<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>84640</bug_id>
          
          <creation_ts>2012-04-23 15:17:24 -0700</creation_ts>
          <short_desc>[V8] Fix issue with trying to access a constructor in a frame that has been removed</short_desc>
          <delta_ts>2012-04-23 20:22:11 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Erik Arvidsson">arv</reporter>
          <assigned_to name="Erik Arvidsson">arv</assigned_to>
          <cc>abarth</cc>
    
    <cc>adamk</cc>
    
    <cc>haraken</cc>
    
    <cc>japhet</cc>
    
    <cc>webkit.review.bot</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>608066</commentid>
    <comment_count>0</comment_count>
    <who name="Erik Arvidsson">arv</who>
    <bug_when>2012-04-23 15:17:24 -0700</bug_when>
    <thetext>[V8] Fix issue with trying to access a constructor in a frame that has been removed</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>608074</commentid>
    <comment_count>1</comment_count>
      <attachid>138436</attachid>
    <who name="Erik Arvidsson">arv</who>
    <bug_when>2012-04-23 15:20:39 -0700</bug_when>
    <thetext>Created attachment 138436
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>608080</commentid>
    <comment_count>2</comment_count>
    <who name="Erik Arvidsson">arv</who>
    <bug_when>2012-04-23 15:23:35 -0700</bug_when>
    <thetext>http://code.google.com/p/chromium/issues/detail?id=124165</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>608087</commentid>
    <comment_count>3</comment_count>
      <attachid>138436</attachid>
    <who name="Kentaro Hara">haraken</who>
    <bug_when>2012-04-23 15:29:25 -0700</bug_when>
    <thetext>Comment on attachment 138436
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=138436&amp;action=review

&gt; LayoutTests/fast/dom/constructor-in-removed-frame.html:17
&gt; +            frame.Window;

Shall we check the value of frame.Window?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>608105</commentid>
    <comment_count>4</comment_count>
    <who name="Erik Arvidsson">arv</who>
    <bug_when>2012-04-23 15:41:24 -0700</bug_when>
    <thetext>(In reply to comment #3)
&gt; (From update of attachment 138436 [details])
&gt; View in context: https://bugs.webkit.org/attachment.cgi?id=138436&amp;action=review
&gt; 
&gt; &gt; LayoutTests/fast/dom/constructor-in-removed-frame.html:17
&gt; &gt; +            frame.Window;
&gt; 
&gt; Shall we check the value of frame.Window?

We could but V8 and JSC report different values.

V8 returns undefined. JSC returns the Window constructor. V8 matches Firefox and Opera. IE throws access denied.

Based on that I don&apos;t think we should check the actual value.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>608109</commentid>
    <comment_count>5</comment_count>
      <attachid>138436</attachid>
    <who name="Kentaro Hara">haraken</who>
    <bug_when>2012-04-23 15:43:07 -0700</bug_when>
    <thetext>Comment on attachment 138436
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=138436&amp;action=review

&gt;&gt;&gt; LayoutTests/fast/dom/constructor-in-removed-frame.html:17
&gt;&gt;&gt; +            frame.Window;
&gt;&gt; 
&gt;&gt; Shall we check the value of frame.Window?
&gt; 
&gt; We could but V8 and JSC report different values.
&gt; 
&gt; V8 returns undefined. JSC returns the Window constructor. V8 matches Firefox and Opera. IE throws access denied.
&gt; 
&gt; Based on that I don&apos;t think we should check the actual value.

Sounds reasonable.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>608334</commentid>
    <comment_count>6</comment_count>
      <attachid>138436</attachid>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2012-04-23 20:22:06 -0700</bug_when>
    <thetext>Comment on attachment 138436
Patch

Clearing flags on attachment: 138436

Committed r114989: &lt;http://trac.webkit.org/changeset/114989&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>608335</commentid>
    <comment_count>7</comment_count>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2012-04-23 20:22:11 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>138436</attachid>
            <date>2012-04-23 15:20:39 -0700</date>
            <delta_ts>2012-04-23 20:22:06 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-84640-20120423152038.patch</filename>
            <type>text/plain</type>
            <size>3903</size>
            <attacher name="Erik Arvidsson">arv</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTE0OTM3CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D
aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggMDRhZDllZTY3MmVjNjRj
MTMzYzJlOGQ2Mzk2M2M0NzE2YTU5NTUzNy4uMWNiMTkwMTU3YjFmMjVhOTJmNDgxNzZhZjFkNDRi
YTI0YjAzMWQ0ZSAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv
dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE4IEBACisyMDEyLTA0LTIzICBFcmlr
IEFydmlkc3NvbiAgPGFydkBjaHJvbWl1bS5vcmc+CisKKyAgICAgICAgW1Y4XSBGaXggaXNzdWUg
d2l0aCB0cnlpbmcgdG8gYWNjZXNzIGEgY29uc3RydWN0b3IgaW4gYSBmcmFtZSB0aGF0IGhhcyBi
ZWVuIHJlbW92ZWQKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dp
P2lkPTg0NjQwCisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAg
ICAgVGhpcyByZWdyZXNzZWQgaW4gcjExMzI1MC4gTm93IHdlIGRvIHdoYXQgd2UgZGlkIGJlZm9y
ZSBhbmQgcmV0dXJuIHVuZGVmaW5lZCBpZiB0aGUgZnJhbWUKKyAgICAgICAgZG9lcyBub3QgaGF2
ZSBhIGNvbnRleHQuCisKKyAgICAgICAgVGVzdDogZmFzdC9kb20vY29uc3RydWN0b3ItaW4tcmVt
b3ZlZC1mcmFtZS5odG1sCisKKyAgICAgICAgKiBiaW5kaW5ncy92OC9WOERPTVdyYXBwZXIuY3Bw
OgorICAgICAgICAoV2ViQ29yZTo6VjhET01XcmFwcGVyOjpjb25zdHJ1Y3RvckZvclR5cGUpOgor
CiAyMDEyLTA0LTIzICBFbWlsIEEgRWtsdW5kICA8ZWFlQGNocm9taXVtLm9yZz4KIAogICAgICAg
ICBDcmFzaCBpbiBSZW5kZXJJbmxpbmU6OmNsaXBwZWRPdmVyZmxvd1JlY3RGb3JSZXBhaW50IGZv
ciBQcmludFByZXZpZXcKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL2JpbmRpbmdzL3Y4L1Y4
RE9NV3JhcHBlci5jcHAgYi9Tb3VyY2UvV2ViQ29yZS9iaW5kaW5ncy92OC9WOERPTVdyYXBwZXIu
Y3BwCmluZGV4IDg0MmEwYjRlNGEzNDRlNzY3OTExNzhkODNmYWVmMjZiNjdkNGNlZTYuLjIzN2Fj
MWMwMjFmMmY2OTViZmEwZWFlNWE4NmZmOTIxZmRkY2Y3YmQgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9X
ZWJDb3JlL2JpbmRpbmdzL3Y4L1Y4RE9NV3JhcHBlci5jcHAKKysrIGIvU291cmNlL1dlYkNvcmUv
YmluZGluZ3MvdjgvVjhET01XcmFwcGVyLmNwcApAQCAtODcsNyArODcsMTEgQEAgdjg6OkxvY2Fs
PHY4OjpGdW5jdGlvbj4gVjhET01XcmFwcGVyOjpjb25zdHJ1Y3RvckZvclR5cGUoV3JhcHBlclR5
cGVJbmZvKiB0eXBlLAogICAgIEZyYW1lKiBmcmFtZSA9IHdpbmRvdy0+ZnJhbWUoKTsKICAgICBp
ZiAoIWZyYW1lKQogICAgICAgICByZXR1cm4gdjg6OkxvY2FsPHY4OjpGdW5jdGlvbj4oKTsKLSAg
ICByZXR1cm4gVjhQcm94eTo6cmV0cmlldmVQZXJDb250ZXh0RGF0YShmcmFtZSktPmNvbnN0cnVj
dG9yRm9yVHlwZSh0eXBlKTsKKworICAgIGlmIChWOEJpbmRpbmdQZXJDb250ZXh0RGF0YSogY29u
dGV4dERhdGEgPSBWOFByb3h5OjpyZXRyaWV2ZVBlckNvbnRleHREYXRhKGZyYW1lKSkKKyAgICAg
ICAgcmV0dXJuIGNvbnRleHREYXRhLT5jb25zdHJ1Y3RvckZvclR5cGUodHlwZSk7CisKKyAgICBy
ZXR1cm4gdjg6OkxvY2FsPHY4OjpGdW5jdGlvbj4oKTsKIH0KIAogI2lmIEVOQUJMRShXT1JLRVJT
KQpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nIGIvTGF5b3V0VGVzdHMvQ2hhbmdl
TG9nCmluZGV4IDU1NTQ1ZjViMjVkZjA1NTNlYTUwNDc1NmUyOTUwMDI0M2U1OWYzNmIuLjA0OTQx
ODdkZGEyMGJmMGFhNzJiNzM1ZTAxZjg2ODNmZDQwOWRiNjkgMTAwNjQ0Ci0tLSBhL0xheW91dFRl
c3RzL0NoYW5nZUxvZworKysgYi9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKQEAgLTEsMyArMSwxMyBA
QAorMjAxMi0wNC0yMyAgRXJpayBBcnZpZHNzb24gIDxhcnZAY2hyb21pdW0ub3JnPgorCisgICAg
ICAgIFtWOF0gRml4IGlzc3VlIHdpdGggdHJ5aW5nIHRvIGFjY2VzcyBhIGNvbnN0cnVjdG9yIGlu
IGEgZnJhbWUgdGhhdCBoYXMgYmVlbiByZW1vdmVkCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJr
aXQub3JnL3Nob3dfYnVnLmNnaT9pZD04NDY0MAorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9E
WSAoT09QUyEpLgorCisgICAgICAgICogZmFzdC9kb20vY29uc3RydWN0b3ItaW4tcmVtb3ZlZC1m
cmFtZS1leHBlY3RlZC50eHQ6IEFkZGVkLgorICAgICAgICAqIGZhc3QvZG9tL2NvbnN0cnVjdG9y
LWluLXJlbW92ZWQtZnJhbWUuaHRtbDogQWRkZWQuCisKIDIwMTItMDQtMjMgIFNoZXJpZmYgQm90
ICA8d2Via2l0LnJldmlldy5ib3RAZ21haWwuY29tPgogCiAgICAgICAgIFVucmV2aWV3ZWQsIHJv
bGxpbmcgb3V0IHIxMTQ5MjkuCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9mYXN0L2RvbS9jb25z
dHJ1Y3Rvci1pbi1yZW1vdmVkLWZyYW1lLWV4cGVjdGVkLnR4dCBiL0xheW91dFRlc3RzL2Zhc3Qv
ZG9tL2NvbnN0cnVjdG9yLWluLXJlbW92ZWQtZnJhbWUtZXhwZWN0ZWQudHh0Cm5ldyBmaWxlIG1v
ZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAu
LjdlZjIyZTlhNDMxYWQwMjcyNzEzYjcxZmRjODc5NDAxNmM4ZWYxMmYKLS0tIC9kZXYvbnVsbAor
KysgYi9MYXlvdXRUZXN0cy9mYXN0L2RvbS9jb25zdHJ1Y3Rvci1pbi1yZW1vdmVkLWZyYW1lLWV4
cGVjdGVkLnR4dApAQCAtMCwwICsxIEBACitQQVNTCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9m
YXN0L2RvbS9jb25zdHJ1Y3Rvci1pbi1yZW1vdmVkLWZyYW1lLmh0bWwgYi9MYXlvdXRUZXN0cy9m
YXN0L2RvbS9jb25zdHJ1Y3Rvci1pbi1yZW1vdmVkLWZyYW1lLmh0bWwKbmV3IGZpbGUgbW9kZSAx
MDA2NDQKaW5kZXggMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMC4uYWI2
NzcxNDkyZWVjM2MzMDA1Njg0NzBiNzM0YjI4OWQ4MjQyYjRjZAotLS0gL2Rldi9udWxsCisrKyBi
L0xheW91dFRlc3RzL2Zhc3QvZG9tL2NvbnN0cnVjdG9yLWluLXJlbW92ZWQtZnJhbWUuaHRtbApA
QCAtMCwwICsxLDI4IEBACis8IURPQ1RZUEUgaHRtbD4KKzxwPkZBSUw8L3A+Cis8aWZyYW1lIHNy
Yz0iZGF0YTp0ZXh0L2h0bWwsRkFJTCI+PC9pZnJhbWU+Cis8c2NyaXB0PgorCit3aW5kb3cub25s
b2FkID0gZnVuY3Rpb24oKSB7CisgICAgaWYgKHdpbmRvdy5sYXlvdXRUZXN0Q29udHJvbGxlcikg
eworICAgICAgICBsYXlvdXRUZXN0Q29udHJvbGxlci53YWl0VW50aWxEb25lKCk7CisgICAgICAg
IGxheW91dFRlc3RDb250cm9sbGVyLmR1bXBBc1RleHQoKTsKKworICAgICAgICB2YXIgaWZyYW1l
RWxlbWVudCA9IGRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoJ2lmcmFtZScpOworICAgICAgICBpZnJh
bWVFbGVtZW50Lm9ubG9hZCA9IGZ1bmN0aW9uKCkgeworICAgICAgICAgICAgdmFyIGZyYW1lID0g
d2luZG93LmZyYW1lc1swXTsKKyAgICAgICAgICAgIGlmcmFtZUVsZW1lbnQucGFyZW50Tm9kZS5y
ZW1vdmVDaGlsZChpZnJhbWVFbGVtZW50KTsKKworICAgICAgICAgICAgLy8gVGhlIFY4IGJpbmRp
bmdzIGRvZXMgbm90IGtlZXAgdGhlIGZyYW1lIGNvbnN0cnVjdG9yIGFsaXZlIGJ1dCBhdCBsZWFz
dCBpdCBzaG91bGQgbm90IGNyYXNoIQorICAgICAgICAgICAgZnJhbWUuV2luZG93OworCisgICAg
ICAgICAgICBkb2N1bWVudC5ib2R5LnRleHRDb250ZW50ID0gJ1BBU1MnOworICAgICAgICAgICAg
bGF5b3V0VGVzdENvbnRyb2xsZXIubm90aWZ5RG9uZSgpOworICAgICAgICB9OworICAgICAgICBp
ZnJhbWVFbGVtZW50LnNyYyA9ICdkYXRhOnRleHQvaHRtbCxQQVNTJzsKKyAgICB9Cit9OworCis8
L3NjcmlwdD4KKzwvYm9keT4KKzwvaHRtbD4K
</data>

          </attachment>
      

    </bug>

</bugzilla>