[Webkit-unassigned] [Bug 82872] New: [V8] Web Inspector: don't crash when resolving DOM wrapper heap snapshot node to JS object

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Apr 2 02:44:38 PDT 2012


https://bugs.webkit.org/show_bug.cgi?id=82872

           Summary: [V8] Web Inspector: don't crash when resolving DOM
                    wrapper heap snapshot node to JS object
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: Web Inspector
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: yurys at chromium.org
                CC: timothy at apple.com, rik at webkit.org, keishi at webkit.org,
                    pmuellr at yahoo.com, joepeck at webkit.org,
                    pfeldman at chromium.org, yurys at chromium.org,
                    bweinstein at apple.com, apavlov at chromium.org,
                    loislo at chromium.org


For each DOM wrapper in V8 bindings there is a boilerplate object which doesn't have a pointer to the native object and will fail on attempt to work with it. Inspector shouldn't resolve such objects.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list