Comment #5 on issue 7367 by [email protected]: Chrome: Crash Report - Stack Signature: WTF::RefCounted<WebCore::Attribute>::deref() http://code.google.com/p/chromium/issues/detail?id=7367
Narrowed down to to problem on WebKit trunk. It's enough to create an html page like this: <FRAMESET><FRAME name=_top src="about:blank" /> And webkit tries to load the new frame _top onto the main frame and that causes a crash. Bug: This fixes https://bugs.webkit.org/show_bug.cgi?id=23899 Patch: https://bugs.webkit.org/show_bug.cgi?id=23900 -- You received this message because you are listed in the owner or CC fields of this issue, or because you starred this issue. You may adjust your issue notification preferences at: http://code.google.com/hosting/settings --~--~---------~--~----~------------~-------~--~----~ Automated mail from issue updates at http://crbug.com/ Subscription options: http://groups.google.com/group/chromium-bugs -~----------~----~----~----~------~----~------~--~---
