[Webkit-unassigned] [Bug 148237] WK1 can re-enter layout during FrameView destruction and crash

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Aug 20 15:24:08 PDT 2015


https://bugs.webkit.org/show_bug.cgi?id=148237

zalan <zalan at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #259505|review?                     |review+
              Flags|                            |

--- Comment #3 from zalan <zalan at apple.com> ---
Comment on attachment 259505
  --> https://bugs.webkit.org/attachment.cgi?id=259505
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=259505&action=review

> Source/WebCore/page/FrameView.cpp:277
>  

I hope that none of the setHas*Scrollbar() calls (few lines below) trigger similar layout.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150820/e4d67eca/attachment.html>


More information about the webkit-unassigned mailing list