113530 2013-03-28 12:38:50 -0700 REGRESSION(r143834): Multiple use-after-free regressions on ClusterFuzz (Requested by inferno-sec on #webkit). 2013-03-28 12:55:53 -0700 1 1 1 Unclassified WebKit New Bugs 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 110598 1 webkit.review.bot webkit.review.bot inferno kling koivisto oldest_to_newest 865710 0 webkit.review.bot 2013-03-28 12:38:50 -0700 http://trac.webkit.org/changeset/143834 broke the build: Multiple use-after-free regressions on ClusterFuzz (Requested by inferno-sec on #webkit). This is an automatic bug report generated by the sheriff-bot. If this bug report was created because of a flaky test, please file a bug for the flaky test (if we don't already have one on file) and dup this bug against that bug so that we can track how often these flaky tests case pain. "Only you can prevent forest fires." -- Smokey the Bear 865712 1 195620 webkit.review.bot 2013-03-28 12:39:19 -0700 Created attachment 195620 ROLLOUT of r143834 Any committer can land this patch automatically by marking it commit-queue+. The commit-queue will build and test the patch before landing to ensure that the rollout will be successful. This process takes approximately 15 minutes. If you would like to land the rollout faster, you can use the following command: webkit-patch land-attachment ATTACHMENT_ID where ATTACHMENT_ID is the ID of this attachment. 865718 2 inferno 2013-03-28 12:48:20 -0700 For crash testcases, please see https://bugs.webkit.org/show_bug.cgi?id=110770 865727 3 195620 webkit.review.bot 2013-03-28 12:55:50 -0700 Comment on attachment 195620 ROLLOUT of r143834 Clearing flags on attachment: 195620 Committed r147144: <http://trac.webkit.org/changeset/147144> 865728 4 webkit.review.bot 2013-03-28 12:55:53 -0700 All reviewed patches have been landed. Closing bug. 195620 2013-03-28 12:39:19 -0700 2013-03-28 12:55:50 -0700 ROLLOUT of r143834 bug-113530-20130328193916.patch text/plain 7245 webkit.review.bot U3VidmVyc2lvbiBSZXZpc2lvbjogMTQ3MTQwCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggOGU5YWQyNTk0MTJiMDdl Y2Y4OTQ4NmM2OGUxNWYwYWNlZWU5OTAyZS4uMjkxMzk4ZmRiMTYwZWZmODQ5YWZlZjYzMzZjN2Jj YmYwMjA5YWQxZSAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDIzIEBACisyMDEzLTAzLTI4ICBTaGVy aWZmIEJvdCAgPHdlYmtpdC5yZXZpZXcuYm90QGdtYWlsLmNvbT4KKworICAgICAgICBVbnJldmll d2VkLCByb2xsaW5nIG91dCByMTQzODM0LgorICAgICAgICBodHRwOi8vdHJhYy53ZWJraXQub3Jn L2NoYW5nZXNldC8xNDM4MzQKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19i dWcuY2dpP2lkPTExMzUzMAorCisgICAgICAgIE11bHRpcGxlIHVzZS1hZnRlci1mcmVlIHJlZ3Jl c3Npb25zIG9uIENsdXN0ZXJGdXp6IChSZXF1ZXN0ZWQKKyAgICAgICAgYnkgaW5mZXJuby1zZWMg b24gI3dlYmtpdCkuCisKKyAgICAgICAgKiBkb20vQXR0ci5jcHA6CisgICAgICAgIChXZWJDb3Jl OjpBdHRyOjpBdHRyKToKKyAgICAgICAgKFdlYkNvcmU6OkF0dHI6OnNldFZhbHVlKToKKyAgICAg ICAgKFdlYkNvcmU6OkF0dHI6OmNoaWxkcmVuQ2hhbmdlZCk6CisgICAgICAgICogZG9tL0F0dHIu aDoKKyAgICAgICAgKEF0dHIpOgorICAgICAgICAqIGRvbS9FbGVtZW50LmNwcDoKKyAgICAgICAg KFdlYkNvcmU6OkVsZW1lbnQ6OnNldEF0dHJpYnV0ZUludGVybmFsKToKKyAgICAgICAgKiBkb20v RWxlbWVudC5oOgorICAgICAgICAoRWxlbWVudCk6CisKIDIwMTMtMDMtMjggIEp1bGllbiBDaGFm ZnJhaXggIDxqY2hhZmZyYWl4QHdlYmtpdC5vcmc+CiAKICAgICAgICAgW0NTUyBHcmlkIExheW91 dF0gQmVmb3JlIC8gc3RhcnQgcGFkZGluZ3MgYW5kIGJvcmRlcnMgYXJlIG5vdCBhY2NvdW50ZWQg Zm9yIHdoZW4gcGxhY2luZyB0aGUgZ3JpZCBpdGVtcwpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYkNv cmUvZG9tL0F0dHIuY3BwIGIvU291cmNlL1dlYkNvcmUvZG9tL0F0dHIuY3BwCmluZGV4IGI5N2Nj N2YzMjM1YWE2MjY3MmMyYjkxNjdmZTIzNWU2YjhkZDlmMmYuLjAxYWEyYTI2MzNjZmJmNjY2ZDVj ODBkMTczMmZhNzM5OTNhODI1MmYgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJDb3JlL2RvbS9BdHRy LmNwcAorKysgYi9Tb3VyY2UvV2ViQ29yZS9kb20vQXR0ci5jcHAKQEAgLTMsNyArMyw3IEBACiAg KiAgICAgICAgICAgKEMpIDE5OTkgQW50dGkgS29pdmlzdG8gKGtvaXZpc3RvQGtkZS5vcmcpCiAg KiAgICAgICAgICAgKEMpIDIwMDEgUGV0ZXIgS2VsbHkgKHBta0Bwb3N0LmNvbSkKICAqICAgICAg ICAgICAoQykgMjAwMSBEaXJrIE11ZWxsZXIgKG11ZWxsZXJAa2RlLm9yZykKLSAqIENvcHlyaWdo dCAoQykgMjAwNCwgMjAwNSwgMjAwNiwgMjAwNywgMjAwOSwgMjAxMCwgMjAxMiwgMjAxMyBBcHBs ZSBJbmMuIEFsbCByaWdodHMgcmVzZXJ2ZWQuCisgKiBDb3B5cmlnaHQgKEMpIDIwMDQsIDIwMDUs IDIwMDYsIDIwMDcsIDIwMDksIDIwMTAsIDIwMTIgQXBwbGUgSW5jLiBBbGwgcmlnaHRzIHJlc2Vy dmVkLgogICoKICAqIFRoaXMgbGlicmFyeSBpcyBmcmVlIHNvZnR3YXJlOyB5b3UgY2FuIHJlZGlz dHJpYnV0ZSBpdCBhbmQvb3IKICAqIG1vZGlmeSBpdCB1bmRlciB0aGUgdGVybXMgb2YgdGhlIEdO VSBMaWJyYXJ5IEdlbmVyYWwgUHVibGljCkBAIC0zMCw3ICszMCw2IEBACiAjaW5jbHVkZSAiU3R5 bGVkRWxlbWVudC5oIgogI2luY2x1ZGUgIlRleHQuaCIKICNpbmNsdWRlICJYTUxOU05hbWVzLmgi Ci0jaW5jbHVkZSA8d3RmL1RlbXBvcmFyeUNoYW5nZS5oPgogI2luY2x1ZGUgPHd0Zi90ZXh0L0F0 b21pY1N0cmluZy5oPgogI2luY2x1ZGUgPHd0Zi90ZXh0L1N0cmluZ0J1aWxkZXIuaD4KIApAQCAt NDMsNyArNDIsNiBAQCBBdHRyOjpBdHRyKEVsZW1lbnQqIGVsZW1lbnQsIGNvbnN0IFF1YWxpZmll ZE5hbWUmIG5hbWUpCiAgICAgLCBtX2VsZW1lbnQoZWxlbWVudCkKICAgICAsIG1fbmFtZShuYW1l KQogICAgICwgbV9pZ25vcmVDaGlsZHJlbkNoYW5nZWQoMCkKLSAgICAsIG1faW5DaGlsZHJlbkNo YW5nZWQoZmFsc2UpCiAgICAgLCBtX3NwZWNpZmllZCh0cnVlKQogewogfQpAQCAtNTQsNyArNTIs NiBAQCBBdHRyOjpBdHRyKERvY3VtZW50KiBkb2N1bWVudCwgY29uc3QgUXVhbGlmaWVkTmFtZSYg bmFtZSwgY29uc3QgQXRvbWljU3RyaW5nJiBzdAogICAgICwgbV9uYW1lKG5hbWUpCiAgICAgLCBt X3N0YW5kYWxvbmVWYWx1ZShzdGFuZGFsb25lVmFsdWUpCiAgICAgLCBtX2lnbm9yZUNoaWxkcmVu Q2hhbmdlZCgwKQotICAgICwgbV9pbkNoaWxkcmVuQ2hhbmdlZChmYWxzZSkKICAgICAsIG1fc3Bl Y2lmaWVkKHRydWUpCiB7CiB9CkBAIC0xMTEsMzIgKzEwOCwzMCBAQCB2b2lkIEF0dHI6OnNldFBy ZWZpeChjb25zdCBBdG9taWNTdHJpbmcmIHByZWZpeCwgRXhjZXB0aW9uQ29kZSYgZWMpCiAgICAg bV9uYW1lLnNldFByZWZpeChuZXdQcmVmaXgpOwogfQogCi12b2lkIEF0dHI6OnJlY3JlYXRlVGV4 dENoaWxkQWZ0ZXJBdHRyaWJ1dGVWYWx1ZUNoYW5nZWQoKQordm9pZCBBdHRyOjpzZXRWYWx1ZShj b25zdCBBdG9taWNTdHJpbmcmIHZhbHVlKQogewotICAgIGlmIChtX2luQ2hpbGRyZW5DaGFuZ2Vk KQotICAgICAgICByZXR1cm47CiAgICAgRXZlbnRRdWV1ZVNjb3BlIHNjb3BlOwogICAgIG1faWdu b3JlQ2hpbGRyZW5DaGFuZ2VkKys7CiAgICAgcmVtb3ZlQ2hpbGRyZW4oKTsKKyAgICBpZiAobV9l bGVtZW50KQorICAgICAgICBlbGVtZW50QXR0cmlidXRlKCkuc2V0VmFsdWUodmFsdWUpOworICAg IGVsc2UKKyAgICAgICAgbV9zdGFuZGFsb25lVmFsdWUgPSB2YWx1ZTsKICAgICBjcmVhdGVUZXh0 Q2hpbGQoKTsKICAgICBtX2lnbm9yZUNoaWxkcmVuQ2hhbmdlZC0tOwotfQogCi12b2lkIEF0dHI6 OnNldFZhbHVlKGNvbnN0IEF0b21pY1N0cmluZyYgdmFsdWUpCi17CiAgICAgaW52YWxpZGF0ZU5v ZGVMaXN0Q2FjaGVzSW5BbmNlc3RvcnMoJm1fbmFtZSwgbV9lbGVtZW50KTsKLQotICAgIGlmICht X2VsZW1lbnQpIHsKLSAgICAgICAgbV9lbGVtZW50LT5zZXRBdHRyaWJ1dGUobV9uYW1lLCB2YWx1 ZSk7Ci0gICAgICAgIHJldHVybjsKLSAgICB9Ci0gICAgbV9zdGFuZGFsb25lVmFsdWUgPSB2YWx1 ZTsKLSAgICByZWNyZWF0ZVRleHRDaGlsZEFmdGVyQXR0cmlidXRlVmFsdWVDaGFuZ2VkKCk7CiB9 CiAKIHZvaWQgQXR0cjo6c2V0VmFsdWUoY29uc3QgQXRvbWljU3RyaW5nJiB2YWx1ZSwgRXhjZXB0 aW9uQ29kZSYpCiB7CisgICAgaWYgKG1fZWxlbWVudCkKKyAgICAgICAgbV9lbGVtZW50LT53aWxs TW9kaWZ5QXR0cmlidXRlKHF1YWxpZmllZE5hbWUoKSwgdGhpcy0+dmFsdWUoKSwgdmFsdWUpOwor CiAgICAgc2V0VmFsdWUodmFsdWUpOworCisgICAgaWYgKG1fZWxlbWVudCkKKyAgICAgICAgbV9l bGVtZW50LT5kaWRNb2RpZnlBdHRyaWJ1dGUocXVhbGlmaWVkTmFtZSgpLCB2YWx1ZSk7CiB9CiAK IHZvaWQgQXR0cjo6c2V0Tm9kZVZhbHVlKGNvbnN0IFN0cmluZyYgdiwgRXhjZXB0aW9uQ29kZSYg ZWMpCkBAIC0xNjgsNyArMTYzLDcgQEAgdm9pZCBBdHRyOjpjaGlsZHJlbkNoYW5nZWQoYm9vbCwg Tm9kZSosIE5vZGUqLCBpbnQpCiAgICAgaWYgKG1faWdub3JlQ2hpbGRyZW5DaGFuZ2VkID4gMCkK ICAgICAgICAgcmV0dXJuOwogCi0gICAgVGVtcG9yYXJ5Q2hhbmdlPGJvb2w+IGNoYW5nZUluQ2hp bGRyZW5DaGFuZ2VkKG1faW5DaGlsZHJlbkNoYW5nZWQsIHRydWUpOworICAgIGludmFsaWRhdGVO b2RlTGlzdENhY2hlc0luQW5jZXN0b3JzKCZxdWFsaWZpZWROYW1lKCksIG1fZWxlbWVudCk7CiAK ICAgICAvLyBGSVhNRTogV2Ugc2hvdWxkIGluY2x1ZGUgZW50aXR5IHJlZmVyZW5jZXMgaW4gdGhl IHZhbHVlCiAKQEAgLTE3OCw3ICsxNzMsMTcgQEAgdm9pZCBBdHRyOjpjaGlsZHJlbkNoYW5nZWQo Ym9vbCwgTm9kZSosIE5vZGUqLCBpbnQpCiAgICAgICAgICAgICB2YWx1ZUJ1aWxkZXIuYXBwZW5k KHRvVGV4dChuKS0+ZGF0YSgpKTsKICAgICB9CiAKLSAgICBzZXRWYWx1ZSh2YWx1ZUJ1aWxkZXIu dG9BdG9taWNTdHJpbmcoKSk7CisgICAgQXRvbWljU3RyaW5nIG5ld1ZhbHVlID0gdmFsdWVCdWls ZGVyLnRvQXRvbWljU3RyaW5nKCk7CisgICAgaWYgKG1fZWxlbWVudCkKKyAgICAgICAgbV9lbGVt ZW50LT53aWxsTW9kaWZ5QXR0cmlidXRlKHF1YWxpZmllZE5hbWUoKSwgdmFsdWUoKSwgbmV3VmFs dWUpOworCisgICAgaWYgKG1fZWxlbWVudCkKKyAgICAgICAgZWxlbWVudEF0dHJpYnV0ZSgpLnNl dFZhbHVlKG5ld1ZhbHVlKTsKKyAgICBlbHNlCisgICAgICAgIG1fc3RhbmRhbG9uZVZhbHVlID0g bmV3VmFsdWU7CisKKyAgICBpZiAobV9lbGVtZW50KQorICAgICAgICBtX2VsZW1lbnQtPmF0dHJp YnV0ZUNoYW5nZWQocXVhbGlmaWVkTmFtZSgpLCBuZXdWYWx1ZSk7CiB9CiAKIGJvb2wgQXR0cjo6 aXNJZCgpIGNvbnN0CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9kb20vQXR0ci5oIGIvU291 cmNlL1dlYkNvcmUvZG9tL0F0dHIuaAppbmRleCA0ZjliYTQwYjNhY2ZmZGIwZmY4NDZiNTRjM2Rj MGZlMjA1YjViODEwLi44ZTc2MGFhMjU4NzgzZjJjMGJkODhlZGRjZWE3NDk0ZWQ2ZmM2MjA4IDEw MDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9kb20vQXR0ci5oCisrKyBiL1NvdXJjZS9XZWJDb3Jl L2RvbS9BdHRyLmgKQEAgLTY0LDggKzY0LDYgQEAgcHVibGljOgogICAgIHZvaWQgYXR0YWNoVG9F bGVtZW50KEVsZW1lbnQqKTsKICAgICB2b2lkIGRldGFjaEZyb21FbGVtZW50V2l0aFZhbHVlKGNv bnN0IEF0b21pY1N0cmluZyYpOwogCi0gICAgdm9pZCByZWNyZWF0ZVRleHRDaGlsZEFmdGVyQXR0 cmlidXRlVmFsdWVDaGFuZ2VkKCk7Ci0KIHByaXZhdGU6CiAgICAgQXR0cihFbGVtZW50KiwgY29u c3QgUXVhbGlmaWVkTmFtZSYpOwogICAgIEF0dHIoRG9jdW1lbnQqLCBjb25zdCBRdWFsaWZpZWRO YW1lJiwgY29uc3QgQXRvbWljU3RyaW5nJiB2YWx1ZSk7CkBAIC0xMDMsOSArMTAxLDggQEAgcHJp dmF0ZToKICAgICBBdG9taWNTdHJpbmcgbV9zdGFuZGFsb25lVmFsdWU7CiAKICAgICBSZWZQdHI8 U3R5bGVQcm9wZXJ0eVNldD4gbV9zdHlsZTsKLSAgICB1bnNpZ25lZCBzaG9ydCBtX2lnbm9yZUNo aWxkcmVuQ2hhbmdlZDsKLSAgICBib29sIG1faW5DaGlsZHJlbkNoYW5nZWQ7Ci0gICAgYm9vbCBt X3NwZWNpZmllZDsKKyAgICB1bnNpZ25lZCBtX2lnbm9yZUNoaWxkcmVuQ2hhbmdlZCA6IDMxOwor ICAgIGJvb2wgbV9zcGVjaWZpZWQgOiAxOwogfTsKIAogfSAvLyBuYW1lc3BhY2UgV2ViQ29yZQpk aWZmIC0tZ2l0IGEvU291cmNlL1dlYkNvcmUvZG9tL0VsZW1lbnQuY3BwIGIvU291cmNlL1dlYkNv cmUvZG9tL0VsZW1lbnQuY3BwCmluZGV4IDYxMDE1YzY0YjJiY2JlM2EzZDNjMjBjZDMyYzJhMDU4 YWY0YmU1NjYuLjUwZGFjOGJiMTFhMjUwZDg5NzViZmIyZTI2OTBmNzQ2Mjc5NjQxYjYgMTAwNjQ0 Ci0tLSBhL1NvdXJjZS9XZWJDb3JlL2RvbS9FbGVtZW50LmNwcAorKysgYi9Tb3VyY2UvV2ViQ29y ZS9kb20vRWxlbWVudC5jcHAKQEAgLTgxOCwxMCArODE4LDEzIEBAIGlubGluZSB2b2lkIEVsZW1l bnQ6OnNldEF0dHJpYnV0ZUludGVybmFsKHNpemVfdCBpbmRleCwgY29uc3QgUXVhbGlmaWVkTmFt ZSYgbmFtCiAgICAgICAgIHdpbGxNb2RpZnlBdHRyaWJ1dGUobmFtZSwgYXR0cmlidXRlSXRlbShp bmRleCktPnZhbHVlKCksIG5ld1ZhbHVlKTsKIAogICAgIGlmIChuZXdWYWx1ZSAhPSBhdHRyaWJ1 dGVJdGVtKGluZGV4KS0+dmFsdWUoKSkgewotICAgICAgICBlbnN1cmVVbmlxdWVFbGVtZW50RGF0 YSgpLT5hdHRyaWJ1dGVJdGVtKGluZGV4KS0+c2V0VmFsdWUobmV3VmFsdWUpOwotCisgICAgICAg IC8vIElmIHRoZXJlIGlzIGFuIEF0dHIgbm9kZSBob29rZWQgdG8gdGhpcyBhdHRyaWJ1dGUsIHRo ZSBBdHRyOjpzZXRWYWx1ZSgpIGNhbGwgYmVsb3cKKyAgICAgICAgLy8gd2lsbCB3cml0ZSBpbnRv IHRoZSBFbGVtZW50RGF0YS4KKyAgICAgICAgLy8gRklYTUU6IFJlZmFjdG9yIHRoaXMgc28gaXQg bWFrZXMgc29tZSBzZW5zZS4KICAgICAgICAgaWYgKFJlZlB0cjxBdHRyPiBhdHRyTm9kZSA9IGlu U3luY2hyb25pemF0aW9uT2ZMYXp5QXR0cmlidXRlID8gMCA6IGF0dHJJZkV4aXN0cyhuYW1lKSkK LSAgICAgICAgICAgIGF0dHJOb2RlLT5yZWNyZWF0ZVRleHRDaGlsZEFmdGVyQXR0cmlidXRlVmFs dWVDaGFuZ2VkKCk7CisgICAgICAgICAgICBhdHRyTm9kZS0+c2V0VmFsdWUobmV3VmFsdWUpOwor ICAgICAgICBlbHNlCisgICAgICAgICAgICBlbnN1cmVVbmlxdWVFbGVtZW50RGF0YSgpLT5hdHRy aWJ1dGVJdGVtKGluZGV4KS0+c2V0VmFsdWUobmV3VmFsdWUpOwogICAgIH0KIAogICAgIGlmICgh aW5TeW5jaHJvbml6YXRpb25PZkxhenlBdHRyaWJ1dGUpCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2Vi Q29yZS9kb20vRWxlbWVudC5oIGIvU291cmNlL1dlYkNvcmUvZG9tL0VsZW1lbnQuaAppbmRleCAx NGQ1ZjEyNTE4OWVkYWVlYmE1ZTk3NDI5YjQ3ZWY0ZGVlNDIxNTVmLi4xZWM5ZTMwNDcyYzc0ODY4 OTk4NzE4YjE0NmJiZjExMTFhNWVjMmMzIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9kb20v RWxlbWVudC5oCisrKyBiL1NvdXJjZS9XZWJDb3JlL2RvbS9FbGVtZW50LmgKQEAgLTY1Nyw2ICs2 NTcsOSBAQCBwcml2YXRlOgogICAgIHZpcnR1YWwgdm9pZCBkaWRBZGRVc2VyQWdlbnRTaGFkb3dS b290KFNoYWRvd1Jvb3QqKSB7IH0KICAgICB2aXJ0dWFsIGJvb2wgYWx3YXlzQ3JlYXRlVXNlckFn ZW50U2hhZG93Um9vdCgpIGNvbnN0IHsgcmV0dXJuIGZhbHNlOyB9CiAKKyAgICAvLyBGSVhNRTog UmVtb3ZlIHRoZSBuZWVkIGZvciBBdHRyIHRvIGNhbGwgd2lsbE1vZGlmeUF0dHJpYnV0ZS9kaWRN b2RpZnlBdHRyaWJ1dGUuCisgICAgZnJpZW5kIGNsYXNzIEF0dHI7CisKICAgICBlbnVtIFN5bmNo cm9uaXphdGlvbk9mTGF6eUF0dHJpYnV0ZSB7IE5vdEluU3luY2hyb25pemF0aW9uT2ZMYXp5QXR0 cmlidXRlID0gMCwgSW5TeW5jaHJvbml6YXRpb25PZkxhenlBdHRyaWJ1dGUgfTsKIAogICAgIHZv aWQgZGlkQWRkQXR0cmlidXRlKGNvbnN0IFF1YWxpZmllZE5hbWUmLCBjb25zdCBBdG9taWNTdHJp bmcmKTsK