[Webkit-unassigned] [Bug 24449] Bubble Spinner game page crashes

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sat Mar 7 22:55:25 PST 2009


------- Comment #4 from cwzwarich at uwaterloo.ca  2009-03-07 22:55 PDT -------
Created an attachment (id=28396)
 --> (https://bugs.webkit.org/attachment.cgi?id=28396&action=view)
Partial reduction

This is a small reduction, but it still uses the JS libraries on their site.
The problem is caused by them having two timers to update the iframe set to the
same timeout (presumedly due to undesirable code duplication on their part).
These timers are made at different times during parsing, so they are a bit
apart. It seems that canceling the request caused by the first timer and
processing the request caused by the second timer. Presumedly, the crash is
caused by using objects from the first partially completed load when processing
the second load, but I am not sure.

I make this crash consistently for me by opening it up in a bunch of new tabs.
Usually when I get to 4 or 5 it will crash.

Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

More information about the webkit-unassigned mailing list