[Webkit-unassigned] [Bug 182882] New: [Cocoa][WebKitLegacy] REGRESSION(r221559): Coda 2 crashes when switching views

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=182882

            Bug ID: 182882
           Summary: [Cocoa][WebKitLegacy] REGRESSION(r221559): Coda 2
                    crashes when switching views
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: bfulgham at webkit.org

The refactoring in Bug 176280 caused WebKit to attempt to message destroyed objects in WebKitLegacy applications.

A loop was moved (and rewritten) in the new implementation of (void)_web_makePluginSubviewsPerformSelector:(SEL)selector withObject:(id)object

The new code access subviews, copied them, placed them in a smart pointer, then retrieved the bare pointer for use in the Objective C iteration:

    for (NSView *view in adoptNS([[self subviews] copy]).get()) { ... }

This caused the collection being iterated over to be cleaned up during the loop, resulting in a crash.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180216/1de21e2a/attachment.html>