Reproducible crash in WebChromeClient::invalidateContentsAndWindow() on simonscat.com
Created attachment 90881 [details] Add null checks
Comment on attachment 90881 [details] Add null checks This requires a manual test because the borderless window used by WebKitTestRunner doesn’t have a grow box, and having one is essential for the crashing code path to be taken.
Comment on attachment 90881 [details] Add null checks r=me
Fixed in r84757. <http://trac.webkit.org/changeset/84757>