Bug 20976

Summary:

REGRESSION(r36675): Crash in WebCore::JSDOMWindowShell when garbage collecting during creation of JSDOMWindow

Product:

WebKit

Reporter:

Kevin M. Dean <kevin>

Component:

WebCore JavaScript

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

Keywords:

Regression

Priority:

Version:

528+ (Nightly build)

Hardware:

Mac (PowerPC)

OS:

OS X 10.5

Attachments:

Description	Flags
crashlog	none

Kevin M. Dean

Reported 2008-09-21 16:03:00 PDT

Webkit has crashed 4 times since the new javascript update.

Attachments
crashlog (37.47 KB, text/plain) 2008-09-21 16:03 PDT, Kevin M. Dean	no flags	Details
View All Add attachment proposed patch, testcase, etc.

Kevin M. Dean

Comment 1 2008-09-21 16:03:50 PDT

Mark Rowe (bdash)

Comment 2 2008-09-21 16:33:36 PDT

*** Bug 20977 has been marked as a duplicate of this bug. ***

Mark Rowe (bdash)

Comment 3 2008-09-21 16:36:06 PDT

This was fixed in r36726 by the change at <http://trac.webkit.org/changeset/36726#file90>. I'll work on getting a new nightly build up that includes this fix.

Note You need to log in before you can comment on or make changes to this bug.