120475 2013-08-29 09:07:27 -0700 [Windows] Moving back in history from a page with <video>, then moving forward causes crash 2013-09-23 18:54:55 -0700 1 1 1 Unclassified WebKit Media 528+ (Nightly build) PC All RESOLVED FIXED InRadar P2 Normal --- 1 bfulgham bfulgham bfulgham commit-queue eric.carlson glenn jer.noble webkit-bug-importer oldest_to_newest 922485 0 bfulgham 2013-08-29 09:07:27 -0700 The following steps cause a crash: 1. Launch WinLauncher. 2. Navigate to a page displaying video. You do not need to start the video playing. 3. Use the "back" option to move back a level in the web history. 4. Use the "forward" option to return to the page displaying video. 5. *CRASH* NOTE: Sometimes the crash occurs after moving "back", without requiring the "forward" step. Crash dump: > CoreMedia.dll!FigBaseObjectFinalize(const void * cf) Line 281 + 0x6 bytes C CoreFoundation.dll!_CFRelease(const void * cf) Line 42344 + 0x3 bytes C++ CoreFoundation.dll!CFRelease(const void * cf) Line 41477 + 0x6 bytes C++ AVFoundationCF.dll!player_sendSubtitleNotification(void * context) Line 726 + 0xb bytes C libdispatch.dll!_dispatch_continuation_pop(void * dou) Line 39407 + 0x9 bytes C++ libdispatch.dll!_dispatch_queue_drain(dispatch_queue_s * dq) Line 40401 + 0x11 bytes C++ libdispatch.dll!_dispatch_queue_invoke(dispatch_queue_s * dq) Line 40343 + 0x15 bytes C++ 7fffffff() libdispatch.dll!736633bf() 922486 1 webkit-bug-importer 2013-08-29 09:08:20 -0700 <rdar://problem/14868236> 922487 2 bfulgham 2013-08-29 09:08:41 -0700 This behavior does not happen under Mac OS. 932381 3 bfulgham 2013-09-23 17:32:16 -0700 *** Bug 121816 has been marked as a duplicate of this bug. *** 932382 4 212414 bfulgham 2013-09-23 17:32:32 -0700 Created attachment 212414 Patch 932403 5 212414 commit-queue 2013-09-23 18:54:53 -0700 Comment on attachment 212414 Patch Clearing flags on attachment: 212414 Committed r156315: <http://trac.webkit.org/changeset/156315> 932404 6 commit-queue 2013-09-23 18:54:55 -0700 All reviewed patches have been landed. Closing bug. 212414 2013-09-23 17:32:32 -0700 2013-09-23 18:54:53 -0700 Patch bug-120475-20130923173225.patch text/plain 2839 bfulgham SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDE1NjMwOSkKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE3IEBACisyMDEzLTA5LTIzICBCcmVudCBG dWxnaGFtICA8YmZ1bGdoYW1AYXBwbGUuY29tPgorCisgICAgICAgIFtXaW5kb3dzXSBNb3Zpbmcg YmFjayBpbiBoaXN0b3J5IGZyb20gYSBwYWdlIHdpdGggPHZpZGVvPiwgdGhlbiBtb3ZpbmcgZm9y d2FyZCBjYXVzZXMgY3Jhc2guCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3df YnVnLmNnaT9pZD0xMjA0NzUKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4K KworICAgICAgICAqIHBsYXRmb3JtL2dyYXBoaWNzL2F2Zm91bmRhdGlvbi9jZi9NZWRpYVBsYXll clByaXZhdGVBVkZvdW5kYXRpb25DRi5jcHA6CisgICAgICAgIChXZWJDb3JlOjpBVkZXcmFwcGVy OjpBVkZXcmFwcGVyKTogQWRkIGFzc2VydGlvbiB0aGF0IGNyZWF0aW9uIGlzIG9uIG1haW4gdGhy ZWFkLgorICAgICAgICAoV2ViQ29yZTo6QVZGV3JhcHBlcjo6fkFWRldyYXBwZXIpOiBBZGQgYXNz ZXJ0aW9uIHRoYXQgZGVzdHJ1Y3Rpb24gaXMgb24gbWFpbiB0aHJlYWQuCisgICAgICAgIChXZWJD b3JlOjpkZXN0cm95QVZGV3JhcHBlcik6IEhlbHBlciBmdW5jdGlvbiB0byBkaXNwYXRjaCBvbiBt YWluIHF1ZXVlLgorICAgICAgICAoV2ViQ29yZTo6QVZGV3JhcHBlcjo6ZGlzY29ubmVjdEFuZERl bGV0ZUFWRldyYXBwZXIpOiBTcGF3biBBVkZvdW5kYXRpb25DRiBkZXN0cnVjdGlvbiB0bworICAg ICAgICBtYWluIHF1ZXVlLgorCiAyMDEzLTA5LTIzICBCcmFkeSBFaWRzb24gIDxiZWlkc29uQGFw cGxlLmNvbT4KIAogICAgICAgICBNYWtlIHRoZSBNYWMgYnVpbGQgd29yayB3aXRoIEluZGV4ZWRE QiBlbmFibGVkLgpJbmRleDogU291cmNlL1dlYkNvcmUvcGxhdGZvcm0vZ3JhcGhpY3MvYXZmb3Vu ZGF0aW9uL2NmL01lZGlhUGxheWVyUHJpdmF0ZUFWRm91bmRhdGlvbkNGLmNwcAo9PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 Ci0tLSBTb3VyY2UvV2ViQ29yZS9wbGF0Zm9ybS9ncmFwaGljcy9hdmZvdW5kYXRpb24vY2YvTWVk aWFQbGF5ZXJQcml2YXRlQVZGb3VuZGF0aW9uQ0YuY3BwCShyZXZpc2lvbiAxNTYzMDYpCisrKyBT b3VyY2UvV2ViQ29yZS9wbGF0Zm9ybS9ncmFwaGljcy9hdmZvdW5kYXRpb24vY2YvTWVkaWFQbGF5 ZXJQcml2YXRlQVZGb3VuZGF0aW9uQ0YuY3BwCSh3b3JraW5nIGNvcHkpCkBAIC0xMTYxLDYgKzEx NjEsNyBAQCBBVkZXcmFwcGVyOjpBVkZXcmFwcGVyKE1lZGlhUGxheWVyUHJpdmF0CiAgICAgLCBt X29iamVjdElEKHNfbmV4dEFWRldyYXBwZXJPYmplY3RJRCsrKQogICAgICwgbV9jdXJyZW50VHJh Y2soMCkKIHsKKyAgICBBU1NFUlQoaXNNYWluVGhyZWFkKCkpOwogICAgIExPRyhNZWRpYSwgIkFW RldyYXBwZXI6OkFWRldyYXBwZXIoJXApIiwgdGhpcyk7CiAKICAgICBtX25vdGlmaWNhdGlvblF1 ZXVlID0gZGlzcGF0Y2hfcXVldWVfY3JlYXRlKCJNZWRpYVBsYXllclByaXZhdGVBVkZvdW5kYXRp b25DRi5ub3RpZmljYXRpb25RdWV1ZSIsIDApOwpAQCAtMTE2OSw2ICsxMTcwLDcgQEAgQVZGV3Jh cHBlcjo6QVZGV3JhcHBlcihNZWRpYVBsYXllclByaXZhdAogCiBBVkZXcmFwcGVyOjp+QVZGV3Jh cHBlcigpCiB7CisgICAgQVNTRVJUKGlzTWFpblRocmVhZCgpKTsKICAgICBMT0coTWVkaWEsICJB VkZXcmFwcGVyOjp+QVZGV3JhcHBlciglcCAlZCkiLCB0aGlzLCBtX29iamVjdElEKTsKIAogICAg IGRlc3Ryb3lWaWRlb0xheWVyKCk7CkBAIC0xMjQ3LDYgKzEyNDksMTUgQEAgdm9pZCBBVkZXcmFw cGVyOjpzY2hlZHVsZURpc2Nvbm5lY3RBbmREZQogICAgIGRpc3BhdGNoX2FzeW5jX2YoZGlzcGF0 Y2hRdWV1ZSgpLCB0aGlzLCBkaXNjb25uZWN0QW5kRGVsZXRlQVZGV3JhcHBlcik7CiB9CiAKK3N0 YXRpYyB2b2lkIGRlc3Ryb3lBVkZXcmFwcGVyKHZvaWQqIGNvbnRleHQpCit7CisgICAgQVZGV3Jh cHBlciogYXZmV3JhcHBlciA9IHN0YXRpY19jYXN0PEFWRldyYXBwZXIqPihjb250ZXh0KTsKKyAg ICBpZiAoIWF2ZldyYXBwZXIpCisgICAgICAgIHJldHVybjsKKworICAgIGRlbGV0ZSBhdmZXcmFw cGVyOworfQorCiB2b2lkIEFWRldyYXBwZXI6OmRpc2Nvbm5lY3RBbmREZWxldGVBVkZXcmFwcGVy KHZvaWQqIGNvbnRleHQpCiB7CiAgICAgQVZGV3JhcHBlciogYXZmV3JhcHBlciA9IHN0YXRpY19j YXN0PEFWRldyYXBwZXIqPihjb250ZXh0KTsKQEAgLTEyNzksNyArMTI5MCw4IEBAIHZvaWQgQVZG V3JhcHBlcjo6ZGlzY29ubmVjdEFuZERlbGV0ZUFWRlcKICAgICBBVkNGUGxheWVySXRlbVJlbW92 ZU91dHB1dChhdmZXcmFwcGVyLT5hdlBsYXllckl0ZW0oKSwgYXZmV3JhcHBlci0+bGVnaWJsZU91 dHB1dCgpKTsKICNlbmRpZgogCi0gICAgZGVsZXRlIGF2ZldyYXBwZXI7CisgICAgLy8gV2UgbXVz dCByZWxlYXNlIHRoZSBBVkNGUGxheWVyIGFuZCBvdGhlciBpdGVtcyBvbiB0aGUgc2FtZSB0aHJl YWQgdGhhdCBjcmVhdGVkIHRoZW0uCisgICAgZGlzcGF0Y2hfYXN5bmNfZihkaXNwYXRjaF9nZXRf bWFpbl9xdWV1ZSgpLCBjb250ZXh0LCBkZXN0cm95QVZGV3JhcHBlcik7CiB9CiAKIHZvaWQgQVZG V3JhcHBlcjo6Y3JlYXRlQXNzZXRGb3JVUkwoY29uc3QgU3RyaW5nJiB1cmwpCg==