It keeps stale pointer of frame. If the frame is unloaded, searching on that frame would cause segmentation fault.
Created attachment 175869 [details] Patch
Comment on attachment 175869 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=175869&action=review LGTM. > Source/WebKit/blackberry/WebKitSupport/InPageSearchManager.cpp:251 > + for (size_t i = 0; i < m_deferredScopingWork.size(); i++) { pre-increment is more efficient.
Comment on attachment 175869 [details] Patch Rejecting attachment 175869 [details] from commit-queue. New failing tests: svg/W3C-SVG-1.1/animate-elem-78-t.svg Full output: http://queues.webkit.org/results/14984154
Comment on attachment 175869 [details] Patch Clearing flags on attachment: 175869 Committed r135664: <http://trac.webkit.org/changeset/135664>
All reviewed patches have been landed. Closing bug.