151390 2015-11-18 09:45:38 -0800 Null dereference in Performance::Performance(WebCore::Frame*) 2015-11-18 11:08:02 -0800 1 1 1 Unclassified WebKit Page Loading WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 cdumez cdumez aestes beidson commit-queue ddkilzer kling koivisto webkit-bug-importer oldest_to_newest 1142847 0 cdumez 2015-11-18 09:45:38 -0800 0 WebCore 0x000000019509cba0 WebCore::Performance::Performance(WebCore::Frame*) + 96 (DocumentLoadTiming.h:70) 1 WebCore 0x000000019509cba0 WebCore::Performance::Performance(WebCore::Frame*) + 96 (Performance.cpp:60) 2 WebCore 0x0000000194a30d24 WebCore::DOMWindow::performance() const + 80 (Performance.h:57) 3 WebCore 0x0000000194d3f150 WebCore::jsDOMWindowPerformance(JSC::ExecState*, JSC::JSObject*, long long, JSC::PropertyName) + 56 (JSDOMWindow.cpp:6538) 4 JavaScriptCore 0x0000000183fd26a0 llint_slow_path_get_by_id + 1960 (PropertySlot.h:257) 5 JavaScriptCore 0x000000018441a7e0 llint_entry + 9936 6 JavaScriptCore 0x000000018441dd74 llint_entry + 23652 7 JavaScriptCore 0x000000018441dd74 llint_entry + 23652 8 JavaScriptCore 0x000000018441dd74 llint_entry + 23652 9 ??? 0x000000010ab25080 0 + 4474425472 10 ??? 0x000000010ab25080 0 + 4474425472 11 JavaScriptCore 0x000000018441dd74 llint_entry + 23652 12 JavaScriptCore 0x000000018441dd74 llint_entry + 23652 13 JavaScriptCore 0x000000018441dd74 llint_entry + 23652 14 JavaScriptCore 0x000000018441dd74 llint_entry + 23652 15 JavaScriptCore 0x000000018441dd74 llint_entry + 23652 16 JavaScriptCore 0x000000018441dd74 llint_entry + 23652 17 JavaScriptCore 0x000000018441dd74 llint_entry + 23652 18 JavaScriptCore 0x000000018441dd74 llint_entry + 23652 19 JavaScriptCore 0x0000000184417ef8 vmEntryToJavaScript + 312 20 JavaScriptCore 0x0000000184344c48 JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) + 180 (JITCode.cpp:81) 21 JavaScriptCore 0x0000000183fde108 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 400 (Interpreter.cpp:965) 22 JavaScriptCore 0x00000001840ed7dc JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) + 80 (CallData.cpp:39) 23 WebCore 0x00000001947974a0 WebCore::JSEventListener::handleEvent(WebCore::ScriptExecutionContext*, WebCore::Event*) + 828 (JSMainThreadExecState.h:56) 24 WebCore 0x0000000194a77b54 WebCore::EventTarget::fireEventListeners(WebCore::Event*, WebCore::EventTargetData*, WTF::Vector<WebCore::RegisteredEventListener, 1ul, WTF::CrashOnOverflow, 16ul>&) + 696 (EventTarget.cpp:256) 25 WebCore 0x00000001946a4988 WebCore::EventTarget::fireEventListeners(WebCore::Event*) + 328 (EventTarget.cpp:208) 26 WebCore 0x00000001946c28a4 WebCore::DOMWindow::dispatchEvent(WTF::PassRefPtr<WebCore::Event>, WTF::PassRefPtr<WebCore::EventTarget>) + 300 (DOMWindow.cpp:1900) 27 WebCore 0x00000001946ffdf8 WebCore::DOMWindow::dispatchLoadEvent() + 336 (DOMWindow.cpp:1858) 28 WebCore 0x00000001946ab67c WebCore::Document::implicitClose() + 304 (Document.cpp:4016) 29 WebCore 0x00000001946aacd4 WebCore::FrameLoader::checkCompleted() + 352 (FrameLoader.cpp:890) 30 WebCore 0x00000001946abad4 WebCore::FrameLoader::completed() + 108 (FrameLoader.cpp:1107) 31 WebCore 0x00000001946aace8 WebCore::FrameLoader::checkCompleted() + 372 (FrameLoader.cpp:840) 32 WebCore 0x00000001946a9e3c WebCore::FrameLoader::finishedParsing() + 132 (FrameLoader.cpp:756) 33 WebCore 0x00000001946a9d24 WebCore::Document::finishedParsing() + 364 (Document.cpp:4849) 34 WebCore 0x0000000194c0d6b0 WebCore::ImageDocument::finishedParsing() + 732 (ImageDocument.cpp:172) 35 WebCore 0x00000001946a59d8 WebCore::DocumentWriter::end() + 92 (DocumentWriter.cpp:247) 36 WebCore 0x000000019469d264 WebCore::DocumentLoader::finishedLoading(double) + 256 (DocumentLoader.cpp:430) 37 WebCore 0x00000001946e13a8 WebCore::CachedResource::checkNotify() + 284 (CachedResource.cpp:297) 38 WebCore 0x0000000194897104 WebCore::CachedRawResource::finishLoading(WebCore::SharedBuffer*) + 224 (CachedRawResource.cpp:103) 39 WebCore 0x00000001946e1174 WebCore::SubresourceLoader::didFinishLoading(double) + 1020 (SubresourceLoader.cpp:371) 40 WebKit 0x0000000188dc5804 WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&, IPC::MessageDecoder&) + 532 (HandleMessage.h:16) 1142848 1 cdumez 2015-11-18 09:46:00 -0800 rdar://problem/23554862 1142862 2 265750 cdumez 2015-11-18 10:14:52 -0800 Created attachment 265750 Patch 1142864 3 beidson 2015-11-18 10:17:34 -0800 Sad on the unreproducibility, though :( 1142865 4 cdumez 2015-11-18 10:20:39 -0800 (In reply to comment #3) > Sad on the unreproducibility, though :( I tried for an hour to reproduce this. If you have any idea how I could get a null documentLoader there, I'd be happy try them. 1142892 5 265750 commit-queue 2015-11-18 11:07:58 -0800 Comment on attachment 265750 Patch Clearing flags on attachment: 265750 Committed r192582: <http://trac.webkit.org/changeset/192582> 1142893 6 commit-queue 2015-11-18 11:08:02 -0800 All reviewed patches have been landed. Closing bug. 265750 2015-11-18 10:14:52 -0800 2015-11-18 11:07:58 -0800 Patch bug-151390-20151118101441.patch text/plain 5192 cdumez U3VidmVyc2lvbiBSZXZpc2lvbjogMTkyNTEzCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggNzY0MmVmMzcwMzNjZjgx YWNhNzhiMmZiNzJlNDdiNTliMzkxMDllNS4uZjlhMWRiNjYzMmVhYWU0ZTkwMTgzZTU4ZGE3NjQ0 NDcxZTk5MDYwZiAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDI0IEBACisyMDE1LTExLTE4ICBDaHJp cyBEdW1leiAgPGNkdW1lekBhcHBsZS5jb20+CisKKyAgICAgICAgTnVsbCBkZXJlZmVyZW5jZSBp biBQZXJmb3JtYW5jZTo6UGVyZm9ybWFuY2UoV2ViQ29yZTo6RnJhbWUqKQorICAgICAgICBodHRw czovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTUxMzkwCisKKyAgICAgICAgUmV2 aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgQmFzZWQgb24gdGhlIHN0YWNrIHRy YWNlLCBpdCBhcHBlYXJzIHRoZSBEb2N1bWVudExvYWRlciBjYW4gYmUgbnVsbAorICAgICAgICB3 aGVuIGNvbnN0cnVjdGluZyB0aGUgUGVyZm9ybWFuY2Ugb2JqZWN0LiBUaGlzIHBhdGNoIHRodXMg YWRkcyBhIG51bGwKKyAgICAgICAgY2hlY2sgYmVmb3JlIHRyeWluZyB0byBkZXJlZmVyZW5jZSBp dC4KKworICAgICAgICBObyBuZXcgdGVzdHMsIHdhcyBub3QgYWJsZSB0byByZXByb2R1Y2UuCisK KyAgICAgICAgKiBwYWdlL0RPTVdpbmRvdy5jcHA6CisgICAgICAgIChXZWJDb3JlOjpET01XaW5k b3c6Om5hdmlnYXRvcik6CisgICAgICAgIChXZWJDb3JlOjpET01XaW5kb3c6OnBlcmZvcm1hbmNl KToKKyAgICAgICAgKiBwYWdlL1BlcmZvcm1hbmNlLmNwcDoKKyAgICAgICAgKFdlYkNvcmU6OlBl cmZvcm1hbmNlOjpQZXJmb3JtYW5jZSk6CisgICAgICAgIChXZWJDb3JlOjpQZXJmb3JtYW5jZTo6 c2NyaXB0RXhlY3V0aW9uQ29udGV4dCk6CisgICAgICAgICogcGFnZS9QZXJmb3JtYW5jZS5oOgor CiAyMDE1LTExLTE3ICBTZXJnaW8gVmlsbGFyIFNlbmluICA8c3ZpbGxhckBpZ2FsaWEuY29tPgog CiAgICAgICAgIEFTU0VSVElPTiBGQUlMRUQ6IGNvbnRlbnRTaXplID49IDAgaW4gV2ViQ29yZTo6 UmVuZGVyRmxleGlibGVCb3g6OmFkanVzdENoaWxkU2l6ZUZvck1pbkFuZE1heApkaWZmIC0tZ2l0 IGEvU291cmNlL1dlYkNvcmUvcGFnZS9ET01XaW5kb3cuY3BwIGIvU291cmNlL1dlYkNvcmUvcGFn ZS9ET01XaW5kb3cuY3BwCmluZGV4IGY4OWUxOTQ2ODg5NGYzNTMwMmRkNTVjZjA0ZTMxYzBlNmMy YTk2M2EuLmEzNGExZWRiYTMwZDg4NDg4YjMwNGI3NjRiNDIxMzNjN2UzYzVkNTggMTAwNjQ0Ci0t LSBhL1NvdXJjZS9XZWJDb3JlL3BhZ2UvRE9NV2luZG93LmNwcAorKysgYi9Tb3VyY2UvV2ViQ29y ZS9wYWdlL0RPTVdpbmRvdy5jcHAKQEAgLTcyMyw3ICs3MjMsNyBAQCBET01BcHBsaWNhdGlvbkNh Y2hlKiBET01XaW5kb3c6OmFwcGxpY2F0aW9uQ2FjaGUoKSBjb25zdAogTmF2aWdhdG9yKiBET01X aW5kb3c6Om5hdmlnYXRvcigpIGNvbnN0CiB7CiAgICAgaWYgKCFpc0N1cnJlbnRseURpc3BsYXll ZEluRnJhbWUoKSkKLSAgICAgICAgcmV0dXJuIDA7CisgICAgICAgIHJldHVybiBudWxscHRyOwog ICAgIGlmICghbV9uYXZpZ2F0b3IpCiAgICAgICAgIG1fbmF2aWdhdG9yID0gTmF2aWdhdG9yOjpj cmVhdGUobV9mcmFtZSk7CiAgICAgcmV0dXJuIG1fbmF2aWdhdG9yLmdldCgpOwpAQCAtNzMzLDkg KzczMyw5IEBAIE5hdmlnYXRvciogRE9NV2luZG93OjpuYXZpZ2F0b3IoKSBjb25zdAogUGVyZm9y bWFuY2UqIERPTVdpbmRvdzo6cGVyZm9ybWFuY2UoKSBjb25zdAogewogICAgIGlmICghaXNDdXJy ZW50bHlEaXNwbGF5ZWRJbkZyYW1lKCkpCi0gICAgICAgIHJldHVybiAwOworICAgICAgICByZXR1 cm4gbnVsbHB0cjsKICAgICBpZiAoIW1fcGVyZm9ybWFuY2UpCi0gICAgICAgIG1fcGVyZm9ybWFu Y2UgPSBQZXJmb3JtYW5jZTo6Y3JlYXRlKG1fZnJhbWUpOworICAgICAgICBtX3BlcmZvcm1hbmNl ID0gUGVyZm9ybWFuY2U6OmNyZWF0ZSgqbV9mcmFtZSk7CiAgICAgcmV0dXJuIG1fcGVyZm9ybWFu Y2UuZ2V0KCk7CiB9CiAjZW5kaWYKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL3BhZ2UvUGVy Zm9ybWFuY2UuY3BwIGIvU291cmNlL1dlYkNvcmUvcGFnZS9QZXJmb3JtYW5jZS5jcHAKaW5kZXgg ZmUyMjZlODMyOGUzODI5MmE3YWQ4NDAwMTVlMWQwMDRmNjA0NDllMS4uYmIyOTMyY2I0YTMzZWUw MmNlMDJlYzU0Zjk1NDJhMmM1YzcyNWFmOCAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvcGFn ZS9QZXJmb3JtYW5jZS5jcHAKKysrIGIvU291cmNlL1dlYkNvcmUvcGFnZS9QZXJmb3JtYW5jZS5j cHAKQEAgLTMwLDEwICszMCwxMyBAQAogICovCiAKICNpbmNsdWRlICJjb25maWcuaCIKKworI2lm IEVOQUJMRShXRUJfVElNSU5HKQogI2luY2x1ZGUgIlBlcmZvcm1hbmNlLmgiCiAKICNpbmNsdWRl ICJEb2N1bWVudC5oIgogI2luY2x1ZGUgIkRvY3VtZW50TG9hZGVyLmgiCisjaW5jbHVkZSAiRnJh bWUuaCIKICNpbmNsdWRlICJQZXJmb3JtYW5jZUVudHJ5LmgiCiAjaW5jbHVkZSAiUGVyZm9ybWFu Y2VOYXZpZ2F0aW9uLmgiCiAjaW5jbHVkZSAiUGVyZm9ybWFuY2VSZXNvdXJjZVRpbWluZy5oIgpA QCAtNDIsMjIgKzQ1LDE4IEBACiAjaW5jbHVkZSAiUmVzb3VyY2VSZXNwb25zZS5oIgogI2luY2x1 ZGUgPHd0Zi9DdXJyZW50VGltZS5oPgogCi0jaWYgRU5BQkxFKFdFQl9USU1JTkcpCi0KLSNpbmNs dWRlICJGcmFtZS5oIgotCiBuYW1lc3BhY2UgV2ViQ29yZSB7CiAKICNpZiBFTkFCTEUoUkVTT1VS Q0VfVElNSU5HKQogc3RhdGljIGNvbnN0IHNpemVfdCBkZWZhdWx0UmVzb3VyY2VUaW1pbmdCdWZm ZXJTaXplID0gMTUwOwogI2VuZGlmCiAKLVBlcmZvcm1hbmNlOjpQZXJmb3JtYW5jZShGcmFtZSog ZnJhbWUpCi0gICAgOiBET01XaW5kb3dQcm9wZXJ0eShmcmFtZSkKK1BlcmZvcm1hbmNlOjpQZXJm b3JtYW5jZShGcmFtZSYgZnJhbWUpCisgICAgOiBET01XaW5kb3dQcm9wZXJ0eSgmZnJhbWUpCiAj aWYgRU5BQkxFKFJFU09VUkNFX1RJTUlORykKICAgICAsIG1fcmVzb3VyY2VUaW1pbmdCdWZmZXJT aXplKGRlZmF1bHRSZXNvdXJjZVRpbWluZ0J1ZmZlclNpemUpCiAjZW5kaWYgLy8gRU5BQkxFKFJF U09VUkNFX1RJTUlORykKLSAgICAsIG1fcmVmZXJlbmNlVGltZShmcmFtZS0+ZG9jdW1lbnQoKS0+ bG9hZGVyKCktPnRpbWluZygpLnJlZmVyZW5jZU1vbm90b25pY1RpbWUoKSkKKyAgICAsIG1fcmVm ZXJlbmNlVGltZShmcmFtZS5kb2N1bWVudCgpLT5sb2FkZXIoKSA/IGZyYW1lLmRvY3VtZW50KCkt PmxvYWRlcigpLT50aW1pbmcoKS5yZWZlcmVuY2VNb25vdG9uaWNUaW1lKCkgOiBtb25vdG9uaWNh bGx5SW5jcmVhc2luZ1RpbWUoKSkKICNpZiBFTkFCTEUoVVNFUl9USU1JTkcpCiAgICAgLCBtX3Vz ZXJUaW1pbmcobnVsbHB0cikKICNlbmRpZiAvLyBFTkFCTEUoVVNFUl9USU1JTkcpCkBAIC03Miw3 ICs3MSw3IEBAIFBlcmZvcm1hbmNlOjp+UGVyZm9ybWFuY2UoKQogU2NyaXB0RXhlY3V0aW9uQ29u dGV4dCogUGVyZm9ybWFuY2U6OnNjcmlwdEV4ZWN1dGlvbkNvbnRleHQoKSBjb25zdAogewogICAg IGlmICghZnJhbWUoKSkKLSAgICAgICAgcmV0dXJuIDA7CisgICAgICAgIHJldHVybiBudWxscHRy OwogICAgIHJldHVybiBmcmFtZSgpLT5kb2N1bWVudCgpOwogfQogCkBAIC0yMzEsNyArMjMwLDcg QEAgdm9pZCBQZXJmb3JtYW5jZTo6d2Via2l0Q2xlYXJNZWFzdXJlcyhjb25zdCBTdHJpbmcmIG1l YXN1cmVOYW1lKQogCiBkb3VibGUgUGVyZm9ybWFuY2U6Om5vdygpIGNvbnN0CiB7Ci0gICAgZG91 YmxlIG5vd1NlY29uZHMgPSBXVEY6Om1vbm90b25pY2FsbHlJbmNyZWFzaW5nVGltZSgpIC0gbV9y ZWZlcmVuY2VUaW1lOworICAgIGRvdWJsZSBub3dTZWNvbmRzID0gbW9ub3RvbmljYWxseUluY3Jl YXNpbmdUaW1lKCkgLSBtX3JlZmVyZW5jZVRpbWU7CiAgICAgY29uc3QgZG91YmxlIHJlc29sdXRp b25TZWNvbmRzID0gMC4wMDAwMDU7CiAgICAgcmV0dXJuIDEwMDAuMCAqIGZsb29yKG5vd1NlY29u ZHMgLyByZXNvbHV0aW9uU2Vjb25kcykgKiByZXNvbHV0aW9uU2Vjb25kczsKIH0KZGlmZiAtLWdp dCBhL1NvdXJjZS9XZWJDb3JlL3BhZ2UvUGVyZm9ybWFuY2UuaCBiL1NvdXJjZS9XZWJDb3JlL3Bh Z2UvUGVyZm9ybWFuY2UuaAppbmRleCBkMjY4MDE4ODc3Njc5NzVkMTVhNGIxZTZmMWYyOGM3OGMy OWY5OTRmLi5iNDdhZmNhZWNkMDk0ZTU4ODA5MDM2YjA2NWExYTMwMWU5YTc5MTdiIDEwMDY0NAot LS0gYS9Tb3VyY2UvV2ViQ29yZS9wYWdlL1BlcmZvcm1hbmNlLmgKKysrIGIvU291cmNlL1dlYkNv cmUvcGFnZS9QZXJmb3JtYW5jZS5oCkBAIC01NCw3ICs1NCw3IEBAIGNsYXNzIFVzZXJUaW1pbmc7 CiAKIGNsYXNzIFBlcmZvcm1hbmNlIGZpbmFsIDogcHVibGljIFNjcmlwdFdyYXBwYWJsZSwgcHVi bGljIFJlZkNvdW50ZWQ8UGVyZm9ybWFuY2U+LCBwdWJsaWMgRE9NV2luZG93UHJvcGVydHksIHB1 YmxpYyBFdmVudFRhcmdldFdpdGhJbmxpbmVEYXRhIHsKIHB1YmxpYzoKLSAgICBzdGF0aWMgUmVm PFBlcmZvcm1hbmNlPiBjcmVhdGUoRnJhbWUqIGZyYW1lKSB7IHJldHVybiBhZG9wdFJlZigqbmV3 IFBlcmZvcm1hbmNlKGZyYW1lKSk7IH0KKyAgICBzdGF0aWMgUmVmPFBlcmZvcm1hbmNlPiBjcmVh dGUoRnJhbWUmIGZyYW1lKSB7IHJldHVybiBhZG9wdFJlZigqbmV3IFBlcmZvcm1hbmNlKGZyYW1l KSk7IH0KICAgICB+UGVyZm9ybWFuY2UoKTsKIAogICAgIHZpcnR1YWwgRXZlbnRUYXJnZXRJbnRl cmZhY2UgZXZlbnRUYXJnZXRJbnRlcmZhY2UoKSBjb25zdCBvdmVycmlkZSB7IHJldHVybiBQZXJm b3JtYW5jZUV2ZW50VGFyZ2V0SW50ZXJmYWNlVHlwZTsgfQpAQCAtODksNyArODksNyBAQCBwdWJs aWM6CiAjZW5kaWYgLy8gRU5BQkxFKFVTRVJfVElNSU5HKQogCiBwcml2YXRlOgotICAgIGV4cGxp Y2l0IFBlcmZvcm1hbmNlKEZyYW1lKik7CisgICAgZXhwbGljaXQgUGVyZm9ybWFuY2UoRnJhbWUm KTsKIAogICAgIHZpcnR1YWwgdm9pZCByZWZFdmVudFRhcmdldCgpIG92ZXJyaWRlIHsgcmVmKCk7 IH0KICAgICB2aXJ0dWFsIHZvaWQgZGVyZWZFdmVudFRhcmdldCgpIG92ZXJyaWRlIHsgZGVyZWYo KTsgfQo=