[Webkit-unassigned] [Bug 51112] IDBTransactionBackedImpl instances can be accidentally deleted during calls to abort/commit.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=51112





--- Comment #6 from Andrei Popescu <andreip at google.com>  2010-12-17 11:18:24 PST ---
(In reply to comment #3)
> Besides Eric's comments, it looks good.  In theory, it might be possible to repro this in DRT by creating a transaction, leaving the scope where it was created, doing a gc(), and then praying.  It wouldn't surprise me if we couldn't come up with a reliable repro, but please give it a shot.

Ok, added a test. I can see in in Visual Studio the deletion happening before accessing member variables of the deleted instance but the test does not always crash for me as the memory isn't always reclaimed. However, if the memory is reclaimed, this test will trigger the crash.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.