[Webkit-unassigned] [Bug 45737] [Chromium] fast/frames/frame-limit.html is crashing on debug bots after r67179:r67353 roll

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Sep 16 06:28:55 PDT 2010


https://bugs.webkit.org/show_bug.cgi?id=45737


Pavel Podivilov <podivilov at chromium.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #67789|                            |review?, commit-queue?
               Flag|                            |




--- Comment #2 from Pavel Podivilov <podivilov at chromium.org>  2010-09-16 06:28:54 PST ---
Created an attachment (id=67789)
 --> (https://bugs.webkit.org/attachment.cgi?id=67789)
Proposed patch.

Regressed in r67182. In HTMLFrameOwnerElement::willRemove: frame->loader()->frameDetached() causes content frame destruction, then frame->disconnectOwnerElement() crashes.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list