2011-05-27 Nate Chapin <japhet@chromium.org>
authorjaphet@chromium.org <japhet@chromium.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Sat, 28 May 2011 02:24:20 +0000 (02:24 +0000)
committerjaphet@chromium.org <japhet@chromium.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Sat, 28 May 2011 02:24:20 +0000 (02:24 +0000)
commit280787533f18583c9e2b62a42e32a88c56095d34
treef1203f5606befaad2ba4a0d5d89d6b78d0cb49d2
parentda2c91bf7e6aee0d2431ffee0666775a78f214df
2011-05-27  Nate Chapin  <japhet@chromium.org>

        Reviewed by Jian Li.

        Keep a reference to BlobResourceHandle before calling doNotifyFinish()
        asynchronously to ensure it's still safe in the main thread.

        https://bugs.webkit.org/show_bug.cgi?id=61669

        I triggered this crash in fast/files/file-reader-abort.html during a
        refactor that changed timings slightly.

        * platform/network/BlobResourceHandle.cpp:
        (WebCore::doNotifyFinish):
        (WebCore::BlobResourceHandle::notifyFinish):
        * platform/network/BlobResourceHandle.h:
        (WebCore::BlobResourceHandle::aborted):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@87595 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Source/WebCore/ChangeLog
Source/WebCore/platform/network/BlobResourceHandle.cpp
Source/WebCore/platform/network/BlobResourceHandle.h