[Webkit-unassigned] [Bug 49976] [Qt] Fix crashes in debug mode

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Dec 6 12:05:30 PST 2010


https://bugs.webkit.org/show_bug.cgi?id=49976





--- Comment #14 from Zoltan Herczeg <zherczeg at webkit.org>  2010-12-06 12:05:30 PST ---

> Its global object should be marked through the base JSObject::markChildren method (which marks all of the properties slots, including anon. storage)

Looks reasonable. However, the InernalFunction object exits after GC (its vptr is still valid, thus it is not GC'ed) while the JSDOMWindow is invalid. How this can be happen? Seems black magic.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list