[Webkit-unassigned] [Bug 211844] JSDOMWindowBase m_windowCloseWatchpoints must be Ref<>

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed May 13 12:40:24 PDT 2020


https://bugs.webkit.org/show_bug.cgi?id=211844

--- Comment #1 from Chris Dumez <cdumez at apple.com> ---
(In reply to xc.o.c.1180 at gmail.com from comment #0)
> Created attachment 399266 [details]
> patch
> 
> JSC WatchpointSet is reference counted, however m_windowCloseWatchpoints is
> just a member variable.
> 
> ProxyableAccessCase holds on it, when JSDOMWindowBase is destroyed,
> m_additionalSet holds a dangling pointer.
> 
> By the way, WatchpointSet constructor should be private.
> 
> I can not build latest WebKit, please clean up the patch, add other stuffs,
> then commit it.
> 
> 
> Thanks.

We are unable to approve / commit patches without test cases.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200513/5453d93f/attachment.htm>


More information about the webkit-unassigned mailing list