| commit | 97b332d97c87d77044673485f912778274bd263d | [log] [tgz] |
|---|---|---|
| author | jl@opera.com <jl@opera.com@bbb929c8-8fbe-4397-9dbb-9b2b20218538> | Tue Jan 14 17:14:03 2014 |
| committer | jl@opera.com <jl@opera.com@bbb929c8-8fbe-4397-9dbb-9b2b20218538> | Tue Jan 14 17:14:03 2014 |
| tree | 0f06edb7302bafb00827925919b2816291c340df | |
| parent | 8e13c23bc3420f7e58f5d23c56fc6738c757f149 [diff] |
Fix crash when popstate handler detaches frame during history navigation Protect FrameLoader::m_frame in FrameLoader::loadHistoryItem() to keep it from being destroyed if a popstate event handler, dispatched via FrameLoader::loadInSameDocument(), removes the frame from the parent document. BUG=334239 Review URL: https://codereview.chromium.org/138213002 git-svn-id: svn://svn.chromium.org/blink/trunk@165081 bbb929c8-8fbe-4397-9dbb-9b2b20218538