[Webkit-unassigned] [Bug 41651] REGRESSION (Safari 4 - Safari 5): Webkit plugin embedded into an IFRAME doesn't work due to dynamic global object not having a RootObject

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=41651


Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|[ REGRESSION - Safari 4 /   |REGRESSION (Safari 4 -
                   |Safari5 ] (6533.16,r62241)  |Safari 5): Webkit plugin
                   |Webkit plugin embedded into |embedded into an IFRAME
                   |an IFRAME crashes when      |doesn't work due to dynamic
                   |calling callWebScriptMethod |global object not having a
                   |or get nil arguments        |RootObject
             Status|UNCONFIRMED                 |NEW
          Component|New Bugs                    |WebCore JavaScript
                 CC|                            |ggaren at apple.com
     Ever Confirmed|0                           |1




--- Comment #11 from Alexey Proskuryakov <ap at webkit.org>  2010-10-07 15:34:10 PST ---
We fail to create a RootObject for the middle frame, so convertValueToObjcObject() cannot find one, and bails out.

The top frame has a RootObject because DocumentWriter::begin() creates it, and the plug-in frame has it thanks to runtimeObjectCustomGetOwnPropertySlot() asks HTMLPlugInElement to create it. But nothing creates a RootObject for the middle frame.

This sounds like it should affect NPAPI plug-ins, too.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.