<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>200996</bug_id>
          
          <creation_ts>2019-08-21 13:56:38 -0700</creation_ts>
          <short_desc>Crash under NetworkCache::Data::mapToFile()</short_desc>
          <delta_ts>2019-08-21 16:01:49 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKit2</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Chris Dumez">cdumez</reporter>
          <assigned_to name="Chris Dumez">cdumez</assigned_to>
          <cc>achristensen</cc>
    
    <cc>cgarcia</cc>
    
    <cc>commit-queue</cc>
    
    <cc>ews-watchlist</cc>
    
    <cc>ggaren</cc>
    
    <cc>koivisto</cc>
    
    <cc>sihui_liu</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1563669</commentid>
    <comment_count>0</comment_count>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2019-08-21 13:56:38 -0700</bug_when>
    <thetext>Exception Type:  EXC_BAD_ACCESS (SIGBUS)
Exception Subtype: KERN_MEMORY_ERROR at 0x0000000109d68000 FS pagein error: 1 Operation not permitted
VM Region Info: 0x109d68000 is in 0x109d5c000-0x109d6c000;  bytes after start: 49152  bytes before end: 16383
      REGION TYPE                      START - END             [ VSIZE] PRT/MAX SHRMOD  REGION DETAIL
      MALLOC_LARGE           0000000109d54000-0000000109d5c000 [   32K] rw-/rwx SM=PRV  
---&gt;  mapped file            0000000109d5c000-0000000109d6c000 [   64K] rw-/rw- SM=PRV  ...t_id=c11c2d21
      GAP OF 0x4000 BYTES
      MALLOC_LARGE           0000000109d70000-0000000109d84000 [   80K] rw-/rwx SM=PRV  

Termination Signal: Bus error: 10
Termination Reason: Namespace SIGNAL, Code 0xa
Crash under NetworkCache::Data::mapToFile():

Terminating Process: exc handler [13072]
Triggered by Thread:  9

Thread 9 name:  Dispatch queue: com.apple.WebKit.Cache.Storage.background
Thread 9 Crashed:
0   libsystem_platform.dylib      	0x000000019d209548 _platform_memmove + 88
1   WebKit                        	0x00000001a4c1c10c WTF::Detail::CallableWrapper&lt;WebKit::NetworkCache::Data::mapToFile(WTF::String const&amp;) const::$_100, bool, unsigned char const*, unsigned long&gt;::call(unsigned char const*, unsigned long) + 36 (NetworkCacheData.cpp:62)
2   WebKit                        	0x00000001a4b60f00 invocation function for block in WebKit::NetworkCache::Data::apply(WTF::Function&lt;bool (unsigned char const*, unsigned long)&gt; const&amp;) const + 44 (Function.h:79)
3   libdispatch.dylib             	0x000000019d1d4024 _dispatch_data_apply_client_callout + 16 (data.c:559)
4   WebKit                        	0x00000001a4b60ebc WebKit::NetworkCache::Data::apply(WTF::Function&lt;bool (unsigned char const*, unsigned long)&gt; const&amp;) const + 96 (NetworkCacheDataCocoa.mm:76)
5   WebKit                        	0x00000001a4c0bec8 WebKit::NetworkCache::Data::mapToFile(WTF::String const&amp;) const + 216 (NetworkCacheData.cpp:61)
6   WebKit                        	0x00000001a4c0ba90 WebKit::NetworkCache::BlobStorage::add(WTF::String const&amp;, WebKit::NetworkCache::Data const&amp;) + 360 (NetworkCacheBlobStorage.cpp:109)
7   WebKit                        	0x00000001a4c28250 WebKit::NetworkCache::Storage::storeBodyAsBlob(WebKit::NetworkCache::Storage::WriteOperation&amp;) + 92 (NetworkCacheStorage.cpp:524)
8   WebKit                        	0x00000001a4c32cac WTF::Detail::CallableWrapper&lt;WebKit::NetworkCache::Storage::dispatchWriteOperation(std::__1::unique_ptr&lt;WebKit::NetworkCache::Storage::WriteOperation, std::__1::default_delete&lt;WebKit::NetworkCache::Storage::WriteOperation&gt; &gt;)::$_20, void&gt;::call() + 144 (NetworkCacheStorage.cpp:808)
9   JavaScriptCore                	0x00000001ac377c20 WTF::BlockPtr&lt;void ()&gt; WTF::BlockPtr&lt;void ()&gt;::fromCallable&lt;WTF::WorkQueue::dispatch(WTF::Function&lt;void ()&gt;&amp;&amp;)::$_0&gt;(WTF::WorkQueue::dispatch(WTF::Function&lt;void ()&gt;&amp;&amp;)::$_0)::&apos;lambda&apos;(void*)::__invoke(void*) + 32 (Function.h:79)
10  libdispatch.dylib             	0x000000019d1a7c2c _dispatch_call_block_and_release + 32 (init.c:1408)
11  libdispatch.dylib             	0x000000019d1a9088 _dispatch_client_callout + 20 (object.m:495)
12  libdispatch.dylib             	0x000000019d1ab808 _dispatch_continuation_pop + 408 (inline_internal.h:2487)
13  libdispatch.dylib             	0x000000019d1aaf68 _dispatch_async_redirect_invoke + 596 (queue.c:800)
14  libdispatch.dylib             	0x000000019d1b7c50 _dispatch_root_queue_drain + 348 (inline_internal.h:2528)
15  libdispatch.dylib             	0x000000019d1b8400 _dispatch_worker_thread2 + 120 (queue.c:6563)
16  libsystem_pthread.dylib       	0x000000019d20ea64 _pthread_wqthread + 216 (pthread.c:2336)
17  libsystem_pthread.dylib       	0x000000019d214c7c start_wqthread + 8</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1563670</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2019-08-21 13:56:59 -0700</bug_when>
    <thetext>&lt;rdar://problem/54570421&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1563673</commentid>
    <comment_count>2</comment_count>
      <attachid>376918</attachid>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2019-08-21 13:59:28 -0700</bug_when>
    <thetext>Created attachment 376918
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1563677</commentid>
    <comment_count>3</comment_count>
      <attachid>376918</attachid>
    <who name="Geoffrey Garen">ggaren</who>
    <bug_when>2019-08-21 14:07:18 -0700</bug_when>
    <thetext>Comment on attachment 376918
Patch

r=me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1563773</commentid>
    <comment_count>4</comment_count>
      <attachid>376918</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2019-08-21 16:01:47 -0700</bug_when>
    <thetext>Comment on attachment 376918
Patch

Clearing flags on attachment: 376918

Committed r248973: &lt;https://trac.webkit.org/changeset/248973&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1563774</commentid>
    <comment_count>5</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2019-08-21 16:01:49 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>376918</attachid>
            <date>2019-08-21 13:59:28 -0700</date>
            <delta_ts>2019-08-21 16:01:47 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-200996-20190821135926.patch</filename>
            <type>text/plain</type>
            <size>2338</size>
            <attacher name="Chris Dumez">cdumez</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjQ4OTU0CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L0No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</data>

          </attachment>
      

    </bug>

</bugzilla>