Bug 55276

Summary:

WebPage::close() accesses "this" after it is destroyed.

Product:

WebKit

Reporter:

Alexey Proskuryakov <ap>

Component:

WebKit2

Assignee:

Alexey Proskuryakov <ap>

Status:

RESOLVED FIXED

Severity:

Normal

CC:

andersca, aroben

Priority:

Version:

528+ (Nightly build)

Hardware:

Mac

OS:

OS X 10.6

Attachments:

Description	Flags
proposed patch	andersca: review+

Description Alexey Proskuryakov 2011-02-25 16:05:52 PST

Causes crashes with GuardMalloc.

    WebProcess::shared().removeWebPage(m_pageID); // Can destroy "this"
 
    if (m_isRunningModal) {
        m_isRunningModal = false;

Comment 1 Alexey Proskuryakov 2011-02-25 16:11:15 PST

Created attachment 83896 [details]
proposed patch

Comment 2 Alexey Proskuryakov 2011-02-25 16:25:57 PST

Committed <http://trac.webkit.org/changeset/79742>.

Comment 3 Adam Roben (:aroben) 2011-02-27 08:23:05 PST


*** This bug has been marked as a duplicate of bug 53721 ***

Comment 4 Alexey Proskuryakov 2011-02-27 10:49:20 PST

*** Bug 53721 has been marked as a duplicate of this bug. ***