[Webkit-unassigned] [Bug 71229] V8MessageEvent::dataAccessorGetter does not return a reference to its caller

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=71229





--- Comment #5 from Dave Michael <dmichael at chromium.org>  2011-10-31 13:06:10 PST ---
Created an attachment (id=113075)
 --> (https://bugs.webkit.org/attachment.cgi?id=113075&action=review)
Test that shows MessageEvent's data property getting corrupted.

Open the javascript console if you want to see the mismatched strings. Open the page. The renderer will usually crash.

What this test does is create 10000 events in sequence, each with a unique and long string for its data contents. Each message is dispatched. We check that the received string matches the one we sent. For me, about 1 in 1500 times, the string does not match. The renderer also seems to crash pretty reliably.

I'll try to massage this in to a layout test so it can be checked in.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.