Bug 13868

Summary:

REGRESSION: crash on accessing a new iframe's contentWindow property

Product:

WebKit

Reporter:

Sam Weinig <sam>

Component:

Frames

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

Keywords:

InRadar, Regression

Priority:

Version:

523.x (Safari 3)

Hardware:

Mac

OS:

OS X 10.4

Attachments:

Description	Flags
testcase {CRASHES BROWSER}	none
patch	sam: review+

Sam Weinig

Reported 2007-05-24 21:50:38 PDT

I have narrowed down the revisions to somewhere between r21639 - 21665.

Attachments
testcase {CRASHES BROWSER} (327 bytes, text/html) 2007-05-24 21:54 PDT, Sam Weinig	no flags	Details
patch (6.56 KB, patch) 2007-05-30 13:54 PDT, Sam Weinig	sam: review+	Details Formatted Diff Diff
View All Add attachment proposed patch, testcase, etc.

Sam Weinig

Comment 1 2007-05-24 21:54:48 PDT

Created attachment 14711 [details] testcase {CRASHES BROWSER}

Sam Weinig

Comment 2 2007-05-24 22:39:06 PDT

From preliminary testing it looks like http://trac.webkit.org/projects/webkit/changeset/21646 is the culprit.

Sam Weinig

Comment 3 2007-05-30 13:54:26 PDT

Sam Weinig

Comment 4 2007-05-30 13:56:02 PDT

Sam Weinig

Comment 5 2007-05-30 14:18:54 PDT

Comment on attachment 14791 [details] patch This was reviewed by David Harrison.

Sam Weinig

Comment 6 2007-05-30 14:19:10 PDT

Landed in r21902.

Note You need to log in before you can comment on or make changes to this bug.