[Webkit-unassigned] [Bug 22966] crash when destroying a webview that opened a page containing <script> tags

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=22966


gns at gnome.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #27531|                            |review?
               Flag|                            |




------- Comment #4 from gns at gnome.org  2009-02-10 11:23 PDT -------
Created an attachment (id=27531)
 --> (https://bugs.webkit.org/attachment.cgi?id=27531&action=view)
fixes the crash

It seems like there is this one condition in which m_group can be made NULL
while m_singlePageGroup is left as it is, which causes the ASSERT on initGroup
to fail, causing the crash.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.