[Webkit-unassigned] [Bug 22966] crash when destroying a webview that opened a page containing <script> tags

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Feb 10 11:23:42 PST 2009


gns at gnome.org changed:

           What    |Removed                     |Added
  Attachment #27531|                            |review?
               Flag|                            |

------- Comment #4 from gns at gnome.org  2009-02-10 11:23 PDT -------
Created an attachment (id=27531)
 --> (https://bugs.webkit.org/attachment.cgi?id=27531&action=view)
fixes the crash

It seems like there is this one condition in which m_group can be made NULL
while m_singlePageGroup is left as it is, which causes the ASSERT on initGroup
to fail, causing the crash.

Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

More information about the webkit-unassigned mailing list