[Webkit-unassigned] [Bug 49976] [Qt] Fix crashes in debug mode

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=49976





--- Comment #7 from Robert Hogan <robert at webkit.org>  2010-11-30 12:46:04 PST ---
Hi Zoltan,

Thanks for looking at this.

(In reply to comment #6)
> This is a Garbage Collector issue. The m_structure of QtRuntimeMetaMethod is also a JSValue (JSDOMWindow). This object is freed by GC during the execution of table07.xhtml. 

How can you tell? I'd like to know how I could have spotted this!

>QtRuntimeMetaMethod is an InternalFunction. How an InternalFunction (JSObject descendant) should mark its asObject(this)->getAnonymousValue(0) ( == propertyStorage()[0] )? Would be good to know how QtRuntimeMetaMethod itself is marked.

Would a RefPtr protect(value) not do it? If so, why not?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.