Bug 132163

Summary: FrameLoader::checkCompleted can hit the "ref'ing while destroyed" assertion
Product: WebKit Reporter: Darin Adler <darin>
Component: Page LoadingAssignee: Darin Adler <darin>
Status: RESOLVED FIXED    
Severity: Normal CC: beidson, commit-queue, japhet, mark.lam
Priority: P2 Keywords: InRadar
Version: 528+ (Nightly build)   
Hardware: All   
OS: All   
Attachments:
Description Flags
Patch beidson: review+

Darin Adler
Reported 2014-04-24 19:03:01 PDT
FrameLoader::checkCompleted can hit the "ref'ing while destroyed" assertion
Attachments
Patch (1.97 KB, patch)
2014-04-24 19:04 PDT, Darin Adler 		beidson: review+
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Darin Adler
Comment 1 2014-04-24 19:04:58 PDT
Created attachment 230129 [details] Patch
Darin Adler
Comment 2 2014-04-24 19:05:41 PDT
<rdar://problem/16720640>
Brady Eidson
Comment 3 2014-04-24 20:18:48 PDT
Comment on attachment 230129 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=230129&action=review > Source/WebCore/loader/FrameLoader.cpp:819 > + // of this function can be called the frame's destructor, and it's not legal ...can be called *in* the frame's destructor..
Darin Adler
Comment 4 2014-04-24 23:01:58 PDT
Committed r167790: <http://trac.webkit.org/changeset/167790>
Note You need to log in before you can comment on or make changes to this bug.