114214 2013-04-08 13:50:13 -0700 Crash in ScrollingCoordinator::mainThreadScrollingReasons() when going back 2013-04-08 13:58:59 -0700 1 1 1 Unclassified WebKit Layout and Rendering 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 bdakin bdakin andersca bdakin cmarcelo jamesr luiz tonikitoo webkit.review.bot oldest_to_newest 871145 0 bdakin 2013-04-08 13:50:13 -0700 It's possible to hit the following crash when going back: 1 com.apple.WebCore 0x7fff8ef4c02e WebCore::ScrollingCoordinator::mainThreadScrollingReasons() const + 0xae 2 com.apple.WebCore 0x7fff8ea4dc4f non-virtual thunk to WebCore::FrameView::isRubberBandInProgress() const + 0x3f 3 com.apple.WebCore 0x7fff8e4bad49 WebCore::ScrollView::updateScrollbars(WebCore::IntSize const&) + 0x889 4 com.apple.WebCore 0x7fff8e445398 WebCore::ScrollView::setFrameRect(WebCore::IntRect const&) + 0x78 5 com.apple.WebCore 0x7fff8e44528b WebCore::FrameView::setFrameRect(WebCore::IntRect const&) + 0x4b 6 com.apple.WebCore 0x7fff8e6c5d8b WebCore::FrameLoader::open(WebCore::CachedFrameBase&) + 0x27b 7 com.apple.WebCore 0x7fff8e6c5ae1 WebCore::CachedFrame::open() + 0x21 8 com.apple.WebCore 0x7fff8e6c59e9 WebCore::CachedPage::restore(WebCore::Page*) + 0x19 9 com.apple.WebCore 0x7fff8e32f74e WebCore::FrameLoader::commitProvisionalLoad() + 0x25e 10 com.apple.WebCore 0x7fff8e397a29 WebCore::FrameLoader::continueLoadAfterNavigationPolicy(WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool) + 0x319 11 com.apple.WebCore 0x7fff8e3976e0 WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy(void*, WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool) + 0x20 12 com.apple.WebCore 0x7fff8e396d1a WebCore::PolicyChecker::checkNavigationPolicy(WebCore::ResourceRequest const&, WebCore::DocumentLoader*, WTF::PassRefPtr<WebCore::FormState>, void (*)(void*, WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool), void*) + 0x25a 13 com.apple.WebCore 0x7fff8e3968be WebCore::FrameLoader::loadWithDocumentLoader(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::PassRefPtr<WebCore::FormState>) + 0x38e 14 com.apple.WebCore 0x7fff8ea41141 WebCore::FrameLoader::loadDifferentDocumentItem(WebCore::HistoryItem*, WebCore::FrameLoadType, WebCore::FrameLoader::FormSubmissionCacheLoadPolicy) + 0x61 15 com.apple.WebCore 0x7fff8e64a8cb WebCore::HistoryController::recursiveGoToItem(WebCore::HistoryItem*, WebCore::HistoryItem*, WebCore::FrameLoadType) + 0x1bb 16 com.apple.WebCore 0x7fff8e64a483 WebCore::HistoryController::goToItem(WebCore::HistoryItem*, WebCore::FrameLoadType) + 0xd3 17 com.apple.WebCore 0x7fff8e64a115 WebCore::Page::goToItem(WebCore::HistoryItem*, WebCore::FrameLoadType) + 0x55 18 com.apple.WebKit2 0x7fff8f75d84b WebKit::WebPage::goForward(unsigned long long) + 0x27 19 com.apple.WebKit2 0x7fff8f76d06e WebKit::WebPage::didReceiveWebPageMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&) + 0x532 20 com.apple.WebKit2 0x7fff8f6c8349 CoreIPC::MessageReceiverMap::dispatchMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&) + 0x7d 21 com.apple.WebKit2 0x7fff8f7978fa WebKit::WebProcess::didReceiveMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&) + 0x1c 22 com.apple.WebKit2 0x7fff8f6a484b CoreIPC::Connection::dispatchMessage(WTF::PassOwnPtr<CoreIPC::MessageDecoder>) + 0x65 23 com.apple.WebKit2 0x7fff8f6a5b34 CoreIPC::Connection::dispatchOneMessage() + 0x6a 24 com.apple.WebCore 0x7fff8ef3211f WebCore::RunLoop::performWork() + 0x9f 25 com.apple.WebCore 0x7fff8ef327af WebCore::RunLoop::performWork(void*) + 0x3f 26 com.apple.CoreFoundation 0x7fff9a3dc1b1 <rdar://problem/13208616> 871150 1 196952 bdakin 2013-04-08 13:55:31 -0700 Created attachment 196952 Patch 871152 2 bdakin 2013-04-08 13:58:59 -0700 Thanks Anders! http://trac.webkit.org/changeset/147949 196952 2013-04-08 13:55:31 -0700 2013-04-08 13:56:29 -0700 Patch for-review.txt text/plain 1746 bdakin SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDE0Nzk0OCkKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE4IEBACisyMDEzLTA0LTA4ICBCZXRoIERh a2luICA8YmRha2luQGFwcGxlLmNvbT4KKworICAgICAgICBDcmFzaCBpbiBTY3JvbGxpbmdDb29y ZGluYXRvcjo6bWFpblRocmVhZFNjcm9sbGluZ1JlYXNvbnMoKSB3aGVuIGdvaW5nIGJhY2sKKyAg ICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTExNDIxNAorICAg ICAgICAtYW5kIGNvcnJlc3BvbmRpbmctCisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS8xMzIwODYx Nj4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBXaGVu IGEgcGFnZSBpcyByZXN0b3JpbmcgZnJvbSB0aGUgcGFnZSBjYWNoZSwgdGhlIG1haW5GcmFtZSBj YW4gaGF2ZSBhIG51bGwgCisgICAgICAgIERvY3VtZW50LiBTbyB3ZSBzaG91bGQgbnVsbC1jaGVj ayB0aGUgRG9jdW1lbnQgaGVyZS4gCisKKyAgICAgICAgKiBwYWdlL3Njcm9sbGluZy9TY3JvbGxp bmdDb29yZGluYXRvci5jcHA6CisgICAgICAgIChXZWJDb3JlOjpTY3JvbGxpbmdDb29yZGluYXRv cjo6bWFpblRocmVhZFNjcm9sbGluZ1JlYXNvbnMpOgorCiAyMDEzLTA0LTA4ICBBbmRyZWkgQnVj dXIgIDxhYnVjdXJAYWRvYmUuY29tPgogCiAgICAgICAgIFNpbXBsaWZ5IENvbnRhaW5lck5vZGU6 OnJlbW92ZUNoaWxkcmVuCkluZGV4OiBTb3VyY2UvV2ViQ29yZS9wYWdlL3Njcm9sbGluZy9TY3Jv bGxpbmdDb29yZGluYXRvci5jcHAKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNlL1dlYkNvcmUvcGFnZS9z Y3JvbGxpbmcvU2Nyb2xsaW5nQ29vcmRpbmF0b3IuY3BwCShyZXZpc2lvbiAxNDc5MzEpCisrKyBT b3VyY2UvV2ViQ29yZS9wYWdlL3Njcm9sbGluZy9TY3JvbGxpbmdDb29yZGluYXRvci5jcHAJKHdv cmtpbmcgY29weSkKQEAgLTQ1OCw3ICs0NTgsNyBAQCBNYWluVGhyZWFkU2Nyb2xsaW5nUmVhc29u cyBTY3JvbGxpbmdDb29yCiAgICAgICAgIG1haW5UaHJlYWRTY3JvbGxpbmdSZWFzb25zIHw9IEhh c1ZpZXdwb3J0Q29uc3RyYWluZWRPYmplY3RzV2l0aG91dFN1cHBvcnRpbmdGaXhlZExheWVyczsK ICAgICBpZiAoc3VwcG9ydHNGaXhlZFBvc2l0aW9uTGF5ZXJzKCkgJiYgaGFzVmlzaWJsZVNsb3dS ZXBhaW50Vmlld3BvcnRDb25zdHJhaW5lZE9iamVjdHMoZnJhbWVWaWV3KSkKICAgICAgICAgbWFp blRocmVhZFNjcm9sbGluZ1JlYXNvbnMgfD0gSGFzTm9uTGF5ZXJWaWV3cG9ydENvbnN0cmFpbmVk T2JqZWN0czsKLSAgICBpZiAobV9wYWdlLT5tYWluRnJhbWUoKS0+ZG9jdW1lbnQoKS0+aXNJbWFn ZURvY3VtZW50KCkpCisgICAgaWYgKG1fcGFnZS0+bWFpbkZyYW1lKCktPmRvY3VtZW50KCkgJiYg bV9wYWdlLT5tYWluRnJhbWUoKS0+ZG9jdW1lbnQoKS0+aXNJbWFnZURvY3VtZW50KCkpCiAgICAg ICAgIG1haW5UaHJlYWRTY3JvbGxpbmdSZWFzb25zIHw9IElzSW1hZ2VEb2N1bWVudDsKIAogICAg IHJldHVybiBtYWluVGhyZWFkU2Nyb2xsaW5nUmVhc29uczsK