Bug 6507

Summary: Browser crashes when passing object returned by modal dialog to alert function
Product: WebKit Reporter: Matthew Ralston <opendarwin>
Component: DOMAssignee: Nobody <webkit-unassigned>
Status: RESOLVED WORKSFORME    
Severity: Normal CC: ian
Priority: P2    
Version: 420+   
Hardware: Mac   
OS: OS X 10.4   
URL: http://www.mralston.com/crashsafari/
Attachments:
Description Flags
Bug Demonstration none

Matthew Ralston
Reported 2006-01-12 08:54:56 PST
Safari version 2.0.3 (417.8) on OS X 10.4.4 crashes when passing an object returned from a modal dialog to the alert() function. Procedure: 1. Open a dialog window with the new window.showModalDialog() function. 2. Inside the window, assign an object to the window.returnValue property. 3. Close the window. 4. In the calling window, use the alert() function to show the returnValue. 5. Crash!
Attachments
Bug Demonstration (2.17 KB, application/zip)
2006-01-12 08:58 PST, Matthew Ralston 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Matthew Ralston
Comment 1 2006-01-12 08:58:35 PST
Created attachment 5619 [details] Bug Demonstration
Alexey Proskuryakov
Comment 2 2006-01-12 12:58:35 PST
I couldn't make a nightly build (http://nightly.webkit.org) or my local debug build crash here, but the test case still doesn't work correctly. The displayed result is sometimes "[object INPUT]", and other times "undefined", without an obvious pattern.
Alexey Proskuryakov
Comment 3 2007-03-31 11:53:53 PDT
I cannot reproduce this with a r20088 nightly, nor with a current local debug build.
Note You need to log in before you can comment on or make changes to this bug.