[Webkit-unassigned] [Bug 92397] Crash in JSWeakObjectMapGet called from Safari::JSWrapper::disconnectAllWrappers

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=92397





--- Comment #21 from Fabian Mailinator <fabian at mailinator.com>  2012-08-09 15:25:58 PST ---
Bug 93659 may be a duplicate of this.

I am now seeing the backtrace reported in 93659 when I do the click-the-link crash.

In that report, the backtrace shows the segfault in:

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebKit2                 0x000000010bd51194 WebKit::PluginProxy::destroy() + 20
1   com.apple.WebKit2                 0x000000010bd448ff WebKit::Plugin::destroyPlugin() + 15
2   com.apple.WebKit2                 0x000000010bd55511 WebKit::PluginView::~PluginView() + 229
3   com.apple.WebKit2                 0x000000010bd553aa WebKit::PluginView::~PluginView() + 14
4   com.apple.WebCore                 0x000000010cdf250b WebCore::RenderWidget::resumeWidgetHierarchyUpdates() + 699
5   com.apple.WebCore                 0x000000010c6c2f2a WebCore::Element::detach() + 458
6   com.apple.WebCore                 0x000000010c7f324b WebCore::HTMLPlugInElement::detach() + 187

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.