<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>165659</bug_id>
          
          <creation_ts>2016-12-09 10:01:04 -0800</creation_ts>
          <short_desc>CrashTracer: com.apple.WebKit.Networking at WTF::ThreadSafeRefCounted&lt;WebKit::NetworkCache::IOChannel&gt;::deref</short_desc>
          <delta_ts>2016-12-12 12:07:48 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Page Loading</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>REOPENED</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Antti Koivisto">koivisto</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>ap</cc>
    
    <cc>beidson</cc>
    
    <cc>buildbot</cc>
    
    <cc>cdumez</cc>
    
    <cc>cgarcia</cc>
    
    <cc>commit-queue</cc>
    
    <cc>rniwa</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1258164</commentid>
    <comment_count>0</comment_count>
    <who name="Antti Koivisto">koivisto</who>
    <bug_when>2016-12-09 10:01:04 -0800</bug_when>
    <thetext>Some crashes of this type have been seen:

      25 libdispatch.dylib: _dispatch_try_lock_transfer_or_wakeup
        25 libdispatch.dylib: _dispatch_io_dispose
          39 libdispatch.dylib: _dispatch_io_dispose
            40 libdispatch.dylib: _dispatch_dispose
       ==&gt; 40 WebKit: WTF::ThreadSafeRefCounted&lt;WebKit::NetworkCache::IOChannel&gt;::deref() &lt;==
              | 27 libsystem_blocks.dylib: _Block_release
              | | 27 libsystem_blocks.dylib: _Block_release
              | |   24 libdispatch.dylib: _dispatch_client_callout
              | |   | 24 libdispatch.dylib: _dispatch_continuation_pop
              | |   |   24 libdispatch.dylib: _dispatch_async_redirect_invoke
              | |   |     24 libdispatch.dylib: _dispatch_root_queue_drain
              | |   |       24 libdispatch.dylib: _dispatch_worker_thread3
              | |   |         24 libsystem_pthread.dylib: _pthread_wqthread
              | |   |           24 libsystem_pthread.dylib: 
              | |   pruning: 2 libdispatch.dylib: _dispatch_continuation_pop
              | |   pruning: 1 libdispatch.dylib: _dispatch_queue_serial_drain
              | 13 WebKit: std::__1::__function::__func&lt;WebKit::NetworkCache::Storage::dispatchReadOperation(std::__1::unique_ptr&lt;WebKit::NetworkCache::Storage::ReadOperation, std::__1::default_delete&lt;WebKit::NetworkCache::Storage::ReadOperation&gt; &gt;)::$_6, std::__1::allocator&lt;WebKit::NetworkCache::Storage::dispatchReadOperation(std::__1::unique_ptr&lt;WebKit::NetworkCache::Storage::ReadOperation, std::__1::default_delete&lt;WebKit::NetworkCache::Storage::ReadOperation&gt; &gt;)::$_6&gt;, void ()&gt;::operator()()
              |   13 JavaScriptCore: ___ZN3WTF9WorkQueue8dispatchENSt3__18functionIFvvEEE_block_invoke
              |     13 libdispatch.dylib: _dispatch_call_block_and_release
              |       pruning: 9 libdispatch.dylib: _dispatch_client_callout
              |       pruning: 4 libdispatch.dylib: _dispatch_continuation_pop
       ==&gt; 10 libdispatch.dylib: _dispatch_dispose &lt;==
                10 WebKit: WTF::ThreadSafeRefCounted&lt;WebKit::NetworkCache::IOChannel&gt;::deref()
                  pruning: 6 libsystem_blocks.dylib: _Block_release
                  pruning: 4 WebKit: std::__1::__function::__func&lt;WebKit::NetworkCache::Storage::dispatchReadOperation(std::__1::unique_ptr&lt;WebKit::NetworkCache::Storage::ReadOperation, std::__1::default_delete&lt;WebKit::NetworkCache::Storage::ReadOperation&gt; &gt;)::$_6, std::__1::allocator&lt;WebKit::NetworkCache::Storage::dispatchReadOperation(std::__1::unique_ptr&lt;WebKit::NetworkCache::Storage::ReadOperation, std::__1::default_delete&lt;WebKit::NetworkCache::Storage::ReadOperation&gt; &gt;)::$_6&gt;, void ()&gt;::operator()()</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1258165</commentid>
    <comment_count>1</comment_count>
    <who name="Antti Koivisto">koivisto</who>
    <bug_when>2016-12-09 10:01:20 -0800</bug_when>
    <thetext>&lt;rdar://problem/27077977&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1258176</commentid>
    <comment_count>2</comment_count>
      <attachid>296659</attachid>
    <who name="Antti Koivisto">koivisto</who>
    <bug_when>2016-12-09 10:23:01 -0800</bug_when>
    <thetext>Created attachment 296659
add a release assert</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1258578</commentid>
    <comment_count>3</comment_count>
      <attachid>296659</attachid>
    <who name="Darin Adler">darin</who>
    <bug_when>2016-12-09 21:24:36 -0800</bug_when>
    <thetext>Comment on attachment 296659
add a release assert

OK, hope this works!</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1258659</commentid>
    <comment_count>4</comment_count>
      <attachid>296659</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2016-12-10 02:01:04 -0800</bug_when>
    <thetext>Comment on attachment 296659
add a release assert

Clearing flags on attachment: 296659

Committed r209660: &lt;http://trac.webkit.org/changeset/209660&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1258660</commentid>
    <comment_count>5</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2016-12-10 02:01:09 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1258672</commentid>
    <comment_count>6</comment_count>
    <who name="Antti Koivisto">koivisto</who>
    <bug_when>2016-12-10 03:29:39 -0800</bug_when>
    <thetext>Not a fix.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>296659</attachid>
            <date>2016-12-09 10:23:01 -0800</date>
            <delta_ts>2016-12-10 02:01:04 -0800</delta_ts>
            <desc>add a release assert</desc>
            <filename>IOChannel-crash-assert.patch</filename>
            <type>text/plain</type>
            <size>2920</size>
            <attacher name="Antti Koivisto">koivisto</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9XZWJLaXQyL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09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</data>

          </attachment>
      

    </bug>

</bugzilla>