[Webkit-unassigned] [Bug 144903] [GTK] Crash at WebCore::FrameView::removeChild()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=144903

Michael Catanzaro <mcatanzaro at igalia.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           See Also|                            |https://bugzilla.redhat.com
                   |                            |/show_bug.cgi?id=1533470

--- Comment #5 from Michael Catanzaro <mcatanzaro at igalia.com> ---
We have 91 reports of this in Fedora, including 29 reports against 2.18.6. None against 2.20 yet, but that's to be expected because that is still in updates-testing.

(In reply to Zan Dobersek from comment #2)
> It can happen, but one would have to try a bit harder to dereference a null
> pointer into the removeChild() call.

My guess would be the pointer is non-null, but the FrameView has already been destroyed.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180328/a05e89b1/attachment.html>