88915 2012-06-12 14:17:27 -0700 [BlackBerry] Crash when rendering web page that's being destroyed 2012-06-12 15:52:49 -0700 1 1 1 Unclassified WebKit WebKit BlackBerry 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 anilsson anilsson tonikitoo webkit.review.bot oldest_to_newest 647319 0 anilsson 2012-06-12 14:17:27 -0700 At one stage in the tear down of web page, the compositor is disconnected from the web page so WebPageCompositorPrivate::m_webPage is 0. However, WebPageCompositorPrivate::render() doesn't check validity of m_webPage before calling into WebPage::compositor() to see if we're really the web page's compositor. 647334 1 anilsson 2012-06-12 14:27:08 -0700 This is PR164943 647364 2 147169 anilsson 2012-06-12 14:49:29 -0700 Created attachment 147169 Patch 647366 3 147169 rwlbuis 2012-06-12 14:52:30 -0700 Comment on attachment 147169 Patch LGTM. 647430 4 147169 webkit.review.bot 2012-06-12 15:52:45 -0700 Comment on attachment 147169 Patch Clearing flags on attachment: 147169 Committed r120134: <http://trac.webkit.org/changeset/120134> 647431 5 webkit.review.bot 2012-06-12 15:52:49 -0700 All reviewed patches have been landed. Closing bug. 147169 2012-06-12 14:49:29 -0700 2012-06-12 15:52:45 -0700 Patch bug-88915-20120612234927.patch text/plain 1752 anilsson U3VidmVyc2lvbiBSZXZpc2lvbjogMTIwMDkxCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L2Js YWNrYmVycnkvQ2hhbmdlTG9nIGIvU291cmNlL1dlYktpdC9ibGFja2JlcnJ5L0NoYW5nZUxvZwpp bmRleCAzOGFlZDk1MDI4ZmZhOWFhNjJlMDA3ZDZkOTAxYTEwYTU4M2QyY2I2Li4zM2YwMGEzN2Ji MGMxYjU3MDUwNDQzMGU5MjMxYmIxNDAzOGVmMTFjIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViS2l0 L2JsYWNrYmVycnkvQ2hhbmdlTG9nCisrKyBiL1NvdXJjZS9XZWJLaXQvYmxhY2tiZXJyeS9DaGFu Z2VMb2cKQEAgLTEsMyArMSwxOCBAQAorMjAxMi0wNi0xMiAgQXJ2aWQgTmlsc3NvbiAgPGFuaWxz c29uQHJpbS5jb20+CisKKyAgICAgICAgW0JsYWNrQmVycnldIENyYXNoIHdoZW4gcmVuZGVyaW5n IHdlYiBwYWdlIHRoYXQncyBiZWluZyBkZXN0cm95ZWQKKyAgICAgICAgaHR0cHM6Ly9idWdzLndl YmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTg4OTE1CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9C T0RZIChPT1BTISkuCisKKyAgICAgICAgUFIgIzE2NDk0MworCisgICAgICAgIFRoaXMgd2FzIGEg bnVsbCBwb2ludGVyIGRlcmVmZXJlbmNlIHRoYXQgaGFwcGVuZWQgd2hlbiB0aGUgY29tcG9zaXRv cgorICAgICAgICB3YXMgYXNrZWQgdG8gcmVuZGVyIGFmdGVyIGJlaW5nIGRpc2Nvbm5lY3RlZCBm cm9tIGl0cyB3ZWIgcGFnZS4KKworICAgICAgICAqIEFwaS9XZWJQYWdlQ29tcG9zaXRvci5jcHA6 CisgICAgICAgIChCbGFja0JlcnJ5OjpXZWJLaXQ6OldlYlBhZ2VDb21wb3NpdG9yUHJpdmF0ZTo6 cmVuZGVyKToKKwogMjAxMi0wNi0xMSAgSm9uYXRoYW4gRG9uZyAgPGpvbmF0aGFuLmRvbmdAdG9y Y2htb2JpbGUuY29tLmNuPgogCiAgICAgICAgIFtCbGFja0JlcnJ5XSBBdXRvZmlsbCBmZWF0dXJl IGltcGxlbWVudGF0aW9uIGZvciBCbGFja0JlcnJ5IHBvcnRpbmcKZGlmZiAtLWdpdCBhL1NvdXJj ZS9XZWJLaXQvYmxhY2tiZXJyeS9BcGkvV2ViUGFnZUNvbXBvc2l0b3IuY3BwIGIvU291cmNlL1dl YktpdC9ibGFja2JlcnJ5L0FwaS9XZWJQYWdlQ29tcG9zaXRvci5jcHAKaW5kZXggNWY2ZGRhZjNh MmJkZjc0Mjg5YTg5N2E5YjBiNTEyMDIyNjUzNDM4Yy4uZmE0YWQzYmZjMGZiNDk0YTRhZTA5YjU0 NmFiYzIyODQzYmNjZWNmOSAxMDA2NDQKLS0tIGEvU291cmNlL1dlYktpdC9ibGFja2JlcnJ5L0Fw aS9XZWJQYWdlQ29tcG9zaXRvci5jcHAKKysrIGIvU291cmNlL1dlYktpdC9ibGFja2JlcnJ5L0Fw aS9XZWJQYWdlQ29tcG9zaXRvci5jcHAKQEAgLTExNiw3ICsxMTYsNyBAQCB2b2lkIFdlYlBhZ2VD b21wb3NpdG9yUHJpdmF0ZTo6cmVuZGVyKGNvbnN0IEludFJlY3QmIHRhcmdldFJlY3QsIGNvbnN0 IEludFJlY3QmCiAgICAgLy8gRm9yIHRocmVhZCBzYWZldHksIHdlIGhhdmUgdG8gZG8gaXQgdXNp bmcgYSByb3VuZC10cmlwIHRvIHRoZSBXZWJLaXQgdGhyZWFkLCBzbyB0aGUKICAgICAvLyBlbWJl ZGRlciBtaWdodCBjYWxsIHRoaXMgYmVmb3JlIHRoZSByb3VuZC10cmlwIHRvIFdlYlBhZ2VQcml2 YXRlOjpzZXRDb21wb3NpdG9yKCkgaXMKICAgICAvLyBkb25lLgotICAgIGlmIChtX3dlYlBhZ2Ut PmNvbXBvc2l0b3IoKSAhPSB0aGlzKQorICAgIGlmICghbV93ZWJQYWdlIHx8IG1fd2ViUGFnZS0+ Y29tcG9zaXRvcigpICE9IHRoaXMpCiAgICAgICAgIHJldHVybjsKIAogICAgIG1fbGF5ZXJSZW5k ZXJlci0+c2V0Q2xlYXJTdXJmYWNlT25EcmF3TGF5ZXJzKGZhbHNlKTsK