[Webkit-unassigned] [Bug 30018] New: WebGL crashes with recent CanvasArray change

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=30018

           Summary: WebGL crashes with recent CanvasArray change
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Blocker
          Priority: P1
         Component: HTML DOM
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: kbr at google.com


https://bugs.webkit.org/show_bug.cgi?id=29906 introduced a change to the
CanvasArray base class which tests a PassRefPtr after its contents have been
transferred to a RefPtr, causing the NULL check to always fail and the base
pointer of the CanvasArray to always be NULL. This results in crashes on most
if not all WebGL content. Patch is attached.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.