Bug 23470 - Crash when page load occurs while processing scroll event with mallocscribble enabled
Summary: Crash when page load occurs while processing scroll event with mallocscribble...
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebCore Misc. (show other bugs)
Version: 528+ (Nightly build)
Hardware: Mac OS X 10.5
: P2 Normal
Assignee: Oliver Hunt
Depends on:
Reported: 2009-01-21 20:52 PST by Oliver Hunt
Modified: 2009-01-22 08:59 PST (History)
0 users

See Also:

Add a protector (1.55 KB, patch)
2009-01-21 21:01 PST, Oliver Hunt
hyatt: review+
Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Oliver Hunt 2009-01-21 20:52:17 PST
I spotted a crash that occurs when a page load occurs in the middle of processing a scroll event that has been propagated to a subframe that is destroyed by the page load.

Alas reproducing requires malloc scribble, and a timer driven load independent of webcore.
Comment 1 Oliver Hunt 2009-01-21 21:01:32 PST
Created attachment 26922 [details]
Add a protector

Simple fix
Comment 2 Dave Hyatt 2009-01-21 21:12:26 PST
Comment on attachment 26922 [details]
Add a protector

Comment 3 Oliver Hunt 2009-01-22 08:59:44 PST
Committing to http://svn.webkit.org/repository/webkit/trunk ...
	M	WebCore/ChangeLog
	M	WebCore/page/EventHandler.cpp
Committed r40112