14149 2007-06-14 14:35:37 -0700 multipart/x-mixed-replace responses that switch content-types are not handled properly 2010-08-16 10:26:46 -0700 1 1 1 Unclassified WebKit Page Loading 523.x (Safari 3) Mac OS X 10.4 NEW HasReduction, InRadar P2 Normal --- 1 ddkilzer webkit-unassigned ap dev+webkit levin mackyle mitz oldest_to_newest 7522 0 ddkilzer 2007-06-14 14:35:37 -0700 * SUMMARY An http response that switches between different content-types is not handled correctly. The first example goes from text/plain to text/html to text/plain. (This may be related to Bug 4151.) * STEPS TO REPRODUCE 1. Launch Safari/WebKit. 2. Access CGI script attachment on a web server. * EXPECTED RESULTS The URL should display a text/plain page with "1. text/plain", then a text/html page with "2. text/html", and finally a text/plain page with "3. text/plain". * ACTUAL RESULTS On a debug build of WebKit r23528 with Safari 3.0 (522.11) on Mac OS X 10.4.9 (8P135), an assert fires. On Safari 3.0 (522.11) on Mac OS X 10.4.9 (8P135), it prints "--", then "2. text/html", then adds a plain text "--" to the page with "2. text/html". * REGRESSION Not tested with Safari 2.0.4 (419.3) yet. * NOTES This may be related to Bug 4151. Console output from debug build: ASSERTION FAILED: m_frame->document()->parsing() (/path/to/WebKit/WebCore/loader/FrameLoader.cpp:1597 addData) Segmentation fault Stack trace from debug build: Version: 3.0 (522.11) Build Version: 2 Project Name: WebBrowser Source Version: 45221100 PID: 9319 Thread: 0 Exception: EXC_BAD_ACCESS (0x0001) Codes: KERN_INVALID_ADDRESS (0x0001) at 0xbbadbeef Thread 0 Crashed: 0 com.apple.WebCore 0x0149f1d0 WebCore::FrameLoader::addData(char const*, int) + 296 (FrameLoader.cpp:1597) 1 com.apple.WebCore 0x0111f6a8 -[WebCoreFrameBridge addData:] + 232 (WebCoreFrameBridge.mm:290) 2 com.apple.WebCore 0x011282dc -[WebCoreFrameBridge receivedData:textEncodingName:] + 316 (WebCoreFrameBridge.mm:1432) 3 com.apple.WebKit 0x00343aa4 -[WebHTMLRepresentation finishedLoadingWithDataSource:] + 368 (WebHTMLRepresentation.mm:236) 4 com.apple.WebKit 0x0033a9b8 -[WebDataSource(WebInternal) _finishedLoading] + 112 (WebDataSource.mm:169) 5 com.apple.WebKit 0x003c7ad0 WebFrameLoaderClient::finishedLoading(WebCore::DocumentLoader*) + 76 6 com.apple.WebCore 0x014939e0 WebCore::FrameLoader::finishedLoadingDocument(WebCore::DocumentLoader*) + 76 (FrameLoader.cpp:2660) 7 com.apple.WebCore 0x014ab6cc WebCore::DocumentLoader::finishedLoading() + 84 (DocumentLoader.cpp:318) 8 com.apple.WebCore 0x0149cc3c WebCore::FrameLoader::finishedLoading() + 96 (FrameLoader.cpp:2602) 9 com.apple.WebCore 0x014abd3c WebCore::MainResourceLoader::didFinishLoading() + 272 (MainResourceLoader.cpp:304) 10 com.apple.WebCore 0x014adeb8 WebCore::ResourceLoader::didFinishLoading(WebCore::ResourceHandle*) + 60 11 com.apple.WebCore 0x01482a60 -[WebCoreResourceHandleAsDelegate connectionDidFinishLoading:] + 144 (ResourceHandleMac.mm:370) 12 com.apple.Foundation 0x92c1589c -[NSURLConnection(NSURLConnectionInternal) _sendDidFinishLoadingCallback] + 188 13 com.apple.Foundation 0x92c13b08 -[NSURLConnection(NSURLConnectionInternal) _sendCallbacks] + 556 14 com.apple.Foundation 0x92c13860 _sendCallbacks + 156 15 com.apple.CoreFoundation 0x907df4fc __CFRunLoopDoSources0 + 384 16 com.apple.CoreFoundation 0x907dea2c __CFRunLoopRun + 452 17 com.apple.CoreFoundation 0x907de4ac CFRunLoopRunSpecific + 268 18 com.apple.HIToolbox 0x9329bb20 RunCurrentEventLoopInMode + 264 19 com.apple.HIToolbox 0x9329b1b4 ReceiveNextEventCommon + 380 20 com.apple.HIToolbox 0x9329b020 BlockUntilNextEventMatchingListInMode + 96 21 com.apple.AppKit 0x937a1ae4 _DPSNextEvent + 384 22 com.apple.AppKit 0x937a17a8 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 116 23 com.apple.Safari 0x00006770 0x1000 + 22384 24 com.apple.AppKit 0x9379dcec -[NSApplication run] + 472 25 com.apple.AppKit 0x9388e87c NSApplicationMain + 452 26 com.apple.Safari 0x0000244c 0x1000 + 5196 27 com.apple.Safari 0x0004f1b0 0x1000 + 319920 7521 1 15032 ddkilzer 2007-06-14 14:37:44 -0700 Created attachment 15032 Test case (CGI script) This is a Perl script that should be saved on a web server and executed as a CGI script. It requires Perl and the CGI.pm module. 7519 2 ddkilzer 2007-06-14 14:39:48 -0700 Note that this works fine in Firefox 2.0.0.4 and Opera 9.21 on Mac OS X 10.4.9 (8P135). It would be interesting to know if this works on MSIE 6/7. 7509 3 mrowe 2007-06-14 15:27:15 -0700 <rdar://problem/5271175> 7478 4 ddkilzer 2007-06-14 22:34:24 -0700 (In reply to comment #0) > * NOTES > This may be related to Bug 4151. It is not related to Bug 4151. 1140 5 dev+webkit 2007-08-30 18:26:29 -0700 I'm hitting this when I click either of the links at <http://nerget.com/editable_svg.html>. 1121 6 mitz 2007-08-30 23:49:17 -0700 If I remember correctly, you also hit that assert if you load a standalone multipart/x-mixed-replace image in an iframe. 64614 7 ddkilzer 2007-12-18 05:20:48 -0800 May be related to Bug 14392. 159841 8 levin 2009-11-02 10:33:15 -0800 *** Bug 31015 has been marked as a duplicate of this bug. *** 15032 2007-06-14 14:37:44 -0700 2007-06-14 14:37:44 -0700 Test case (CGI script) mp.cgi text/perl 610 ddkilzer IyEvdXNyL2Jpbi9wZXJsCgp1c2Ugc3RyaWN0Owp1c2Ugd2FybmluZ3M7Cgp1c2UgQ0dJIHF3Lzpw dXNoLzsKCiR8ID0gMTsKCnByaW50IDw8X19FTkRfXzsKQ29udGVudC1UeXBlOiBtdWx0aXBhcnQv eC1taXhlZC1yZXBsYWNlOyBib3VuZGFyeT0iLS0tLWhlcmUtd2UtZ28iCgpXQVJOSU5HOiBZT1VS IEJST1dTRVIgRE9FU04nVCBTVVBQT1JUIFRISVMgU0VSVkVSLVBVU0ggVEVDSE5PTE9HWS4KLS0t LS0taGVyZS13ZS1nbwpDb250ZW50LVR5cGU6IHRleHQvcGxhaW4KCjEuIHRleHQvcGxhaW4KCl9f RU5EX18KCnNsZWVwIDI7CgpwcmludCA8PF9fRU5EX187Ci0tLS0tLWhlcmUtd2UtZ28KQ29udGVu dC1UeXBlOiB0ZXh0L2h0bWwKCjxwPgo8b2wgc3RhcnQ9IjIiPgo8bGk+dGV4dC9odG1sPC9saT4K PC9vbD4KPC9wPgoKX19FTkRfXwoKc2xlZXAgMjsKCnByaW50IDw8X19FTkRfXzsKLS0tLS0taGVy ZS13ZS1nbwpDb250ZW50LVR5cGU6IHRleHQvcGxhaW4KCgoKMy4gdGV4dC9wbGFpbgoKLS0tLS0t aGVyZS13ZS1nby0tCldBUk5JTkc6IFlPVVIgQlJPV1NFUiBET0VTTidUIFNVUFBPUlQgVEhJUyBT RVJWRVItUFVTSCBURUNITk9MT0dZLgpfX0VORF9fCgpleGl0IDA7Cg==