Source/WebCore: Crash in WebCore::FrameLoader::checkCompleted()
authorjaphet@chromium.org <japhet@chromium.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 20 Feb 2013 23:13:53 +0000 (23:13 +0000)
committerjaphet@chromium.org <japhet@chromium.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Wed, 20 Feb 2013 23:13:53 +0000 (23:13 +0000)
commitd7565ce7fea73599fd3d414a6261c072dc14bf73
treea501945558a93cf01eff4b999376a3326b1d0d98
parent5a3dbdc87a23b0d62b42b8210fda0ce71310f88f
Source/WebCore: Crash in WebCore::FrameLoader::checkCompleted()
https://bugs.webkit.org/show_bug.cgi?id=110237

Reviewed by Abhishek Arya.

Test: http/tests/misc/delete-frame-during-readystatechange.html

* loader/FrameLoader.cpp:
(WebCore::FrameLoader::checkCompleted): Protect before setReadyState() is called.

LayoutTests: Test for https://bugs.webkit.org/show_bug.cgi?id=110237

Reviewed by Abhishek Arya.

* http/tests/misc/delete-frame-during-readystatechange-expected.txt: Added.
* http/tests/misc/delete-frame-during-readystatechange.html: Added.
* http/tests/misc/resources/delete-frame-during-readystatechange-frame.html: Added.
* http/tests/misc/resources/empty.ogv: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@143514 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/http/tests/misc/delete-frame-during-readystatechange-expected.txt [new file with mode: 0644]
LayoutTests/http/tests/misc/delete-frame-during-readystatechange.html [new file with mode: 0644]
LayoutTests/http/tests/misc/resources/delete-frame-during-readystatechange-frame.html [new file with mode: 0644]
LayoutTests/http/tests/misc/resources/empty.ogv [new file with mode: 0644]
Source/WebCore/ChangeLog
Source/WebCore/loader/FrameLoader.cpp