[Webkit-unassigned] [Bug 78391] New: Releasing a WKView during a client callback can lead to a crash

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Feb 10 14:24:24 PST 2012


https://bugs.webkit.org/show_bug.cgi?id=78391

           Summary: Releasing a WKView during a client callback can lead
                    to a crash
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit2
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: mitz at webkit.org
                CC: andersca at apple.com


Created an attachment (id=126584)
 --> (https://bugs.webkit.org/attachment.cgi?id=126584&action=review)
API test demonstrating the bug

If e.g. a page loader client function releases the WKView corresponding to the page, the WKView may get deallocated, thus deleting the page client. Upon return from the client function, WebKit2 code may still dereference the page client and crash.

Attaching a TestWebKitAPI test that shows this: it releases the WKView in the processDidCrash callback.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list