ScriptObject default constructor should initialize the Script State to 0. V8 binding has already done the initialization( http://trac.webkit.org/browser/trunk/Source/WebCore/bindings/v8/ScriptObject.h#L47 ). Adding it for JS binding. Patch follows.
Created attachment 188989 [details] Patch
Is there a regression test for this?
(In reply to comment #2) > Is there a regression test for this? Unfortunately I couldn't find any regression test handy for this at the moment. I am trying to create empty InjectedScript in a case when the JavaScript is disabled across the browser. During this, I found that the ScriptState is not initialized to 0.
@Geoffrey I am not sure how to write a test case for this error scenario as I am finding it as a non-trivial case. Do you have any suggestion about writing the test scenario for it? Thank you.
Comment on attachment 188989 [details] Patch OK. r=me
Comment on attachment 188989 [details] Patch Thank you!
Comment on attachment 188989 [details] Patch Clearing flags on attachment: 188989 Committed r143631: <http://trac.webkit.org/changeset/143631>
All reviewed patches have been landed. Closing bug.