201541 2019-09-06 02:44:37 -0700 [Win][MiniBrowser][WK1] Crashes in MiniBrowserWebHost::onNotify by closing MainWindow while loading 2019-09-09 18:32:10 -0700 1 1 1 Unclassified WebKit Tools / Tests WebKit Nightly Build Unspecified Unspecified RESOLVED DUPLICATE 201600 https://bugs.webkit.org/show_bug.cgi?id=200970 P2 Normal --- 201600 1 fujii webkit-unassigned oldest_to_newest 1568462 0 fujii 2019-09-06 02:44:37 -0700 [Win][MiniBrowser][WK1] Crashes in MiniBrowserWebHost::onNotify by closing MainWindow while loading 1. Start MiniBrowser 2. Open some legacy WebView Windows 3. Load some web sites in them 4. Close them while loading Crash happens. Callstack: > MiniBrowserLib.dll!MiniBrowserWebHost::onNotify(IWebNotification * notification) Line 175 C++ > WebKit.dll!WebNotificationCenter::postNotificationInternal(IWebNotification * notification, wchar_t * notificationName, IUnknown * anObject) Line 131 C++ > WebKit.dll!WebNotificationCenter::postNotificationName(wchar_t * notificationName, IUnknown * anObject, IPropertyBag * userInfo) Line 183 C++ > WebKit.dll!WebFrameLoaderClient::progressEstimateChanged(WebCore::Frame &) Line 663 C++ > WebKit.dll!WebCore::ProgressTracker::incrementProgress(unsigned long identifier, unsigned int bytesReceived) Line 262 C++ > WebKit.dll!WebCore::ResourceLoadNotifier::didReceiveData(WebCore::ResourceLoader * loader, const char * data, int dataLength, int encodedDataLength) Line 87 C++ > WebKit.dll!WebCore::ResourceLoader::didReceiveDataOrBuffer(const char * data, unsigned int length, WTF::RefPtr<WebCore::SharedBuffer,WTF::DumbPtrTraits<WebCore::SharedBuffer> > && buffer, __int64 encodedDataLength, WebCore::DataPayloadType dataPayloadType) Line 532 C++ > WebKit.dll!WebCore::SubresourceLoader::didReceiveDataOrBuffer(const char * data, int length, WTF::RefPtr<WebCore::SharedBuffer,WTF::DumbPtrTraits<WebCore::SharedBuffer> > && buffer, __int64 encodedDataLength, WebCore::DataPayloadType dataPayloadType) Line 477 C++ > WebKit.dll!WebCore::SubresourceLoader::didReceiveBuffer(WTF::Ref<WebCore::SharedBuffer,WTF::DumbPtrTraits<WebCore::SharedBuffer> > && buffer, __int64 encodedDataLength, WebCore::DataPayloadType dataPayloadType) Line 461 C++ > WebKit.dll!WebCore::ResourceLoader::didReceiveBuffer(WebCore::ResourceHandle *, WTF::Ref<WebCore::SharedBuffer,WTF::DumbPtrTraits<WebCore::SharedBuffer> > && buffer, int encodedDataLength) Line 695 C++ > WebKit.dll!WebCore::CurlResourceHandleDelegate::curlDidReceiveBuffer(WebCore::CurlRequest &, WTF::Ref<WebCore::SharedBuffer,WTF::DumbPtrTraits<WebCore::SharedBuffer> > && buffer) Line 155 C++ > WebKit.dll!WebCore::CurlRequest::didReceiveData::<unnamed-tag>::operator()(WebCore::CurlRequest & request, WebCore::CurlRequestClient & client) Line 399 C++ > WebKit.dll!WTF::Detail::CallableWrapper<`lambda at ..\..\Source\WebCore\platform\network\curl\CurlRequest.cpp:397:24',void,WebCore::CurlRequest &,WebCore::CurlRequestClient &>::call(WebCore::CurlRequest & in, WebCore::CurlRequestClient & in) Line 52 C++ > WebKit.dll!WTF::Function<void (WebCore::CurlRequest &, WebCore::CurlRequestClient &)>::operator()(WebCore::CurlRequest & in, WebCore::CurlRequestClient & in) Line 79 C++ > WebKit.dll!WebCore::CurlRequest::callClient::<unnamed-tag>::operator()() Line 181 C++ > WebKit.dll!WTF::Detail::CallableWrapper<`lambda at ..\..\Source\WebCore\platform\network\curl\CurlRequest.cpp:179:21',void>::call() Line 52 C++ > WTF.dll!WTF::Function<void ()>::operator()() Line 79 C++ > WTF.dll!WTF::dispatchFunctionsFromMainThread() Line 114 C++ > WTF.dll!WTF::ThreadingWindowWndProc(HWND__ * hWnd, unsigned int message, unsigned __int64 wParam, __int64 lParam) Line 48 C++ > [External Code] > WebKit.dll!WebKitMessageLoop::run(HACCEL__ * hAccelTable) Line 94 C++ > MiniBrowserLib.dll!wWinMain(HINSTANCE__ * hInstance, HINSTANCE__ * hPrevInstance, wchar_t * lpstrCmdLine, int nCmdShow) Line 104 C++ > MiniBrowserLib.dll!dllLauncherEntryPoint(HINSTANCE__ * hInstance, HINSTANCE__ * hPrevInstance, wchar_t * lpstrCmdLine, int nCmdShow) Line 122 C++ > MiniBrowser.exe!wWinMain(HINSTANCE__ * hInstance, HINSTANCE__ * hPrevInstance, wchar_t * lpstrCmdLine, int nCmdShow) Line 232 C++ > [External Code] 1569061 1 378347 fujii 2019-09-08 21:27:13 -0700 Created attachment 378347 WIP patch 1569066 2 fujii 2019-09-08 23:23:30 -0700 Notification observers should be unregistered from the default notification center by using IWebNotificationCenter::removeObserver. But, WebKitLegacyBrowserWindow is not freed. I'm going to fix the issue and this issue in the following bug ticket. Bug 201600 – [Win][MiniBrowser] WebKitLegacyBrowserWindow is leaked by circular references 1569385 3 fujii 2019-09-09 18:32:10 -0700 *** This bug has been marked as a duplicate of bug 201600 *** 378347 2019-09-08 21:27:13 -0700 2019-09-08 21:27:13 -0700 WIP patch wip.patch text/plain 940 fujii ZGlmZiAtLWdpdCBhL1Rvb2xzL01pbmlCcm93c2VyL3dpbi9XZWJLaXRMZWdhY3lCcm93c2VyV2lu ZG93LmNwcCBiL1Rvb2xzL01pbmlCcm93c2VyL3dpbi9XZWJLaXRMZWdhY3lCcm93c2VyV2luZG93 LmNwcAppbmRleCAzMDkwYmRiZTNiOC4uYWNlMjUwNzcyMjMgMTAwNjQ0Ci0tLSBhL1Rvb2xzL01p bmlCcm93c2VyL3dpbi9XZWJLaXRMZWdhY3lCcm93c2VyV2luZG93LmNwcAorKysgYi9Ub29scy9N aW5pQnJvd3Nlci93aW4vV2ViS2l0TGVnYWN5QnJvd3NlcldpbmRvdy5jcHAKQEAgLTEzMywxMSAr MTMzLDExIEBAIEhSRVNVTFQgV2ViS2l0TGVnYWN5QnJvd3NlcldpbmRvdzo6aW5pdCgpCiAgICAg aWYgKEZBSUxFRChocikpCiAgICAgICAgIHJldHVybiBocjsKIAotICAgIGhyID0gZGVmYXVsdE5v dGlmaWNhdGlvbkNlbnRlci0+YWRkT2JzZXJ2ZXIod2ViSG9zdCwgX2JzdHJfdChXZWJWaWV3UHJv Z3Jlc3NFc3RpbWF0ZUNoYW5nZWROb3RpZmljYXRpb24pLCBudWxscHRyKTsKKyAgICBociA9IGRl ZmF1bHROb3RpZmljYXRpb25DZW50ZXItPmFkZE9ic2VydmVyKHdlYkhvc3QsIF9ic3RyX3QoV2Vi Vmlld1Byb2dyZXNzRXN0aW1hdGVDaGFuZ2VkTm90aWZpY2F0aW9uKSwgbV93ZWJWaWV3KTsKICAg ICBpZiAoRkFJTEVEKGhyKSkKICAgICAgICAgcmV0dXJuIGhyOwogCi0gICAgaHIgPSBkZWZhdWx0 Tm90aWZpY2F0aW9uQ2VudGVyLT5hZGRPYnNlcnZlcih3ZWJIb3N0LCBfYnN0cl90KFdlYlZpZXdQ cm9ncmVzc0ZpbmlzaGVkTm90aWZpY2F0aW9uKSwgbnVsbHB0cik7CisgICAgaHIgPSBkZWZhdWx0 Tm90aWZpY2F0aW9uQ2VudGVyLT5hZGRPYnNlcnZlcih3ZWJIb3N0LCBfYnN0cl90KFdlYlZpZXdQ cm9ncmVzc0ZpbmlzaGVkTm90aWZpY2F0aW9uKSwgbV93ZWJWaWV3KTsKICAgICBpZiAoRkFJTEVE KGhyKSkKICAgICAgICAgcmV0dXJuIGhyOwogCg==