Files
browser/src
Karl Seguin 108d5c68fd crash: Fix handlescope corruption on iframe load
In trying to fuzz test a different issue, I ran into a reproducible case where
we end up with a broken handlescope stack. The issue requires a large number
of handlescopes created with aggressive GC, so hopefully it isn't something
that too many users have run into.

The issue is that a single HandleScope address is used to initialize two
HandleScopes. The fix could just be to create a 2nd HS variable (to get a 2nd
address), but the first initialization is unnecessary and can just be removed.

(Note that EventManager dispatch creates its own HandleScope, so the one
removed in frameCompletedLoading really did nothing)
2026-06-25 17:41:42 +08:00
..
2026-06-24 17:44:58 +08:00
2026-06-24 17:44:58 +08:00
2026-06-24 07:01:29 +08:00
2026-06-24 07:01:29 +08:00