Bug 103431

Summary: [V8] Crash wrapping media element when MediaPlayer isn't available
Product: WebKit Reporter: Marshall Greenblatt <marshall>
Component: WebCore Misc.Assignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: abarth, dcarney, haraken, japhet, ojan, webkit.review.bot
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: All   
OS: All   
Attachments:
Description Flags
Patch
none
Patch none

Marshall Greenblatt
Reported 2012-11-27 09:37:31 PST
1. Ensure a browser using v8 doesn't have access to a media player 2. Visit a page with a <video> tag 3. Infinite recursion This seems to be a reappearance of https://bugs.webkit.org/show_bug.cgi?id=39907, likely caused by https://bugs.webkit.org/show_bug.cgi?id=102082 ([V8] More efficient wrapper dispatch).
Attachments
Patch (5.15 KB, patch)
2012-11-28 01:45 PST, Dan Carney 		no flags
DetailsFormatted DiffDiff
Patch (5.34 KB, patch)
2012-11-28 02:01 PST, Dan Carney 		no flags
DetailsFormatted DiffDiff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.
Adam Barth
Comment 1 2012-11-27 09:56:37 PST
Dan, would you be willing to take a look at this bug?
Dan Carney
Comment 2 2012-11-28 00:13:25 PST
(In reply to comment #1) > Dan, would you be willing to take a look at this bug? On it
Dan Carney
Comment 3 2012-11-28 01:45:48 PST
Created attachment 176429 [details] Patch
Dan Carney
Comment 4 2012-11-28 02:01:13 PST
Created attachment 176430 [details] Patch
Kentaro Hara
Comment 5 2012-11-28 02:45:53 PST
Comment on attachment 176430 [details] Patch Looks reasonable.
WebKit Review Bot
Comment 6 2012-11-28 03:34:16 PST
Comment on attachment 176430 [details] Patch Clearing flags on attachment: 176430 Committed r135993: <http://trac.webkit.org/changeset/135993>
WebKit Review Bot
Comment 7 2012-11-28 03:34:20 PST
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.