<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>57294</bug_id>
          
          <creation_ts>2011-03-28 19:31:13 -0700</creation_ts>
          <short_desc>Crash when closing &quot;Add Bookmark&quot; Dialog using the Enter Key</short_desc>
          <delta_ts>2011-03-30 12:58:49 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebCore Misc.</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>PC</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Brian Weinstein">bweinstein</reporter>
          <assigned_to name="Brian Weinstein">bweinstein</assigned_to>
          <cc>ap</cc>
    
    <cc>aroben</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>374949</commentid>
    <comment_count>0</comment_count>
    <who name="Brian Weinstein">bweinstein</who>
    <bug_when>2011-03-28 19:31:13 -0700</bug_when>
    <thetext>If a WebView is set to close using the Enter Key (if it was a dialog that closes when you press enter), it can crash when closed this way.

The FrameView isn&apos;t protected in EventHandler::keyEvent, like it is in EventHandler::handleMousePressEvent, EventHandler::handleMouseDoubleClickEvent, EventHandler::handleMouseMoveEvent, EventHandler::handleMouseReleaseEvent, and EventHandler::handleWheelEvent.

&lt;rdar://problem/9044756&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>374951</commentid>
    <comment_count>1</comment_count>
      <attachid>87249</attachid>
    <who name="Brian Weinstein">bweinstein</who>
    <bug_when>2011-03-28 19:33:39 -0700</bug_when>
    <thetext>Created attachment 87249
[PATCH] Fix</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>374962</commentid>
    <comment_count>2</comment_count>
      <attachid>87249</attachid>
    <who name="Darin Adler">darin</who>
    <bug_when>2011-03-28 20:05:50 -0700</bug_when>
    <thetext>Comment on attachment 87249
[PATCH] Fix

It’s not at all clear why we protect the FrameView and not some other reference-counted object.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>374968</commentid>
    <comment_count>3</comment_count>
    <who name="Brian Weinstein">bweinstein</who>
    <bug_when>2011-03-28 20:15:01 -0700</bug_when>
    <thetext>(In reply to comment #2)
&gt; (From update of attachment 87249 [details])
&gt; It’s not at all clear why we protect the FrameView and not some other reference-counted object.

I&apos;m not sure either. I was going by existing style w/ other functions in the class + it fixed the crash. I can talk to someone about it later tonight or in the morning before landing.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>375192</commentid>
    <comment_count>4</comment_count>
      <attachid>87249</attachid>
    <who name="Adam Roben (:aroben)">aroben</who>
    <bug_when>2011-03-29 04:49:51 -0700</bug_when>
    <thetext>Comment on attachment 87249
[PATCH] Fix

Is it possible to make a test for this? If not a test for run-webkit-tests, then maybe one for run-api-tests?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>375732</commentid>
    <comment_count>5</comment_count>
    <who name="Brian Weinstein">bweinstein</who>
    <bug_when>2011-03-29 14:01:54 -0700</bug_when>
    <thetext>(In reply to comment #4)
&gt; (From update of attachment 87249 [details])
&gt; Is it possible to make a test for this? If not a test for run-webkit-tests, then maybe one for run-api-tests?

I tried making a test that opens a window using window.open, and that window is closed by any key-press, but that didn&apos;t reproduce the crash.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>375738</commentid>
    <comment_count>6</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2011-03-29 14:05:46 -0700</bug_when>
    <thetext>&gt; I tried making a test that opens a window using window.open, and that window is closed by any key-press, but that didn&apos;t reproduce the crash.

Not sure if it&apos;s worth spending more time on this, but the inability to make a test suggests that there is some general difference between normal web views and those the problem was observed with, and that difference would be good to find and eliminate.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>376603</commentid>
    <comment_count>7</comment_count>
    <who name="Brian Weinstein">bweinstein</who>
    <bug_when>2011-03-30 12:45:37 -0700</bug_when>
    <thetext>Adding some additional steps to reproduce:

1) Go to any page (http://reddit.com - was used for testing).
2) Click the + button in the URL field, to add a bookmark
3) Press Enter to close the &quot;Add Bookmark&quot; Dialog</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>376608</commentid>
    <comment_count>8</comment_count>
    <who name="Brian Weinstein">bweinstein</who>
    <bug_when>2011-03-30 12:58:49 -0700</bug_when>
    <thetext>Landed in r82487.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>87249</attachid>
            <date>2011-03-28 19:33:39 -0700</date>
            <delta_ts>2011-03-29 04:49:51 -0700</delta_ts>
            <desc>[PATCH] Fix</desc>
            <filename>crash_enter.patch</filename>
            <type>text/plain</type>
            <size>1352</size>
            <attacher name="Brian Weinstein">bweinstein</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09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</data>
<flag name="review"
          id="79655"
          type_id="1"
          status="+"
          setter="darin"
    />
          </attachment>
      

    </bug>

</bugzilla>