[Webkit-unassigned] [Bug 60559] Frequent crashes beneath WebCore::ScriptElement::prepareScript

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue May 10 11:02:37 PDT 2011


https://bugs.webkit.org/show_bug.cgi?id=60559





--- Comment #5 from Eric Seidel <eric at webkit.org>  2011-05-10 11:02:37 PST ---
I could see how this could happen.  We need a bunch more ASSERTs around things like takeScriptToProcess to make sure its' never being called when m_scriptToProcess is 0.  I don't know the exact series of steps which could cause this, but it's definitely possible to call takeScriptToProcess at the wrong time.  I suspect that some part of code is seeing the tree builder paused and assuming its for scripts and we're getitng in here.  not sure.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list