[Webkit-unassigned] [Bug 43299] cross_fuzz geolocation window reload NULL pointer

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sat Jul 31 12:20:22 PDT 2010


https://bugs.webkit.org/show_bug.cgi?id=43299





--- Comment #2 from SkyLined <skylined at chromium.org>  2010-07-31 12:20:22 PST ---
Similar repro, different crash:
<script>
  target_win  = window.open("o");
  geolocation = target_win.clientInformation.geolocation;
  target_win.close();
  setTimeout(function () {
    geolocation.watchPosition(function(){});
  }, 100);
</script>

id:             WebKit::WebGeolocationServiceBridgeImpl::attachBridgeIfNeeded ReadAV at NULL (84783a4f90ebe3b9a3175f2689a442a6)
description:    Attempt to read from NULL pointer in stack:          WebKit::WebGeolocationServiceBridgeImpl::attachBridgeIfNeeded
                WebKit::WebGeolocationServiceBridgeImpl::startUpdating
                WebCore::Geolocation::startRequest
                WebCore::Geolocation::watchPosition
                WebCore::V8Geolocation::watchPositionCallback
                v8::internal::HandleApiCallHelper<...>
                v8::internal::Builtin_HandleApiCall
                v8::internal::Invoke
                v8::internal::Execution::Call
                v8::Function::Call

I assume this is a duplicate, so I am adding it to this bug. I haven't the time to find out for sure, so please check that when fixing the first crash, this second crash is also fixed.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list