[Webkit-unassigned] [Bug 53045] REGRESSION (r74807): memory corruption after CachedResourceLoader refactoring

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Mar 2 11:00:59 PST 2011


https://bugs.webkit.org/show_bug.cgi?id=53045





--- Comment #8 from Mihai Parparita <mihaip at chromium.org>  2011-03-02 11:00:58 PST ---
(In reply to comment #7)
> Maybe someone has deleted CSSSelector that is actually allocated from m_selectorArray? CSSSelector should probably have private destructor.

The CSSSelector destructor ends up being invoked by the OwnPtr member of RareData. Any ideas for how to make this work without making OwnPtr a friend? 

It seems like adding a m_deleted flag/CRASH check in CSSSelector would help with catching this.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list