<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>147506</bug_id>
          
          <creation_ts>2015-07-31 14:17:24 -0700</creation_ts>
          <short_desc>Crashes under HTMLMediaElement::updateActiveTextTrackCues() when destroying CachedPage.</short_desc>
          <delta_ts>2015-07-31 15:44:07 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Media</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Andreas Kling">kling</reporter>
          <assigned_to name="Andreas Kling">kling</assigned_to>
          <cc>commit-queue</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1113849</commentid>
    <comment_count>0</comment_count>
    <who name="Andreas Kling">kling</who>
    <bug_when>2015-07-31 14:17:24 -0700</bug_when>
    <thetext>&lt;rdar://problem/21939014&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1113851</commentid>
    <comment_count>1</comment_count>
      <attachid>257959</attachid>
    <who name="Andreas Kling">kling</who>
    <bug_when>2015-07-31 14:18:06 -0700</bug_when>
    <thetext>Created attachment 257959
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1113855</commentid>
    <comment_count>2</comment_count>
    <who name="Pratik Solanki">psolanki</who>
    <bug_when>2015-07-31 14:21:27 -0700</bug_when>
    <thetext>*** Bug 147505 has been marked as a duplicate of this bug. ***</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1113858</commentid>
    <comment_count>3</comment_count>
      <attachid>257959</attachid>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2015-07-31 14:24:46 -0700</bug_when>
    <thetext>Comment on attachment 257959
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=257959&amp;action=review

&gt; Source/WebCore/html/HTMLMediaElement.cpp:5542
&gt; +    if (!ActiveDOMObject::scriptExecutionContext() || ActiveDOMObject::scriptExecutionContext()-&gt;activeDOMObjectsAreStopped())

nit: Do we really need the &quot;ActiveDOMObject::&quot;?

&gt; Source/WebCore/html/HTMLMediaElement.cpp:5543
&gt; +        return;

But now we&apos;re not doing the updateSleepDisabling() call anymore in this case, why is this OK?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1113864</commentid>
    <comment_count>4</comment_count>
      <attachid>257959</attachid>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2015-07-31 14:38:57 -0700</bug_when>
    <thetext>Comment on attachment 257959
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=257959&amp;action=review

r=me

&gt;&gt; Source/WebCore/html/HTMLMediaElement.cpp:5542
&gt;&gt; +    if (!ActiveDOMObject::scriptExecutionContext() || ActiveDOMObject::scriptExecutionContext()-&gt;activeDOMObjectsAreStopped())
&gt; 
&gt; nit: Do we really need the &quot;ActiveDOMObject::&quot;?

let&apos;s use document().

&gt;&gt; Source/WebCore/html/HTMLMediaElement.cpp:5543
&gt;&gt; +        return;
&gt; 
&gt; But now we&apos;re not doing the updateSleepDisabling() call anymore in this case, why is this OK?

Sorry, I thought you were in clearMediaPlayer(), never mind my comment.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1113871</commentid>
    <comment_count>5</comment_count>
      <attachid>257962</attachid>
    <who name="Andreas Kling">kling</who>
    <bug_when>2015-07-31 14:50:55 -0700</bug_when>
    <thetext>Created attachment 257962
Patch for landing</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1113901</commentid>
    <comment_count>6</comment_count>
      <attachid>257962</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2015-07-31 15:44:03 -0700</bug_when>
    <thetext>Comment on attachment 257962
Patch for landing

Clearing flags on attachment: 257962

Committed r187687: &lt;http://trac.webkit.org/changeset/187687&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1113902</commentid>
    <comment_count>7</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2015-07-31 15:44:07 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>257959</attachid>
            <date>2015-07-31 14:18:06 -0700</date>
            <delta_ts>2015-07-31 14:50:55 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-147506.diff</filename>
            <type>text/plain</type>
            <size>1706</size>
            <attacher name="Andreas Kling">kling</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZyBiL1NvdXJjZS9XZWJDb3JlL0No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=
</data>
<flag name="review"
          id="283141"
          type_id="1"
          status="+"
          setter="cdumez"
    />
          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>257962</attachid>
            <date>2015-07-31 14:50:55 -0700</date>
            <delta_ts>2015-07-31 15:44:03 -0700</delta_ts>
            <desc>Patch for landing</desc>
            <filename>land-147506.diff</filename>
            <type>text/plain</type>
            <size>1625</size>
            <attacher name="Andreas Kling">kling</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZyBiL1NvdXJjZS9XZWJDb3JlL0No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</data>

          </attachment>
      

    </bug>

</bugzilla>