158724 2016-06-13 20:52:01 -0700 Crash inside firstPositionInNode in checkLoadCompleteForThisFrame 2016-06-14 10:17:59 -0700 1 1 1 Unclassified WebKit Page Loading WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=134897 InRadar P2 Normal --- 1 rniwa rniwa beidson cdumez commit-queue ddkilzer enrica japhet oldest_to_newest 1202075 0 rniwa 2016-06-13 20:52:01 -0700 Thread 0 name: Dispatch queue: com.apple.main-thread Thread 0 Crashed: 0 WebCore 0x000000018f4d6428 WebCore::firstPositionInNode(WebCore::Node*) + 12 (Position.h:310) 1 WebCore 0x000000018f3498bc WebCore::FrameLoader::checkLoadCompleteForThisFrame() + 1100 (FrameLoader.cpp:2312) 2 WebCore 0x000000018f349348 WebCore::FrameLoader::checkLoadComplete() + 372 (FrameLoader.cpp:2464) 3 WebCore 0x000000018f37b270 WebCore::DocumentLoader::finishedLoading(double) + 388 (DocumentLoader.cpp:441) 4 WebCore 0x000000018f3ba734 WebCore::CachedResource::checkNotify() + 448 (CachedResource.cpp:299) 5 WebCore 0x000000018f571814 WebCore::CachedRawResource::finishLoading(WebCore::SharedBuffer*) + 224 (CachedRawResource.cpp:103) 6 WebCore 0x000000018f3ba414 WebCore::SubresourceLoader::didFinishLoading(double) + 988 (SubresourceLoader.cpp:429) 7 WebKit 0x0000000193e61330 WebKit::WebResourceLoader::didReceiveResource(WebKit::ShareableResource::Handle const&, double) + 296 (WebResourceLoader.cpp:211) 8 WebKit 0x0000000193e61f68 void IPC::handleMessage<Messages::WebResourceLoader::DidReceiveResource, WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebKit::ShareableResource::Handle const&, double)>(IPC::MessageDecoder&, WebKit::WebResourceLoader*, void (WebKit::WebResourceLoader::*)(WebKit::ShareableResource::Handle const&, double)) + 92 (HandleMessage.h:16) 9 WebKit 0x0000000193ca3cac IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::MessageDecoder, std::__1::default_delete<IPC::MessageDecoder> >) + 168 (Connection.cpp:895) 10 WebKit 0x0000000193ca6658 IPC::Connection::dispatchOneMessage() + 204 (Connection.cpp:957) 11 JavaScriptCore 0x000000018f06e408 WTF::RunLoop::performWork() + 452 (functional:1817) 12 JavaScriptCore 0x000000018f06e7b4 WTF::RunLoop::performWork(void*) + 36 (RunLoopCF.cpp:38) 13 CoreFoundation 0x000000018a94d598 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 24 (CFRunLoop.c:1938) 14 CoreFoundation 0x000000018a94cee0 __CFRunLoopDoSources0 + 524 (CFRunLoop.c:1984) 15 CoreFoundation 0x000000018a94ab60 __CFRunLoopRun + 804 (CFRunLoop.c:2816) 16 CoreFoundation 0x000000018a87d794 CFRunLoopRunSpecific + 292 (CFRunLoop.c:3098) 17 Foundation 0x000000018b316618 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 304 (NSRunLoop.m:367) 18 Foundation 0x000000018b36aef4 -[NSRunLoop(NSRunLoop) run] + 88 (NSRunLoop.m:389) 19 libxpc.dylib 0x000000018a633f40 _xpc_objc_main + 660 (main.m:186) 20 libxpc.dylib 0x000000018a635c38 xpc_main + 200 (init.c:1438) 21 com.apple.WebKit.WebContent 0x00000001000c75e4 main + 376 (XPCServiceMain.mm:114) 22 libdyld.dylib 0x000000018a42b5f0 start + 4 <rdar://problem/26071214> 1202076 1 281231 rniwa 2016-06-13 20:53:13 -0700 Created attachment 281231 Fixes the crash 1202117 2 281231 commit-queue 2016-06-14 00:34:16 -0700 Comment on attachment 281231 Fixes the crash Clearing flags on attachment: 281231 Committed r202035: <http://trac.webkit.org/changeset/202035> 1202118 3 commit-queue 2016-06-14 00:34:22 -0700 All reviewed patches have been landed. Closing bug. 281231 2016-06-13 20:53:13 -0700 2016-06-14 00:34:16 -0700 Fixes the crash bug-158724-20160613205448.patch text/plain 3292 rniwa SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDIwMjAyMykKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE1IEBACisyMDE2LTA2LTEzICBSeW9zdWtl IE5pd2EgIDxybml3YUB3ZWJraXQub3JnPgorCisgICAgICAgIENyYXNoIGluc2lkZSBmaXJzdFBv c2l0aW9uSW5Ob2RlIGluIGNoZWNrTG9hZENvbXBsZXRlRm9yVGhpc0ZyYW1lCisgICAgICAgIGh0 dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xNTg3MjQKKworICAgICAgICBS ZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBBZGRlZCBudWxsIGNoZWNrcyBm b3IgZG9jdW1lbnQgYW5kIGRvY3VtZW50IGVsZW1lbnQgc2luY2UgdGhleSBjb3VsZCBiZSBudWxs cHRyIGhlcmUuCisKKyAgICAgICAgKiBsb2FkZXIvRnJhbWVMb2FkZXIuY3BwOgorICAgICAgICAo V2ViQ29yZTo6RnJhbWVMb2FkZXI6OmNoZWNrTG9hZENvbXBsZXRlRm9yVGhpc0ZyYW1lKToKKwog MjAxNi0wNi0xMyAgSm9zZXBoIFBlY29yYXJvICA8cGVjb3Jhcm9AYXBwbGUuY29tPgogCiAgICAg ICAgIHdpbmRvdy5vbmVycm9yIHNob3VsZCBwYXNzIHRoZSBFcnJvckV2ZW50J3MgJ2Vycm9yJyBw cm9wZXJ0eSBhcyB0aGUgNXRoIGFyZ3VtZW50IHRvIHRoZSBldmVudCBoYW5kbGVyCkluZGV4OiBT b3VyY2UvV2ViQ29yZS9sb2FkZXIvRnJhbWVMb2FkZXIuY3BwCj09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJj ZS9XZWJDb3JlL2xvYWRlci9GcmFtZUxvYWRlci5jcHAJKHJldmlzaW9uIDIwMjAyMSkKKysrIFNv dXJjZS9XZWJDb3JlL2xvYWRlci9GcmFtZUxvYWRlci5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTIz MTAsMTEgKzIzMTAsMTQgQEAgdm9pZCBGcmFtZUxvYWRlcjo6Y2hlY2tMb2FkQ29tcGxldGVGb3JU aAogICAgICAgICAgICAgfSBlbHNlIHsKICAgICAgICAgICAgICAgICBGUkFNRUxPQURFUl9MT0df QUxXQVlTKCJGaW5pc2hlZCBmcmFtZSBsb2FkIHdpdGhvdXQgZXJyb3IsIGZyYW1lID0gJXAsIG1h aW4gPSAlZCIsICZtX2ZyYW1lLCBtX2ZyYW1lLmlzTWFpbkZyYW1lKCkpOwogI2lmIEVOQUJMRShE QVRBX0RFVEVDVElPTikKLSAgICAgICAgICAgICAgICBpZiAobV9mcmFtZS5zZXR0aW5ncygpLmRh dGFEZXRlY3RvclR5cGVzKCkgIT0gRGF0YURldGVjdG9yVHlwZU5vbmUpIHsKLSAgICAgICAgICAg ICAgICAgICAgUmVmUHRyPFJhbmdlPiBkb2N1bWVudFJhbmdlID0gbWFrZVJhbmdlKGZpcnN0UG9z aXRpb25Jbk5vZGUobV9mcmFtZS5kb2N1bWVudCgpLT5kb2N1bWVudEVsZW1lbnQoKSksIGxhc3RQ b3NpdGlvbkluTm9kZShtX2ZyYW1lLmRvY3VtZW50KCktPmRvY3VtZW50RWxlbWVudCgpKSk7Ci0g ICAgICAgICAgICAgICAgICAgIG1fZnJhbWUuc2V0RGF0YURldGVjdGlvblJlc3VsdHMoRGF0YURl dGVjdGlvbjo6ZGV0ZWN0Q29udGVudEluUmFuZ2UoZG9jdW1lbnRSYW5nZSwgbV9mcmFtZS5zZXR0 aW5ncygpLmRhdGFEZXRlY3RvclR5cGVzKCkpKTsKLSAgICAgICAgICAgICAgICAgICAgaWYgKG1f ZnJhbWUuaXNNYWluRnJhbWUoKSkKLSAgICAgICAgICAgICAgICAgICAgICAgIG1fY2xpZW50LmRp c3BhdGNoRGlkRmluaXNoRGF0YURldGVjdGlvbihtX2ZyYW1lLmRhdGFEZXRlY3Rpb25SZXN1bHRz KCkpOworICAgICAgICAgICAgICAgIGF1dG8qIGRvY3VtZW50ID0gbV9mcmFtZS5kb2N1bWVudCgp OworICAgICAgICAgICAgICAgIGlmIChtX2ZyYW1lLnNldHRpbmdzKCkuZGF0YURldGVjdG9yVHlw ZXMoKSAhPSBEYXRhRGV0ZWN0b3JUeXBlTm9uZSAmJiBkb2N1bWVudCkgeworICAgICAgICAgICAg ICAgICAgICBpZiAoYXV0byogZG9jdW1lbnRFbGVtZW50ID0gZG9jdW1lbnQtPmRvY3VtZW50RWxl bWVudCgpKSB7CisgICAgICAgICAgICAgICAgICAgICAgICBSZWZQdHI8UmFuZ2U+IGRvY3VtZW50 UmFuZ2UgPSBtYWtlUmFuZ2UoZmlyc3RQb3NpdGlvbkluTm9kZShkb2N1bWVudEVsZW1lbnQpLCBs YXN0UG9zaXRpb25Jbk5vZGUoZG9jdW1lbnRFbGVtZW50KSk7CisgICAgICAgICAgICAgICAgICAg ICAgICBtX2ZyYW1lLnNldERhdGFEZXRlY3Rpb25SZXN1bHRzKERhdGFEZXRlY3Rpb246OmRldGVj dENvbnRlbnRJblJhbmdlKGRvY3VtZW50UmFuZ2UsIG1fZnJhbWUuc2V0dGluZ3MoKS5kYXRhRGV0 ZWN0b3JUeXBlcygpKSk7CisgICAgICAgICAgICAgICAgICAgICAgICBpZiAobV9mcmFtZS5pc01h aW5GcmFtZSgpKQorICAgICAgICAgICAgICAgICAgICAgICAgICAgIG1fY2xpZW50LmRpc3BhdGNo RGlkRmluaXNoRGF0YURldGVjdGlvbihtX2ZyYW1lLmRhdGFEZXRlY3Rpb25SZXN1bHRzKCkpOwor ICAgICAgICAgICAgICAgICAgICB9CiAgICAgICAgICAgICAgICAgfQogI2VuZGlmCiAgICAgICAg ICAgICAgICAgbV9jbGllbnQuZGlzcGF0Y2hEaWRGaW5pc2hMb2FkKCk7CkBAIC0yMzIyLDggKzIz MjUsMTAgQEAgdm9pZCBGcmFtZUxvYWRlcjo6Y2hlY2tMb2FkQ29tcGxldGVGb3JUaAogICAgICAg ICAgICAgfQogCiAgICAgICAgICAgICAvLyBOb3RpZnkgYWNjZXNzaWJpbGl0eS4KLSAgICAgICAg ICAgIGlmIChBWE9iamVjdENhY2hlKiBjYWNoZSA9IG1fZnJhbWUuZG9jdW1lbnQoKS0+ZXhpc3Rp bmdBWE9iamVjdENhY2hlKCkpCi0gICAgICAgICAgICAgICAgY2FjaGUtPmZyYW1lTG9hZGluZ0V2 ZW50Tm90aWZpY2F0aW9uKCZtX2ZyYW1lLCBsb2FkaW5nRXZlbnQpOworICAgICAgICAgICAgaWYg KGF1dG8qIGRvY3VtZW50ID0gbV9mcmFtZS5kb2N1bWVudCgpKSB7CisgICAgICAgICAgICAgICAg aWYgKEFYT2JqZWN0Q2FjaGUqIGNhY2hlID0gZG9jdW1lbnQtPmV4aXN0aW5nQVhPYmplY3RDYWNo ZSgpKQorICAgICAgICAgICAgICAgICAgICBjYWNoZS0+ZnJhbWVMb2FkaW5nRXZlbnROb3RpZmlj YXRpb24oJm1fZnJhbWUsIGxvYWRpbmdFdmVudCk7CisgICAgICAgICAgICB9CiAKICAgICAgICAg ICAgIC8vIFRoZSBhYm92ZSBjYWxscyB0byBkaXNwYXRjaERpZEZpbmlzaExvYWQoKSBtaWdodCBo YXZlIGRldGFjaGVkIHRoZSBGcmFtZQogICAgICAgICAgICAgLy8gZnJvbSBpdHMgUGFnZSBhbmQg YWxzbyBtaWdodCBoYXZlIGNhdXNlZCBQYWdlIHRvIGJlIGRlbGV0ZWQuCg==