[Webkit-unassigned] [Bug 24992] crash at http://browserspy.dk/browser.php

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=24992





------- Comment #10 from robert at roberthogan.net  2009-05-06 14:30 PDT -------
removing:

    connect(webView, SIGNAL(statusBarMessage(const QString&)),
            this, SIGNAL(showStatusBarMessage(const QString&)));

in line 296 of tabwidget.cpp in arora prevents the crash from happening.

long story short: the repaint of the status bar in qt cascades all the way up
to the qmainwindow and then all the way down through the qwebview. given that
the statusbar is getting repainted because a doc is getting initialized in
WebCore::FrameLoader::init, once the rendering iterates through the frameviews
in RenderView::updateWidgetPositions it eventually hits the frame that is still
being constructed and still has an uninitialized/null doc in it and so crashes
in WebCore::FrameView::layout.

none of my patches (except the first one) can actually prevent this crash, so
as kenne suggests, the trick will be to catch it in qt and prevent the
rendering from taking place. 'better patch' won't necessarily do this because
the frame with the null doc is not at the top level of the qwebview.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.