85152 2012-04-28 23:10:56 -0700 [V8] An event listener object can be reclaimed by GC even if it is still alive 2013-09-12 22:33:08 -0700 1 1 1 Unclassified WebKit WebCore JavaScript 528+ (Nightly build) Unspecified Unspecified RESOLVED WONTFIX P2 Normal --- 1 haraken webkit-unassigned abarth andersca arv haraken ojan oldest_to_newest 612393 0 haraken 2012-04-28 23:10:56 -0700 This is a bug detected in bug 84908. In a nutshell, an onresize event handler in the popup window can be non-deterministically reclaimed by GC. For more details, please look at the chromium issue 123642: http://code.google.com/p/chromium/issues/detail?id=123642 The patch for bug 84908 fixes V8LazyEventListner.cpp so that an event listener object is re-created if the event listener object is already reclaimed. This is just a temporary fix. We should fix the code so that an alive event listener object is never reclaimed. Please look at bug 84908 and chromium issue 123642 for more details. 928645 1 andersca 2013-09-12 22:33:08 -0700 V8 is gone.