunload, see bug 10904.

onabort is dispatched synchronously.  that bug is a little vague.  i don't have
any trouble starting an XHR from unload.  what happens is that the request is
aborted immediately afterwards when the containing IFRAME object is removed
from the DOM.  this is why my testcase involves an inner frame.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.