201186 2019-08-27 10:33:01 -0700 Crash under WebCore::jsNotificationConstructorPermission 2019-08-27 11:59:42 -0700 1 1 1 Unclassified WebKit WebCore Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 cdumez cdumez achristensen beidson commit-queue rniwa webkit-bug-importer youennf oldest_to_newest 1565386 0 cdumez 2019-08-27 10:33:01 -0700 Crash under WebCore::jsNotificationConstructorPermission: Crashed Thread: 0 Dispatch queue: com.apple.main-thread Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000038 Exception Note: EXC_CORPSE_NOTIFY Termination Signal: Segmentation fault: 11 Termination Reason: Namespace SIGNAL, Code 0xb Terminating Process: exc handler [34936] Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 com.apple.WebCore 0x00000001041a0e6c WebCore::jsNotificationConstructorPermission(JSC::ExecState*, long long, JSC::PropertyName) + 108 1 com.apple.JavaScriptCore 0x00000001072922b2 llint_slow_path_get_by_id + 6386 2 com.apple.JavaScriptCore 0x0000000107445d24 llint_entry + 38139 3 com.apple.JavaScriptCore 0x0000000107453355 llint_entry + 92972 4 com.apple.JavaScriptCore 0x0000000107453355 llint_entry + 92972 5 com.apple.JavaScriptCore 0x00000001074533d1 llint_entry + 93096 6 com.apple.JavaScriptCore 0x00000001074533d1 llint_entry + 93096 7 com.apple.JavaScriptCore 0x00000001074542ff llint_entry + 96982 8 ??? 0x00003a5acd63fdb0 0 + 64161667349936 9 com.apple.JavaScriptCore 0x00000001074542ff llint_entry + 96982 10 com.apple.JavaScriptCore 0x00000001074533d1 llint_entry + 93096 11 com.apple.JavaScriptCore 0x00000001074533d1 llint_entry + 93096 12 com.apple.JavaScriptCore 0x00000001074533d1 llint_entry + 93096 13 com.apple.JavaScriptCore 0x00000001074533d1 llint_entry + 93096 14 com.apple.JavaScriptCore 0x00000001074533d1 llint_entry + 93096 15 com.apple.JavaScriptCore 0x00000001074533d1 llint_entry + 93096 16 com.apple.JavaScriptCore 0x00000001074533d1 llint_entry + 93096 17 com.apple.JavaScriptCore 0x0000000107453355 llint_entry + 92972 18 com.apple.JavaScriptCore 0x00000001074533d1 llint_entry + 93096 19 com.apple.JavaScriptCore 0x00000001074533d1 llint_entry + 93096 20 com.apple.JavaScriptCore 0x0000000107453355 llint_entry + 92972 21 com.apple.JavaScriptCore 0x0000000107453355 llint_entry + 92972 22 com.apple.JavaScriptCore 0x00000001074533d1 llint_entry + 93096 23 com.apple.JavaScriptCore 0x0000000107453355 llint_entry + 92972 24 com.apple.JavaScriptCore 0x0000000107453355 llint_entry + 92972 25 com.apple.JavaScriptCore 0x000000010743c67f vmEntryToJavaScript + 200 26 com.apple.JavaScriptCore 0x00000001071200d1 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 417 27 com.apple.JavaScriptCore 0x0000000107bef93b JSC::profiledCall(JSC::ExecState*, JSC::ProfilingReason, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) + 187 28 com.apple.WebCore 0x0000000104894e28 WebCore::JSExecState::profiledCall(JSC::ExecState*, JSC::ProfilingReason, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) + 152 29 com.apple.WebCore 0x00000001048ad210 WebCore::JSEventListener::handleEvent(WebCore::ScriptExecutionContext&, WebCore::Event&) + 1680 30 com.apple.WebCore 0x0000000104b5a71c WebCore::EventTarget::innerInvokeEventListeners(WebCore::Event&, WTF::Vector<WTF::RefPtr<WebCore::RegisteredEventListener, WTF::DumbPtrTraits<WebCore::RegisteredEventListener> >, 1ul, WTF::CrashOnOverflow, 16ul>, WebCore::EventTarget::EventInvokePhase) + 1196 31 com.apple.WebCore 0x0000000104b580f2 WebCore::EventTarget::fireEventListeners(WebCore::Event&, WebCore::EventTarget::EventInvokePhase) + 594 32 com.apple.WebCore 0x0000000104b5a245 WebCore::EventTarget::dispatchEvent(WebCore::Event&) + 181 33 com.apple.WebCore 0x00000001039856de WebCore::PostMessageTimer::fired() + 1262 1565387 1 cdumez 2019-08-27 10:33:14 -0700 <rdar://problem/53962833> 1565388 2 377349 cdumez 2019-08-27 10:36:22 -0700 Created attachment 377349 Patch 1565433 3 377349 cdumez 2019-08-27 11:38:46 -0700 Comment on attachment 377349 Patch Clearing flags on attachment: 377349 Committed r249156: <https://trac.webkit.org/changeset/249156> 1565434 4 cdumez 2019-08-27 11:38:47 -0700 All reviewed patches have been landed. Closing bug. 377349 2019-08-27 10:36:22 -0700 2019-08-27 11:38:46 -0700 Patch bug-201186-20190827103621.patch text/plain 5408 cdumez U3VidmVyc2lvbiBSZXZpc2lvbjogMjQ5MTQxCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViQ29yZS9DaGFuZ2VMb2cKaW5kZXggNTY3NzY2YmNjYTI4OWMz OWQyODhmYTkyOWI4NzkzYjU2NTBjMWJiMS4uYzg3YjVmZjQ5OTE3NmJkNThmNWRiMTEyNmY5MGQ1 OWQzY2VmOTJmNyAxMDA2NDQKLS0tIGEvU291cmNlL1dlYkNvcmUvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJDb3JlL0NoYW5nZUxvZwpAQCAtMSwzICsxLDIxIEBACisyMDE5LTA4LTI3ICBDaHJp cyBEdW1leiAgPGNkdW1lekBhcHBsZS5jb20+CisKKyAgICAgICAgQ3Jhc2ggdW5kZXIgV2ViQ29y ZTo6anNOb3RpZmljYXRpb25Db25zdHJ1Y3RvclBlcm1pc3Npb24KKyAgICAgICAgaHR0cHM6Ly9i dWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIwMTE4NgorICAgICAgICA8cmRhcjovL3By b2JsZW0vNTM5NjI4MzM+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisK KyAgICAgICAgVXBkYXRlIHRoZSBOb3RpZmljYXRpb24gQVBJIGltcGxlbWVudGF0aW9uIHRvIG51 bGwtY2hlY2sgdGhlIHBhZ2UgYmVmb3JlIHVzaW5nLiBUaGUgcGFnZSBiZWNvbWVzIG51bGwKKyAg ICAgICAgd2hlbiB1c2luZyB0aGUgQVBJIGluIGEgZnJhbWUgdGhhdCBnZXRzIGRldGFjaGVkIGZy b20gaXRzIHBhcmVudCB3aGlsZSBpbiB0aGUgbWlkZGxlIG9mIHJ1bm5pbmcKKyAgICAgICAgc2Ny aXB0LgorCisgICAgICAgIFRlc3Q6IGh0dHAvdGVzdHMvbm90aWZpY2F0aW9ucy9yZXF1ZXN0LWlu LWRldGFjaGVkLWZyYW1lLmh0bWwKKworICAgICAgICAqIE1vZHVsZXMvbm90aWZpY2F0aW9ucy9O b3RpZmljYXRpb24uY3BwOgorICAgICAgICAoV2ViQ29yZTo6Tm90aWZpY2F0aW9uOjpwZXJtaXNz aW9uKToKKyAgICAgICAgKFdlYkNvcmU6Ok5vdGlmaWNhdGlvbjo6cmVxdWVzdFBlcm1pc3Npb24p OgorCiAyMDE5LTA4LTI3ICBQZW5nIExpdSAgPHBlbmcubGl1NkBhcHBsZS5jb20+CiAKICAgICAg ICAgd2Via2l0cHJlc2VudGF0aW9ubW9kZWNoYW5nZWQgaXMgZmlyZWQgdHdpY2Ugd2hlbiBleGl0 aW5nIHBpY3R1cmUgaW4gcGljdHVyZQpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYkNvcmUvTW9kdWxl cy9ub3RpZmljYXRpb25zL05vdGlmaWNhdGlvbi5jcHAgYi9Tb3VyY2UvV2ViQ29yZS9Nb2R1bGVz L25vdGlmaWNhdGlvbnMvTm90aWZpY2F0aW9uLmNwcAppbmRleCAwZWJhZmY4OWZmYmM1MDAzZTI0 NjFiYWRlZTUyMDM5MTE3MWNiZDNiLi4xM2M1Mzc4YjBkZjhjMzc2ZDI1ZGJhM2Y4ODNhMTM1ODRl NzRkNzNmIDEwMDY0NAotLS0gYS9Tb3VyY2UvV2ViQ29yZS9Nb2R1bGVzL25vdGlmaWNhdGlvbnMv Tm90aWZpY2F0aW9uLmNwcAorKysgYi9Tb3VyY2UvV2ViQ29yZS9Nb2R1bGVzL25vdGlmaWNhdGlv bnMvTm90aWZpY2F0aW9uLmNwcApAQCAtMTY2LDEyICsxNjYsMjAgQEAgdm9pZCBOb3RpZmljYXRp b246OmRpc3BhdGNoRXJyb3JFdmVudCgpCiAKIGF1dG8gTm90aWZpY2F0aW9uOjpwZXJtaXNzaW9u KERvY3VtZW50JiBkb2N1bWVudCkgLT4gUGVybWlzc2lvbgogeworICAgIGF1dG8qIHBhZ2UgPSBk b2N1bWVudC5wYWdlKCk7CisgICAgaWYgKCFwYWdlKQorICAgICAgICByZXR1cm4gUGVybWlzc2lv bjo6RGVmYXVsdDsKKwogICAgIHJldHVybiBOb3RpZmljYXRpb25Db250cm9sbGVyOjpmcm9tKGRv Y3VtZW50LnBhZ2UoKSktPmNsaWVudCgpLmNoZWNrUGVybWlzc2lvbigmZG9jdW1lbnQpOwogfQog CiB2b2lkIE5vdGlmaWNhdGlvbjo6cmVxdWVzdFBlcm1pc3Npb24oRG9jdW1lbnQmIGRvY3VtZW50 LCBSZWZQdHI8Tm90aWZpY2F0aW9uUGVybWlzc2lvbkNhbGxiYWNrPiYmIGNhbGxiYWNrKQogewot ICAgIE5vdGlmaWNhdGlvbkNvbnRyb2xsZXI6OmZyb20oZG9jdW1lbnQucGFnZSgpKS0+Y2xpZW50 KCkucmVxdWVzdFBlcm1pc3Npb24oJmRvY3VtZW50LCBXVEZNb3ZlKGNhbGxiYWNrKSk7CisgICAg YXV0byogcGFnZSA9IGRvY3VtZW50LnBhZ2UoKTsKKyAgICBpZiAoIXBhZ2UpCisgICAgICAgIHJl dHVybjsKKworICAgIE5vdGlmaWNhdGlvbkNvbnRyb2xsZXI6OmZyb20ocGFnZSktPmNsaWVudCgp LnJlcXVlc3RQZXJtaXNzaW9uKCZkb2N1bWVudCwgV1RGTW92ZShjYWxsYmFjaykpOwogfQogCiB9 IC8vIG5hbWVzcGFjZSBXZWJDb3JlCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cg Yi9MYXlvdXRUZXN0cy9DaGFuZ2VMb2cKaW5kZXggMDQzZjZjODdiOGJkNzlhNTQzNTcyOGIwMzg0 ZTQ4ZWE0YWYzYzJiYi4uYWQ0ZTM1YmE5MWI0ODhkZTMyYzRhMzVjOWY1ZjllYWVhYTZmYjhlOSAx MDA2NDQKLS0tIGEvTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCisrKyBiL0xheW91dFRlc3RzL0NoYW5n ZUxvZwpAQCAtMSwzICsxLDE3IEBACisyMDE5LTA4LTI3ICBDaHJpcyBEdW1leiAgPGNkdW1lekBh cHBsZS5jb20+CisKKyAgICAgICAgQ3Jhc2ggdW5kZXIgV2ViQ29yZTo6anNOb3RpZmljYXRpb25D b25zdHJ1Y3RvclBlcm1pc3Npb24KKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hv d19idWcuY2dpP2lkPTIwMTE4NgorICAgICAgICA8cmRhcjovL3Byb2JsZW0vNTM5NjI4MzM+CisK KyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgQWRkIGxheW91 dCB0ZXN0IGNvdmVyYWdlLgorCisgICAgICAgICogaHR0cC90ZXN0cy9ub3RpZmljYXRpb25zL3Jl cXVlc3QtaW4tZGV0YWNoZWQtZnJhbWUtZXhwZWN0ZWQudHh0OiBBZGRlZC4KKyAgICAgICAgKiBo dHRwL3Rlc3RzL25vdGlmaWNhdGlvbnMvcmVxdWVzdC1pbi1kZXRhY2hlZC1mcmFtZS5odG1sOiBB ZGRlZC4KKyAgICAgICAgKiBodHRwL3Rlc3RzL25vdGlmaWNhdGlvbnMvcmVzb3VyY2VzL3JlcXVl c3QtaW4tZGV0YWNoZWQtZnJhbWUtc3ViZnJhbWUuaHRtbDogQWRkZWQuCisKIDIwMTktMDgtMjcg IFBlbmcgTGl1ICA8cGVuZy5saXU2QGFwcGxlLmNvbT4KIAogICAgICAgICB3ZWJraXRwcmVzZW50 YXRpb25tb2RlY2hhbmdlZCBpcyBmaXJlZCB0d2ljZSB3aGVuIGV4aXRpbmcgcGljdHVyZSBpbiBw aWN0dXJlCmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9odHRwL3Rlc3RzL25vdGlmaWNhdGlvbnMv cmVxdWVzdC1pbi1kZXRhY2hlZC1mcmFtZS1leHBlY3RlZC50eHQgYi9MYXlvdXRUZXN0cy9odHRw L3Rlc3RzL25vdGlmaWNhdGlvbnMvcmVxdWVzdC1pbi1kZXRhY2hlZC1mcmFtZS1leHBlY3RlZC50 eHQKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMC4uZTcyMWMyOTY3Zjk0MGY3ZDk4YWE0NjdjZjIwY2U5MGZhMWRjOTY1Ygot LS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL2h0dHAvdGVzdHMvbm90aWZpY2F0aW9ucy9y ZXF1ZXN0LWluLWRldGFjaGVkLWZyYW1lLWV4cGVjdGVkLnR4dApAQCAtMCwwICsxLDEwIEBACitU aGlzIHRlc3QgY2hlY2tzIGFjY2Vzc2luZyBOb3RpZmljYXRpb24ucGVybWlzc2lvbiBpbiBhIGRl dGFjaGVkIGlmcmFtZS4KKworT24gc3VjY2VzcywgeW91IHdpbGwgc2VlIGEgc2VyaWVzIG9mICJQ QVNTIiBtZXNzYWdlcywgZm9sbG93ZWQgYnkgIlRFU1QgQ09NUExFVEUiLgorCisKK1BBU1MgTm90 aWZpY2F0aW9uLnBlcm1pc3Npb24gaXMgImRlZmF1bHQiCitQQVNTIHN1Y2Nlc3NmdWxseVBhcnNl ZCBpcyB0cnVlCisKK1RFU1QgQ09NUExFVEUKKwpkaWZmIC0tZ2l0IGEvTGF5b3V0VGVzdHMvaHR0 cC90ZXN0cy9ub3RpZmljYXRpb25zL3JlcXVlc3QtaW4tZGV0YWNoZWQtZnJhbWUuaHRtbCBiL0xh eW91dFRlc3RzL2h0dHAvdGVzdHMvbm90aWZpY2F0aW9ucy9yZXF1ZXN0LWluLWRldGFjaGVkLWZy YW1lLmh0bWwKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMC4uZjU0YWIzMzQzY2YwMjQyNzA1MTIyZjE5YzMxYWViMmY5NTc1 NGI5MAotLS0gL2Rldi9udWxsCisrKyBiL0xheW91dFRlc3RzL2h0dHAvdGVzdHMvbm90aWZpY2F0 aW9ucy9yZXF1ZXN0LWluLWRldGFjaGVkLWZyYW1lLmh0bWwKQEAgLTAsMCArMSwxOSBAQAorPCFE T0NUWVBFIGh0bWw+Cis8c2NyaXB0IHNyYz0iL3Jlc291cmNlcy9qcy10ZXN0LXByZS5qcyI+PC9z Y3JpcHQ+Cis8c2NyaXB0IHNyYz0iL3Jlc291cmNlcy9ub3RpZmljYXRpb25zLXRlc3QtcHJlLmpz Ij48L3NjcmlwdD4KKzxwIGlkPSJkZXNjcmlwdGlvbiI+PC9wPgorPGRpdiBpZD0iY29uc29sZSI+ PC9kaXY+Cis8aWZyYW1lIGlkPSJ0ZXN0RnJhbWUiIHNyYz0icmVzb3VyY2VzL3JlcXVlc3QtaW4t ZGV0YWNoZWQtZnJhbWUtc3ViZnJhbWUuaHRtbCI+PC9pZnJhbWU+Cis8c2NyaXB0PgorZGVzY3Jp cHRpb24oIlRoaXMgdGVzdCBjaGVja3MgYWNjZXNzaW5nIE5vdGlmaWNhdGlvbi5wZXJtaXNzaW9u IGluIGEgZGV0YWNoZWQgaWZyYW1lLiIpOworCitpZiAod2luZG93LnRlc3RSdW5uZXIpCisgICAg dGVzdFJ1bm5lci53YWl0VW50aWxEb25lKCk7CisKK29ubG9hZCA9ICgpID0+IHsKKyAgICB0ZXN0 RnJhbWUuY29udGVudFdpbmRvdy5wb3N0TWVzc2FnZSgiZm9vIiwgIioiKTsKKyAgICBzZXRUaW1l b3V0KCgpID0+IHsKKyAgICAgICAgdGVzdENvbXBsZXRlZCgpOworICAgIH0sIDEwMCk7Cit9Owor PC9zY3JpcHQ+CmRpZmYgLS1naXQgYS9MYXlvdXRUZXN0cy9odHRwL3Rlc3RzL25vdGlmaWNhdGlv bnMvcmVzb3VyY2VzL3JlcXVlc3QtaW4tZGV0YWNoZWQtZnJhbWUtc3ViZnJhbWUuaHRtbCBiL0xh eW91dFRlc3RzL2h0dHAvdGVzdHMvbm90aWZpY2F0aW9ucy9yZXNvdXJjZXMvcmVxdWVzdC1pbi1k ZXRhY2hlZC1mcmFtZS1zdWJmcmFtZS5odG1sCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAuLjNiNGU0YzhlYzhiNzZiMzU1 MmI4YzNkZGExNDQxZGZlYjM4YzQxNzUKLS0tIC9kZXYvbnVsbAorKysgYi9MYXlvdXRUZXN0cy9o dHRwL3Rlc3RzL25vdGlmaWNhdGlvbnMvcmVzb3VyY2VzL3JlcXVlc3QtaW4tZGV0YWNoZWQtZnJh bWUtc3ViZnJhbWUuaHRtbApAQCAtMCwwICsxLDEwIEBACis8c2NyaXB0Pgorb25tZXNzYWdlID0g ZnVuY3Rpb24obXNnKSB7CisgICAgbGV0IHAgPSBwYXJlbnQ7CisgICAgcC50ZXN0RnJhbWUucmVt b3ZlKCk7CisgICAgcC5zaG91bGRCZUVxdWFsVG9TdHJpbmcoIk5vdGlmaWNhdGlvbi5wZXJtaXNz aW9uIiwgImRlZmF1bHQiKTsKKyAgICBOb3RpZmljYXRpb24ucmVxdWVzdFBlcm1pc3Npb24oKHJl c3VsdCkgPT4geworICAgICAgICBwLnRlc3RGYWlsZWQoIlBlcm1pc3Npb24gaGFuZGxlciBzaG91 bGQgbm90IGhhdmUgYmVlbiBjYWxsZWQiKTsKKyAgICB9KTsKK30KKzwvc2NyaXB0Pgo=