Bug 12314

Summary:	REGRESSION: Assertion failure and crash when going back in new window
Product:	WebKit	Reporter:	Matt Lilek <dev+webkit>
Component:	History	Assignee:	Nobody <webkit-unassigned>
Status:	CLOSED FIXED
Severity:	Normal	CC:	mjs
Priority:	P1	Keywords:	InRadar, Regression
Version:	420+
Hardware:	Mac
OS:	OS X 10.4
URL:	data:text/html,<a href="http://webkit.org" target="_blank">Click me!</a>

Matt Lilek

Reported 2007-01-18 09:46:30 PST

Load the URL in this bug report and click the link. It'll open webkit.org in a new window. Click a link or two on the site, then go back to the previous page. You'll get the following assertion failure and crash (tested with r18928): ASSERTION FAILED: item->target().isEmpty() || m_mainFrame->tree()->find(item->target()) == m_mainFrame (/Users/matt/Code/WebKit/WebCore/page/Page.cpp:130 void WebCore::Page::goToItem(WebCore::HistoryItem*, WebCore::FrameLoadType)) And the relevant stack trace from the crash: 0 com.apple.WebCore 0x01223cb8 WebCore::Page::goToItem(WebCore::HistoryItem*, WebCore::FrameLoadType) + 312 (Page.cpp:130) 1 com.apple.WebCore 0x01223e08 WebCore::Page::goBack() + 88 (Page.cpp:111) 2 com.apple.WebKit 0x003867a0 -[WebView goBack] + 48 (WebView.mm:1939)

Attachments
Add attachment proposed patch, testcase, etc.

Matt Lilek

Comment 1 2007-01-18 10:01:29 PST

<rdar://problem/4939366>

David Kilzer (:ddkilzer)

Comment 2 2007-01-31 04:49:40 PST

Committed by mjs in r19289.

Note You need to log in before you can comment on or make changes to this bug.