|Issue 610:||Win: Crash when deleting the browser while in the client drag handler|
|1 person starred this issue and may be notified of changes.||Back to list|
CEF1 963 branch. Windows 7 64bit. What steps will reproduce the problem? 1. Begin dragging from a CEF window. 2. In the client drag handler delete the CEF window. What is the expected output? What do you see instead? The drag operation should complete successfully. Instead, CEF crashes in WebCore::EventHandler::mouseMoved. The problem can be explained as follows: 1. WebWidgetHost::WndProc receives WM_MOUSEMOVE which calls EventHandler::mouseMoved line 1560 which calls the client drag/drop handling. 2. Client drag/drop handling destroys the window which deletes the WebWidgetHost and underlying WebKit objects. 3. EventHandler::mouseMoved line 1565 tries to access |m_frame| but the EventHandler object has already been deleted.
May 30, 2012
Fixed in revision 655 and revision 656 by delaying browser destruction until the drag operation has completed.
|► Sign in to add a comment|