Bug 26172

Summary: v8's ScriptController::evaluate should protect the Frame like the jsc version.
Product: WebKit Reporter: David Levin <levin>
Component: WebCore Misc.Assignee: David Levin <levin>
Status: RESOLVED FIXED    
Severity: Normal CC: dglazkov
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: All   
OS: All   
Attachments:
Description Flags
Proposed fix. dglazkov: review+

David Levin
Reported 2009-06-03 13:15:33 PDT
jsc;s ScriptController added refs to the Frame to protect it during certain javascript calls in the following changes: * http://trac.webkit.org/changeset/42409 * http://trac.webkit.org/changeset/42417 v8's version should have the same ref count protections to avoid similar crashes.
Attachments
Proposed fix. (1.71 KB, patch)
2009-06-03 13:24 PDT, David Levin 		dglazkov: review+
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
David Levin
Comment 1 2009-06-03 13:24:03 PDT
Created attachment 30923 [details] Proposed fix.
David Levin
Comment 2 2009-06-03 13:33:31 PDT
Committed as http://trac.webkit.org/changeset/44391
Note You need to log in before you can comment on or make changes to this bug.