[Webkit-unassigned] [Bug 6152] windowScriptObject isn't properly releasing values that it retains with setValue:forKey:

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=6152


Geoffrey Garen <ggaren at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|REOPENED                    |RESOLVED
         Resolution|                            |INVALID
                 CC|                            |ggaren at apple.com




--- Comment #4 from Geoffrey Garen <ggaren at apple.com>  2010-01-28 13:22:28 PST ---
I think this is just a misunderstanding about garbage collection.

When you call -setValue:forKey: on a WebScriptObject, the value gets retained
by a garbage collected JavaScript object. The value doesn't get released until
the garbage collected JavaScript object is collected, which is not necessarily
immediately.

That's why manually releasing the value later causes a crash -- that's an
over-release.

Do you have any data that shows the value is *never* released? If not, I think
this bug is invalid.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.