You need to
before you can comment on or make changes to this bug.
Having r87628 in place, Chrome reliability bot crashes in WebCore::HTMLLinkElement::onloadTimerFired
This is because the change makes WebCore::CachedResource::setRequest to call checkNotify on request reset.
HTMLLinkElement registers itself as CachedResource client via m_cachedSheet, which can happen even if m_cachedLinkResource wasn't set.
As a result, WebCore::HTMLLinkElement::notifyFinished is got called with unset m_cachedLinkResource, which causes a crash in HTMLLinkElement::onloadTimerFired
Created an attachment (id=95348) [details]
(From update of attachment 95348 [details])
I'm not sure this patch is correct. Why is notifyFinished being called with a different cached resource?
Created an attachment (id=95351) [details]
I'm going to land this patch without a test because this is blocking WebKit => Chromium integration. I'll add the test in Bug 61736.
Committed r87693: <http://trac.webkit.org/changeset/87693>
Thanks Adam! I don't have the time to deeply investigate this right now, but the patch looks very reasonable.