[Webkit-unassigned] [Bug 22966] crash when destroying a webview that opened a page containing <script> tags

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Feb 10 12:41:37 PST 2009


https://bugs.webkit.org/show_bug.cgi?id=22966


darin at apple.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #27531|review?                     |review-
               Flag|                            |




------- Comment #6 from darin at apple.com  2009-02-10 12:41 PDT -------
(From update of attachment 27531)
Why would we want to clear m_singlePageGroup in this case? If the group name is
empty then this item should still be in the single page group, so you wouldn't
want to clear it. Also, m_singlePageGroup is an OwnPtr so it will be
initialized to 0, so the change to Page is unneeded and hence wrong; we left
that out on purpose.

I think the right fix is to set m_group to m_singlePageGroup.get() rather than
to 0.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list