[WebPositive] crashes on quit

[diver]

hrev49853.

WebPositive crashed on quit:

state: Exception (Segment violation)

Frame		IP			Function Name
		-----------------------------------------------
0x79a2a7e0	0x17ec08c	BList::ItemAtFast(long) const + 0xc 
	Disassembly:
		BList::ItemAtFast(long) const:
		0x017ec080:               55  push %ebp
		0x017ec081:             89e5  mov %esp, %ebp
		0x017ec083:           8b4508  mov 0x8(%ebp), %eax
		0x017ec086:           8b4004  mov 0x4(%eax), %eax
		0x017ec089:           8b550c  mov 0xc(%ebp), %edx
		0x017ec08c:           8b0490  mov (%eax,%edx,4), %eax <--

	Frame memory:
		[0x79a2a7d8]  (..y.~..   28 a8 a2 79 ce 7e ab 00
0x79a2a830	0xab7ec9	SettingsMessage::RemoveListener(BMessenger const&) + 0x4d 
0x79a2a880	0xac0342	BrowserWindow::~BrowserWindow() + 0x3a 
0x79a2a8a0	0xac03db	BrowserWindow::~BrowserWindow() + 0x17 
0x79a2a8c0	0x16c7184	BLooper::_task0_(void*) + 0x3c 
0x79a2a8d8	0x224fa92	thread_entry + 0x19 
00000000	0x6247a250	commpage_thread_exit + 0 

[diver]

another crash on quit (possibly related)

[cocobean]

Tested on hrev52029. Seems resolved. WebPositive does not crash during quit at this time.

[nielx]

Remove milestone for tickets with status = closed and resolution != fixed