[Webkit-unassigned] [Bug 53402] New: Add sanity check to help diagnose bug 52819

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=53402

           Summary: Add sanity check to help diagnose bug 52819
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: History
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: creis at chromium.org
                CC: mihaip at chromium.org


We're seeing many crash reports for bug 52819 in HistoryController::itemsAreClones.  The crashes happen when fromItem in recursiveSetProvisionalItem is null, which happens if the parent HistoryItem does not have a child item with the target frame name.

The crash reports suggest that fromItem has 0 children, which should be impossible.  (The previous call to itemsAreClones should verify that fromItem and item have the same number of children, and item clearly has children.)  On the flip side, it's possible for the crash to happen if fromItem has ended up with two children of the same name, though the crash reports don't seen to be consistent with that.

This bug is for adding a sanity check to help diagnose which (if either) of these is happening in practice, since we don't have any information about how to reproduce the crash yet.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.