Bug 13868 - REGRESSION: crash on accessing a new iframe's contentWindow property
Summary: REGRESSION: crash on accessing a new iframe's contentWindow property
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Frames (show other bugs)
Version: 523.x (Safari 3)
Hardware: Mac OS X 10.4
: P1 Normal
Assignee: Nobody
URL:
Keywords: InRadar, Regression
Depends on:
Blocks:
 
Reported: 2007-05-24 21:50 PDT by Sam Weinig
Modified: 2007-05-30 14:19 PDT (History)
0 users

See Also:


Attachments
testcase {CRASHES BROWSER} (327 bytes, text/html)
2007-05-24 21:54 PDT, Sam Weinig
no flags Details
patch (6.56 KB, patch)
2007-05-30 13:54 PDT, Sam Weinig
sam: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Sam Weinig 2007-05-24 21:50:38 PDT
I have narrowed down the revisions to somewhere between r21639 - 21665.
Comment 1 Sam Weinig 2007-05-24 21:54:48 PDT
Created attachment 14711 [details]
testcase {CRASHES BROWSER}
Comment 2 Sam Weinig 2007-05-24 22:39:06 PDT
From preliminary testing it looks like http://trac.webkit.org/projects/webkit/changeset/21646 is the culprit. 
Comment 3 Sam Weinig 2007-05-30 13:54:26 PDT
Created attachment 14791 [details]
patch
Comment 4 Sam Weinig 2007-05-30 13:56:02 PDT
<rdar://problem/5234019>
Comment 5 Sam Weinig 2007-05-30 14:18:54 PDT
Comment on attachment 14791 [details]
patch

This was reviewed by David Harrison.
Comment 6 Sam Weinig 2007-05-30 14:19:10 PDT
Landed in r21902.