Summary: | Occasional unreproducible crashes in MessageReceiverMap::dispatchMessage | ||||||
---|---|---|---|---|---|---|---|
Product: | WebKit | Reporter: | Tim Horton <thorton> | ||||
Component: | WebKit2 | Assignee: | Tim Horton <thorton> | ||||
Status: | RESOLVED FIXED | ||||||
Severity: | Normal | CC: | andersca, darin, mitz, sam, simon.fraser | ||||
Priority: | P2 | Keywords: | InRadar | ||||
Version: | 528+ (Nightly build) | ||||||
Hardware: | Unspecified | ||||||
OS: | Unspecified | ||||||
Attachments: |
|
Description
Tim Horton
2014-09-18 00:04:49 PDT
Created attachment 238291 [details]
Patch
Step 2: Make a API test, if possible. Prerequisites include getting TestWebKitAPI a Modern API bundle and ... causing the issue to reproduce at all. Going to try this now, but I want to keep it separate from the fix for mergability's sake (most likely going to change bundle loading code). Step 3: Fix a few less obviously bad but still confusing cases of message receivers not being removed before the object is destroyed. Step 4: Add some assertions that catch this and the other cases; Anders and I wrote some nice assertions today that catch all of these things. |