[Webkit-unassigned] [Bug 103592] DRT - crashed in WebCore::SearchFieldCancelButtonElement::defaultEventHandler

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=103592


George Staikos <staikos at kde.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |staikos at kde.org




--- Comment #13 from George Staikos <staikos at kde.org>  2012-11-30 08:37:59 PST ---
(In reply to comment #10)
> (From update of attachment 176718 [details])
> View in context: https://bugs.webkit.org/attachment.cgi?id=176718&action=review
> 
> > Source/WebCore/ChangeLog:13
> > +        The crash happened when the search field cancel button handles mouseout
> > +        event after the search input was detached. When it happens the input
> > +        element returned from shadowHost() is null, need to check the pointer
> > +        before dereferencing.
> > +        InputFieldSpeechButton and SearchFieldResultsButtonElement have the
> > +        similar issue.
> 
> The patch itself looks good, but I would feel confident if you find out and described why it passes for other platforms without your fix.

Per Alexey it crashes Mac too.  It is flakey... it takes some work to trigger it.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.