[Webkit-unassigned] [Bug 45737] [Chromium] fast/frames/frame-limit.html is crashing on debug bots after r67179:r67353 roll
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Thu Sep 16 06:28:55 PDT 2010
https://bugs.webkit.org/show_bug.cgi?id=45737
Pavel Podivilov <podivilov at chromium.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #67789| |review?, commit-queue?
Flag| |
--- Comment #2 from Pavel Podivilov <podivilov at chromium.org> 2010-09-16 06:28:54 PST ---
Created an attachment (id=67789)
--> (https://bugs.webkit.org/attachment.cgi?id=67789)
Proposed patch.
Regressed in r67182. In HTMLFrameOwnerElement::willRemove: frame->loader()->frameDetached() causes content frame destruction, then frame->disconnectOwnerElement() crashes.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list