[Webkit-unassigned] [Bug 56166] New: [V8] Crash when invoking MediaQueryListListener callback

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=56166

           Summary: [V8] Crash when invoking MediaQueryListListener
                    callback
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Mac OS X 10.5
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: HTML DOM
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: dominicc at google.com


Created an attachment (id=85423)
 --> (https://bugs.webkit.org/attachment.cgi?id=85423&action=review)
Manual repro. Open the page, then resize the window to be narrower than 200px. Crash.

MediaQueryList does not establish a V8 context when executing the callback. Thus Chromium crashes in the following kinds of situations:

You print a document that has a print media query list with an attached listener.

You load a document that has an iframe with a media query list with an attached listener.

You resize a document that has a min/max-width/height media query list with an attached listener.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.