[Webkit-unassigned] [Bug 135211] ScriptController::updateDocument ASSERT mutating map while iterating map

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=135211





--- Comment #14 from Alexey Proskuryakov <ap at webkit.org>  2014-07-24 20:02:12 PST ---
(From update of attachment 235386)
View in context: https://bugs.webkit.org/attachment.cgi?id=235386&action=review

> Source/WebCore/bindings/js/ScriptCachedFrameData.cpp:54
> +    Vector<JSC::Strong<JSDOMWindowShell>> windowShells = scriptController.windowShells();

Can a new window shell be added to m_windowShells during iteration? If this happens, will it remain in a broken state forever, not being subject to the below processing?

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.