209892 2020-04-01 19:51:00 -0700 Crash in WebCore::HTMLDocumentParser::insert 2020-04-01 22:22:51 -0700 1 1 1 Unclassified WebKit DOM WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 rniwa rniwa achristensen beidson cdumez darin esprehn+autocc ews-watchlist ggaren gyuyoung.kim oldest_to_newest 1636778 0 rniwa 2020-04-01 19:51:00 -0700 e.g. 0 com.apple.WebCore 0x00007fff3fb0f505 WebCore::HTMLDocumentParser::insert(WebCore::SegmentedString&&) + 181 1 com.apple.WebCore 0x00007fff3f7a36b2 WebCore::Document::write(WebCore::Document*, WebCore::SegmentedString&&) + 194 2 com.apple.WebCore 0x00007fff3f7a38ab WebCore::Document::write(WebCore::Document*, WTF::Vector<WTF::String, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&&) + 427 3 com.apple.WebCore 0x00007fff3ea8ae60 WebCore::jsDocumentPrototypeFunctionWrite(JSC::JSGlobalObject*, JSC::CallFrame*) + 176 4 ??? 0x00003b2c95e01178 0 + 65062679089528 5 com.apple.JavaScriptCore 0x00007fff33658a1d llint_entry + 93344 6 com.apple.JavaScriptCore 0x00007fff33641bcf vmEntryToJavaScript + 200 1636779 1 rniwa 2020-04-01 19:51:10 -0700 <rdar://problem/53488855> 1636780 2 395238 rniwa 2020-04-01 19:58:24 -0700 Created attachment 395238 Fixes the bug 1636809 3 rniwa 2020-04-01 22:22:51 -0700 Committed r259378: <https://trac.webkit.org/changeset/259378> 395238 2020-04-01 19:58:24 -0700 2020-04-01 21:20:35 -0700 Fixes the bug bug-209892-20200401195823.patch text/plain 2051 rniwa SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDI1OTI2MCkKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE4IEBACisyMDIwLTA0LTAxICBSeW9zdWtl IE5pd2EgIDxybml3YUB3ZWJraXQub3JnPgorCisgICAgICAgIENyYXNoIGluIFdlYkNvcmU6OkhU TUxEb2N1bWVudFBhcnNlcjo6aW5zZXJ0CisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3Jn L3Nob3dfYnVnLmNnaT9pZD0yMDk4OTIKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9P UFMhKS4KKworICAgICAgICBTcGVjdWxhdGl2ZSBmaXggdG8gY2hlY2sgdGhhdCB0aGUgcGFyc2Vy IGhhc24ndCBiZWVuIGRldGFjaGVkIGJlZm9yZSBydW5uaW5nIHByZWxvYWQgc2Nhbm5lci4KKwor ICAgICAgICBObyBuZXcgdGVzdHMgc2luY2UgdGhlcmUgaXMgbm8gcmVwcm9kdWN0aW9uIGFuZCBJ IGNvdWxkbid0IGNvbWUgdXAgd2l0aCBvbmUuCisKKyAgICAgICAgKiBodG1sL3BhcnNlci9IVE1M RG9jdW1lbnRQYXJzZXIuY3BwOgorICAgICAgICAoV2ViQ29yZTo6SFRNTERvY3VtZW50UGFyc2Vy OjpwdW1wVG9rZW5pemVyKToKKyAgICAgICAgKFdlYkNvcmU6OkhUTUxEb2N1bWVudFBhcnNlcjo6 aW5zZXJ0KToKKwogMjAyMC0wMy0zMCAgQ2hyaXMgRHVtZXogIDxjZHVtZXpAYXBwbGUuY29tPgog CiAgICAgICAgIE92ZXJyaWRlcyBvZiBBY3RpdmVET01PYmplY3Q6Omhhc1BlbmRpbmdBY3Rpdml0 eSgpIHNob3VsZCBub3QgbmVlZCB0byBxdWVyeSB0aGUgYmFzZSBjbGFzcydzIGhhc1BlbmRpbmdB Y3Rpdml0eSgpCkluZGV4OiBTb3VyY2UvV2ViQ29yZS9odG1sL3BhcnNlci9IVE1MRG9jdW1lbnRQ YXJzZXIuY3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJDb3JlL2h0bWwvcGFyc2VyL0hUTUxE b2N1bWVudFBhcnNlci5jcHAJKHJldmlzaW9uIDI1OTI2MCkKKysrIFNvdXJjZS9XZWJDb3JlL2h0 bWwvcGFyc2VyL0hUTUxEb2N1bWVudFBhcnNlci5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTMzMyw3 ICszMzMsNyBAQCB2b2lkIEhUTUxEb2N1bWVudFBhcnNlcjo6cHVtcFRva2VuaXplcihTCiAgICAg aWYgKHNob3VsZFJlc3VtZSkKICAgICAgICAgbV9wYXJzZXJTY2hlZHVsZXItPnNjaGVkdWxlRm9y UmVzdW1lKCk7CiAKLSAgICBpZiAoaXNXYWl0aW5nRm9yU2NyaXB0cygpKSB7CisgICAgaWYgKGlz V2FpdGluZ0ZvclNjcmlwdHMoKSAmJiAhaXNEZXRhY2hlZCgpKSB7CiAgICAgICAgIEFTU0VSVCht X3Rva2VuaXplci5pc0luRGF0YVN0YXRlKCkpOwogICAgICAgICBpZiAoIW1fcHJlbG9hZFNjYW5u ZXIpIHsKICAgICAgICAgICAgIG1fcHJlbG9hZFNjYW5uZXIgPSBtYWtlVW5pcXVlPEhUTUxQcmVs b2FkU2Nhbm5lcj4obV9vcHRpb25zLCBkb2N1bWVudCgpLT51cmwoKSwgZG9jdW1lbnQoKS0+ZGV2 aWNlU2NhbGVGYWN0b3IoKSk7CkBAIC0zOTEsNyArMzkxLDcgQEAgdm9pZCBIVE1MRG9jdW1lbnRQ YXJzZXI6Omluc2VydChTZWdtZW50ZQogICAgIG1faW5wdXQuaW5zZXJ0QXRDdXJyZW50SW5zZXJ0 aW9uUG9pbnQoV1RGTW92ZShzb3VyY2UpKTsKICAgICBwdW1wVG9rZW5pemVySWZQb3NzaWJsZShG b3JjZVN5bmNocm9ub3VzKTsKIAotICAgIGlmIChpc1dhaXRpbmdGb3JTY3JpcHRzKCkpIHsKKyAg ICBpZiAoaXNXYWl0aW5nRm9yU2NyaXB0cygpICYmICFpc0RldGFjaGVkKCkpIHsKICAgICAgICAg Ly8gQ2hlY2sgdGhlIGRvY3VtZW50LndyaXRlKCkgb3V0cHV0IHdpdGggYSBzZXBhcmF0ZSBwcmVs b2FkIHNjYW5uZXIgYXMKICAgICAgICAgLy8gdGhlIG1haW4gc2Nhbm5lciBjYW4ndCBkZWFsIHdp dGggaW5zZXJ0aW9ucy4KICAgICAgICAgaWYgKCFtX2luc2VydGlvblByZWxvYWRTY2FubmVyKQo=