[Webkit-unassigned] [Bug 31721] Using jQuery to show/hide IMG elements crashes WebKit

Wed May 18 10:56:55 PDT 2011

https://bugs.webkit.org/show_bug.cgi?id=31721

Andrey <andrey.petrov at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |andrey.petrov at gmail.com

--- Comment #6 from Andrey <andrey.petrov at gmail.com>  2011-05-18 10:56:55 PST ---
I've tried this on windows and linux/gtk and it crashes all the same. The reason is indeed renderer set to NULL as the detachment already happened. 

I tried to reproduce this issue (copying image of a node into clipboard) with some other trigger (.removeChild on button handler) and naturally it crashes the same way.

I think the right way to fix this issue would be to remove superfluous ASSERTs and if renderer absents just exit gracefully. I grepped code all around and in many places existence of a renderer for a given node is not assumed and a fallback is implemented. Moreover Android version already checks if render is 0 so it would appear to be the right way.

I tried to reproduce a case where the NODE actually could be deleted by the time action is activated. I did not succeed no matter how I tried to kill the node with javascript or even with meta refresh. So I think it is safe to leave assertion for node.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.