[Webkit-unassigned] [Bug 193907] REGRESSION(r240553): [iOS] Crash in ScrollingTree::updateTreeFromStateNode when attempting to log in to icloud.com

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=193907

--- Comment #1 from Wenson Hsieh <wenson_hsieh at apple.com> ---
The crash is happening under this call:

    node->commitStateBeforeChildren(*stateNode);

...the ScrollingTreeNode that's trying to commitStateBeforeChildren has been destroyed already. Its node type is 1 (ScrollingNodeType::Subframe).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190128/5754ecab/attachment.html>