[Webkit-unassigned] [Bug 146988] New: REGRESSION(r186088): Crash under WebKit::WebPageProxy::didFailLoadForFrame

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Jul 15 15:47:08 PDT 2015


https://bugs.webkit.org/show_bug.cgi?id=146988

            Bug ID: 146988
           Summary: REGRESSION(r186088): Crash under
                    WebKit::WebPageProxy::didFailLoadForFrame
    Classification: Unclassified
           Product: WebKit
           Version: 528+ (Nightly build)
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit2
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: beidson at apple.com

REGRESSION(r186088): Crash under WebKit::WebPageProxy::didFailLoadForFrame 

For WKView apps:
This WebPageProxy methods calls m_loaderClient->didFailLoadWithErrorForFrame(), and inside that callback the embedding app can cause the WKView to go away.
When a WKView goes away, it's PageClientImpl gets destroyed also.
But then we call into m_pageClient, which was just destroyed...

So we'll add a refView and derefView method to PageClient, add a RefPtr-style object to manage those, and use it in any method where a loaderClient method is called but is not the last thing to be called in the method.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150715/a5f64841/attachment.html>


More information about the webkit-unassigned mailing list