Summary: | [V8] Binding Integrity crash in V8MediaStream::createWrapper | ||||||
---|---|---|---|---|---|---|---|
Product: | WebKit | Reporter: | Thomas Sepez <tsepez> | ||||
Component: | WebCore Misc. | Assignee: | Nobody <webkit-unassigned> | ||||
Status: | RESOLVED FIXED | ||||||
Severity: | Normal | CC: | abarth, cevans, eric.carlson, feature-media-reviews, hta, jschuh, ojan.autocc, tommyw, webkit.review.bot | ||||
Priority: | P2 | ||||||
Version: | 528+ (Nightly build) | ||||||
Hardware: | Unspecified | ||||||
OS: | Unspecified | ||||||
Attachments: |
|
Description
Thomas Sepez
2013-02-07 10:55:21 PST
@tommyw: We need to make the toV8 function for MediaStream smarter so that it can create a LocalMediaStream wrapper when appropriate. Created attachment 187144 [details]
A Patch.
Comment on attachment 187144 [details]
A Patch.
Do we have a LayoutTest for this case? Also, we should open a bug for fixing the custom wrapping dispatch.
(In reply to comment #3) > (From update of attachment 187144 [details]) > Do we have a LayoutTest for this case? Also, we should open a bug for fixing the custom wrapping dispatch. No, I don't have a layouttest; the page in the wild which reproduced this was complex. Followup bug is https://bugs.webkit.org/show_bug.cgi?id=109219 Comment on attachment 187144 [details] A Patch. Clearing flags on attachment: 187144 Committed r142177: <http://trac.webkit.org/changeset/142177> All reviewed patches have been landed. Closing bug. |