[Webkit-unassigned] [Bug 168608] New: Nullptr dereferences when stopping a load

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=168608

            Bug ID: 168608
           Summary: Nullptr dereferences when stopping a load
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Page Loading
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: bfulgham at webkit.org
                CC: beidson at apple.com

We have seen crash traces that indicate the frame is being detached from the document while stopping a load, leading to nullptr dereferences and crashes.

Other loading code anticipates the possibility the the frame is nullptr. Since these crashes are happening at the tail end of the load termination, when attempting to notify the now-detached client that the load was stopped, we should probably just recognize this is happening and avoid the dereference.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170220/cb88dc7e/attachment.html>