Bug 105942

Summary: [BlackBerry] Cached frame shouldn't access the page when being destroyed
Product: WebKit Reporter: Yong Li <yong.li.webkit>
Component: WebKit BlackBerryAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: mifenton, rwlbuis, tonikitoo, webkit.review.bot
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
the patch
none
the fix
none
the fix none

Description Yong Li 2013-01-02 13:53:53 PST 
When a cached frame is being teared down, its original owner page may have been destroyed. So it is not safe to access the page and its data.

PR272137
Comment 1 Yong Li 2013-01-02 14:01:06 PST 
Created attachment 181060 [details]
the patch
Comment 2 WebKit Review Bot 2013-01-02 14:42:35 PST 
Comment on attachment 181060 [details]
the patch

Clearing flags on attachment: 181060

Committed r138652: <http://trac.webkit.org/changeset/138652>
Comment 3 WebKit Review Bot 2013-01-02 14:42:38 PST 
All reviewed patches have been landed.  Closing bug.
Comment 4 Yong Li 2013-01-04 12:27:24 PST 
Created attachment 181356 [details]
the fix
Comment 5 Yong Li 2013-01-04 12:27:59 PST 
reopen
Comment 6 Yong Li 2013-01-04 12:28:18 PST 
Created attachment 181358 [details]
the fix
Comment 7 WebKit Review Bot 2013-01-04 13:25:07 PST 
Comment on attachment 181358 [details]
the fix

Clearing flags on attachment: 181358

Committed r138846: <http://trac.webkit.org/changeset/138846>
Comment 8 WebKit Review Bot 2013-01-04 13:25:11 PST 
All reviewed patches have been landed.  Closing bug.