<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>82345</bug_id>
          
          <creation_ts>2012-03-27 08:55:54 -0700</creation_ts>
          <short_desc>Frame flattening: childframe in FrameView::layout() needs protector.</short_desc>
          <delta_ts>2012-03-27 11:01:11 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Layout and Rendering</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Minor</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="alan">zalan</reporter>
          <assigned_to name="alan">zalan</assigned_to>
          <cc>koivisto</cc>
    
    <cc>webkit.review.bot</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>588950</commentid>
    <comment_count>0</comment_count>
    <who name="alan">zalan</who>
    <bug_when>2012-03-27 08:55:54 -0700</bug_when>
    <thetext>In case of frame flattening, when the child frame is re-starting the layout from the topmost parent, childframe needs RefPtr&lt;FrameView&gt; protector(this); so that it won&apos;t get destroyed by a recalcStyle() call in a parent layout().

fix: move RefPtr&lt;FrameView&gt; protector(this); in FrameView::layout() a few lines up, before the frame flattening re-start.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>588992</commentid>
    <comment_count>1</comment_count>
      <attachid>134088</attachid>
    <who name="alan">zalan</who>
    <bug_when>2012-03-27 10:02:39 -0700</bug_when>
    <thetext>Created attachment 134088
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>589049</commentid>
    <comment_count>2</comment_count>
      <attachid>134088</attachid>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2012-03-27 11:01:07 -0700</bug_when>
    <thetext>Comment on attachment 134088
Patch

Clearing flags on attachment: 134088

Committed r112283: &lt;http://trac.webkit.org/changeset/112283&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>589050</commentid>
    <comment_count>3</comment_count>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2012-03-27 11:01:11 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>134088</attachid>
            <date>2012-03-27 10:02:39 -0700</date>
            <delta_ts>2012-03-27 11:01:07 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-82345-20120327190237.patch</filename>
            <type>text/plain</type>
            <size>2192</size>
            <attacher name="alan">zalan</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09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</data>

          </attachment>
      

    </bug>

</bugzilla>