132163 2014-04-24 19:03:01 -0700 FrameLoader::checkCompleted can hit the "ref'ing while destroyed" assertion 2014-04-24 23:02:22 -0700 1 1 1 Unclassified WebKit Page Loading 528+ (Nightly build) All All RESOLVED FIXED InRadar P2 Normal --- 1 darin darin beidson commit-queue japhet mark.lam oldest_to_newest 1003934 0 darin 2014-04-24 19:03:01 -0700 FrameLoader::checkCompleted can hit the "ref'ing while destroyed" assertion 1003935 1 230129 darin 2014-04-24 19:04:58 -0700 Created attachment 230129 Patch 1003936 2 darin 2014-04-24 19:05:41 -0700 <rdar://problem/16720640> 1003948 3 230129 beidson 2014-04-24 20:18:48 -0700 Comment on attachment 230129 Patch View in context: https://bugs.webkit.org/attachment.cgi?id=230129&action=review > Source/WebCore/loader/FrameLoader.cpp:819 > + // of this function can be called the frame's destructor, and it's not legal ...can be called *in* the frame's destructor.. 1003973 4 darin 2014-04-24 23:01:58 -0700 Committed r167790: <http://trac.webkit.org/changeset/167790> 230129 2014-04-24 19:04:58 -0700 2014-04-24 23:02:22 -0700 Patch bug-132163-20140424190443.patch text/plain 2015 darin U3VidmVyc2lvbiBSZXZpc2lvbjogMTY3NzQ2CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggN2NiYjAwMzEzMGM0ZDM0 ZTQzNmYxYmFlOTVkOTAzZWEzNDZmNDVmYi4uOGFiNmY0MjQxZDZlMmJkZjcxODAwZjNmZTVkY2Ex MTc5YTVkZmJjMCAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDE5IEBACisyMDE0LTA0LTI0ICBEYXJp biBBZGxlciAgPGRhcmluQGFwcGxlLmNvbT4KKworICAgICAgICBGcmFtZUxvYWRlcjo6Y2hlY2tD b21wbGV0ZWQgY2FuIGhpdCB0aGUgInJlZidpbmcgd2hpbGUgZGVzdHJveWVkIiBhc3NlcnRpb24K KyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTEzMjE2Mwor ICAgICAgICByZGFyOi8vcHJvYmxlbS8xNjcyMDY0MAorCisgICAgICAgIFJldmlld2VkIGJ5IE5P Qk9EWSAoT09QUyEpLgorCisgICAgICAgIENvdWxkbid0IGZpbmQgYSB3YXkgdG8gdGVzdCB0aGlz IHlldC4gV291bGQgYmUgbmljZSB0byBoYXZlIGEgdGVzdC4KKworICAgICAgICAqIGxvYWRlci9G cmFtZUxvYWRlci5jcHA6CisgICAgICAgIChXZWJDb3JlOjpGcmFtZUxvYWRlcjo6Y2hlY2tDb21w bGV0ZWQpOiBNb3ZlIHByb3RlY3RvciB1bnRpbCBhZnRlciB3ZSBjaGVjaworICAgICAgICBpZiB0 aGUgZnJhbWUgaXMgYWxyZWFkeSBjb21wbGV0ZS4gVGhhdCBjYW4gaGFwcGVuIGluIHByYWN0aWNl IHdoZW4gdGhpcyBpcworICAgICAgICBjYWxsZWQgZnJvbSB3aXRoaW4gdGhlIGZyYW1lJ3MgZGVz dHJ1Y3Rvci4gQWxsIHRoZSBjb2RlIHRoYXQgcnVucyBiZWZvcmUgdGhlCisgICAgICAgIHByb3Rl Y3RvciBzaW1wbHkgY2hlY2tzIHN0YXRlIGFuZCBkb2VzIG5vdCByZXF1aXJlIHByb3RlY3Rpb24u CisKIDIwMTQtMDQtMjMgIERhcmluIEFkbGVyICA8ZGFyaW5AYXBwbGUuY29tPgogCiAgICAgICAg IFtDb2NvYV0gZml4IENGIGxlYWtzIGZvdW5kIGJ5IGNvZGUgaW5zcGVjdGlvbgpkaWZmIC0tZ2l0 IGEvU291cmNlL1dlYkNvcmUvbG9hZGVyL0ZyYW1lTG9hZGVyLmNwcCBiL1NvdXJjZS9XZWJDb3Jl L2xvYWRlci9GcmFtZUxvYWRlci5jcHAKaW5kZXggNGY5ZWM2ZmY5M2NlOTQyYmZmMWJlNWQ1MmQw OTJkN2UwMzIzMTFmZi4uNmUzNjI0OTZiOGFmNmJjZjAzY2YzMWM3YmY1YWVmYjU5OTU2OGVmZSAx MDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvbG9hZGVyL0ZyYW1lTG9hZGVyLmNwcAorKysgYi9T b3VyY2UvV2ViQ29yZS9sb2FkZXIvRnJhbWVMb2FkZXIuY3BwCkBAIC03OTMsNyArNzkzLDYgQEAg Ym9vbCBGcmFtZUxvYWRlcjo6YWxsQW5jZXN0b3JzQXJlQ29tcGxldGUoKSBjb25zdAogCiB2b2lk IEZyYW1lTG9hZGVyOjpjaGVja0NvbXBsZXRlZCgpCiB7Ci0gICAgUmVmPEZyYW1lPiBwcm90ZWN0 KG1fZnJhbWUpOwogICAgIG1fc2hvdWxkQ2FsbENoZWNrQ29tcGxldGVkID0gZmFsc2U7CiAKICAg ICAvLyBIYXZlIHdlIGNvbXBsZXRlZCBiZWZvcmU/CkBAIC04MTYsNiArODE1LDExIEBAIHZvaWQg RnJhbWVMb2FkZXI6OmNoZWNrQ29tcGxldGVkKCkKICAgICBpZiAoIWFsbENoaWxkcmVuQXJlQ29t cGxldGUoKSkKICAgICAgICAgcmV0dXJuOwogCisgICAgLy8gSW1wb3J0YW50IG5vdCB0byBwcm90 ZWN0IGVhcmxpZXIgaW4gdGhpcyBmdW5jdGlvbiwgYmVjYXVzZSBlYXJsaWVyIHBhcnRzCisgICAg Ly8gb2YgdGhpcyBmdW5jdGlvbiBjYW4gYmUgY2FsbGVkIHRoZSBmcmFtZSdzIGRlc3RydWN0b3Is IGFuZCBpdCdzIG5vdCBsZWdhbAorICAgIC8vIHRvIHJlZiBhbiBvYmplY3Qgd2hpbGUgaXQncyBi ZWluZyBkZXN0cm95ZWQuCisgICAgUmVmPEZyYW1lPiBwcm90ZWN0KG1fZnJhbWUpOworCiAgICAg Ly8gT0ssIGNvbXBsZXRlZC4KICAgICBtX2lzQ29tcGxldGUgPSB0cnVlOwogICAgIG1fcmVxdWVz dGVkSGlzdG9yeUl0ZW0gPSAwOwo=