<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>130777</bug_id>
          
          <creation_ts>2014-03-26 09:25:39 -0700</creation_ts>
          <short_desc>Fix a crash caused by track insertion after load()</short_desc>
          <delta_ts>2014-03-27 10:51:25 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Media</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Brent Fulgham">bfulgham</reporter>
          <assigned_to name="Brent Fulgham">bfulgham</assigned_to>
          <cc>calvaris</cc>
    
    <cc>commit-queue</cc>
    
    <cc>eric.carlson</cc>
    
    <cc>esprehn+autocc</cc>
    
    <cc>glenn</cc>
    
    <cc>gyuyoung.kim</cc>
    
    <cc>jer.noble</cc>
    
    <cc>philipj</cc>
    
    <cc>sergio</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>994594</commentid>
    <comment_count>0</comment_count>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2014-03-26 09:25:39 -0700</bug_when>
    <thetext>Merge the following Blink change:

Fix a crash caused by track insertion after load().

This patch fixes a crash caused by stale LoadMediaResource flag in
m_pendingActionFlags when load() is explicitly called on a media
element. The insertion of a &lt;track&gt; element triggers the crash by
triggering the scheduling of the m_loadTimer, which ends up using the
stale flag data when the timer fires. The fix is to clear the
LoadMediaResource flag from m_pendingActionFlags when a new load is
initiated.

BUG=356352
TEST=LayoutTests/media/track/track-insert-after-load-crash.html

Committed: https://src.chromium.org/viewvc/blink?view=rev&amp;revision=170003</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>994596</commentid>
    <comment_count>1</comment_count>
      <attachid>227853</attachid>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2014-03-26 09:41:07 -0700</bug_when>
    <thetext>Created attachment 227853
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>994971</commentid>
    <comment_count>2</comment_count>
      <attachid>227853</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2014-03-27 10:51:20 -0700</bug_when>
    <thetext>Comment on attachment 227853
Patch

Clearing flags on attachment: 227853

Committed r166362: &lt;http://trac.webkit.org/changeset/166362&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>994972</commentid>
    <comment_count>3</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2014-03-27 10:51:25 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>227853</attachid>
            <date>2014-03-26 09:41:07 -0700</date>
            <delta_ts>2014-03-27 10:51:20 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-130777-20140326094046.patch</filename>
            <type>text/plain</type>
            <size>3855</size>
            <attacher name="Brent Fulgham">bfulgham</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09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</data>

          </attachment>
      

    </bug>

</bugzilla>