[Webkit-unassigned] [Bug 61494] REGRESSION (r78342) - Crash when Document calls into a freed DocumentLoader

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=61494





--- Comment #2 from Brady Eidson <beidson at apple.com>  2011-05-26 09:17:19 PST ---
9 com.apple.WebCore:  WebCore::DocumentWriter::deprecatedFrameEncoding const + 12 <==
  9 com.apple.WebCore:  WebCore::FrameLoader::addExtraFieldsToRequest + 798
    6 com.apple.WebCore:  WebCore::FrameLoader::loadDifferentDocumentItem + 1603
      6 com.apple.WebCore:  WebCore::HistoryController::recursiveGoToItem + 412
        6 com.apple.WebCore:  WebCore::HistoryController::goToItem + 165
          6 com.apple.WebCore:  WebCore::Page::goToItem + 235

...is another form.

Plugging this at any one particular DocumentLoader->writer() call site seems like the wrong direction to go.  I think we have to fix the general design problem.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.