[Webkit-unassigned] [Bug 90817] [BlackBerry] PagePopupBlackBerry::closePopup() should always clear the pointer in WebPagePrivate

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=90817


Yong Li <yoli at rim.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |haizhang at rim.com




--- Comment #3 from Yong Li <yoli at rim.com>  2012-07-09 14:25:19 PST ---
(In reply to comment #2)
> (From update of attachment 151316 [details])
> View in context: https://bugs.webkit.org/attachment.cgi?id=151316&action=review
> 
> > Source/WebKit/blackberry/WebCoreSupport/SelectPopupClient.cpp:147
> > +    ASSERT(m_element);
> 
> Which one is it?  Can it, or can it not be null?

It is assigned through ctor, but cleared when the popup is closed. However the JS object is still there. It is theoretically possible the method is called by JS, e.g., window.popPup.setValueAndClosePopup().

Crystal, is that possible?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.