[Webkit-unassigned] [Bug 105255] New: a bug for webkit core not to release the html node after the webpage redirect

Mon Dec 17 22:56:15 PST 2012

https://bugs.webkit.org/show_bug.cgi?id=105255

           Summary: a bug for webkit core not to release the html node
                    after the webpage redirect
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: UNCONFIRMED
          Severity: Major
          Priority: P2
         Component: WebKit Qt
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: shen.benming at zte.com.cn

the webpage source code,only fowlling(eg:the webpage name is "bug.html"):
<html>
<head>
    <script language="javascript" type="">
    Object.prototype.toJSONString = function () {
     return ;
    };
        setTimeout("openWindow()",200);
        setTimeout("jump()",3000);
        function jump(){
        document.location = "sub.html";
        }
    function openWindow(){
    var w= window.open('window1.html', 'window1',
'width=180,height=120,top=0,left=0, toolbar=no, menubar=no, scrollbars=auto,
resizable=no, location=no,depended=no, status=no');
    w.focus();
    }
</script>
</head>
<body>
<div style="left:0px;top:100px;width:180px;position:absolute;" align="center">
    <img src="pic.gif" >
</div>
</body>
</html>

it no effect that "sub.html" and 'window1.html',
you may be to replace any of the two webpage for yourself.

the problem:
you will find the IMG node not to call HTMLImageElement::~HTMLImageElement()
when the "bug.html" redirect to other webpage("sub.html").

And one more thing, if we remove following code in webpage("bug.html")
     Object.prototype.toJSONString = function () {
      return ;
     };
 or 
     remove code: w.focus();
 Then no problem exist any more.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.