To reproduce: 1. Create a WebView 2. Call IWebView::close 3. Call IWebView::mainFrame You'll crash.
The problem is that IWebView::close deletes m_page, which ends up releasing the last reference to m_mainFrame, but we don't null-out m_mainFrame.
<rdar://problem/7472766>
Created attachment 284205 [details] Patch
Comment on attachment 284205 [details] Patch Excellent! r=me.
(In reply to comment #4) > Comment on attachment 284205 [details] > Patch > > Excellent! r=me. Thanks for reviewing :)
Committed r203597: <https://trac.webkit.org/changeset/203597>