My favorites | Sign in
Project Home Downloads Wiki Issues Source
New issue   Search
for
  Advanced search   Search tips   Subscriptions
Issue 610: Win: Crash when deleting the browser while in the client drag handler
1 person starred this issue and may be notified of changes. Back to list
Status:  Fixed
Owner:  magreenb...@gmail.com
Closed:  May 2012
SPI


Sign in to add a comment
 
Project Member Reported by magreenb...@gmail.com, May 30, 2012
CEF1 963 branch.
Windows 7 64bit.

What steps will reproduce the problem?
1. Begin dragging from a CEF window.
2. In the client drag handler delete the CEF window.

What is the expected output? What do you see instead?
The drag operation should complete successfully. Instead, CEF crashes in WebCore::EventHandler::mouseMoved. The problem can be explained as follows:

1. WebWidgetHost::WndProc receives WM_MOUSEMOVE which calls EventHandler::mouseMoved line 1560 which calls the client drag/drop handling.
2. Client drag/drop handling destroys the window which deletes the WebWidgetHost and underlying WebKit objects.
3. EventHandler::mouseMoved line 1565 tries to access |m_frame| but the EventHandler object has already been deleted.
May 30, 2012
Project Member #1 magreenb...@gmail.com
Fixed in revision 655 and revision 656 by delaying browser destruction until the drag operation has completed.
Status: Fixed
Jun 1, 2012
Project Member #2 magreenb...@gmail.com
A related crash occurs on OS-X 10.6. Revision 663 and revision 664 fixes that crash.
Sign in to add a comment

Powered by Google Project Hosting