[Webkit-unassigned] [Bug 53912] [Qt] Fix crashes in QMetaObject::metacall

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=53912





--- Comment #9 from Zoltan Herczeg <zherczeg at webkit.org>  2011-02-08 06:22:52 PST ---
gdb commands:
  break Source/WebCore/bridge/runtime_root.cpp:88
  ignore 1 20

This RootObject will cause the crash, when it is invalidated by:

#0  JSC::Bindings::RootObject::invalidate (this=0x8374e08)
    at ../../../Source/WebCore/bridge/runtime_root.cpp:115
#1  0xb65f6ce3 in ~ScriptController (this=0x836a4ec)
    at ../../../Source/WebCore/bindings/js/ScriptController.cpp:89
#2  0xb6bcc3e4 in ~Frame (this=0x836a1d0) at ../../../Source/WebCore/page/Frame.cpp:245
#3  0xb658ba71 in WTF::RefCounted<WebCore::Frame>::deref (this=0x836a1d4)
    at ../../../Source/JavaScriptCore/wtf/RefCounted.h:141
#4  0xb658bab3 in WTF::derefIfNotNull<WebCore::Frame> (ptr=0x836a1d0)
    at ../../../Source/JavaScriptCore/wtf/PassRefPtr.h:59
#5  0xb658bad9 in ~RefPtr (this=0xb270bc64) at ../../../Source/JavaScriptCore/wtf/RefPtr.h:58
#6  0xb6bfe1fe in ~Page (this=0xb270bc38) at ../../../Source/WebCore/page/Page.cpp:207
#7  0xb6f3d8ac in ~QWebPagePrivate (this=0xb270b308) at ../../../Source/WebKit/qt/Api/qwebpage.cpp:354
#8  0xb6f3dd27 in ~QWebPage (this=0xb270b128) at ../../../Source/WebKit/qt/Api/qwebpage.cpp:1945
#9  0x08068618 in ~WebPage (this=0xb270b128)
    at ../../../../Tools/DumpRenderTree/qt/DumpRenderTreeQt.cpp:168
#10 0xb4267676 in QObjectPrivate::deleteChildren ()
   from /usr/local/Trolltech/Qt-4.7.1/lib/libQtCore.so.4
#11 0xb426e5df in QObject::~QObject () from /usr/local/Trolltech/Qt-4.7.1/lib/libQtCore.so.4

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.