22630 2008-12-03 09:58:15 -0800 Assertion failure in XMLHttpRequest::contextDestroyed 2008-12-03 13:44:52 -0800 1 1 1 Unclassified WebKit Page Loading 528+ (Nightly build) All All RESOLVED FIXED InRadar P2 Normal --- 1 aroben ap ap oldest_to_newest 101216 0 aroben 2008-12-03 09:58:15 -0800 I don't yet know how to reproduce this, but here's the some information about the assertion I saw. Assertion: ASSERT(!m_loader); XMLHTTPRequest::m_url: http://www.google.com/reader/user-info?ck=1228326264938&client=scroll XMLHTTPRequest::m_lastSendURL: http://www.google.com/reader/ui/4201809102-en-scroll.js?hl=en Backtrace: WebKit_debug.dll!WebCore::XMLHttpRequest::contextDestroyed() Line 1431 + 0x31 bytes C++ > WebKit_debug.dll!WebCore::ScriptExecutionContext::~ScriptExecutionContext() Line 65 + 0x1c bytes C++ WebKit_debug.dll!WebCore::Document::~Document() Line 462 + 0x32a bytes C++ WebKit_debug.dll!WebCore::HTMLDocument::~HTMLDocument() Line 91 + 0x47 bytes C++ WebKit_debug.dll!WebCore::HTMLDocument::`scalar deleting destructor'() + 0x16 bytes C++ WebKit_debug.dll!WebCore::Document::selfOnlyDeref() Line 209 + 0x22 bytes C++ WebKit_debug.dll!WebCore::DocPtr<WebCore::Document>::~DocPtr<WebCore::Document>() Line 32 + 0x2d bytes C++ WebKit_debug.dll!WebCore::Node::~Node() Line 211 + 0x13 bytes C++ WebKit_debug.dll!WebCore::EventTargetNode::~EventTargetNode() Line 76 + 0x28 bytes C++ WebKit_debug.dll!WebCore::ContainerNode::~ContainerNode() Line 67 + 0x8 bytes C++ WebKit_debug.dll!WebCore::Element::~Element() Line 73 + 0x1e bytes C++ WebKit_debug.dll!WebCore::StyledElement::~StyledElement() Line 125 + 0x13 bytes C++ WebKit_debug.dll!WebCore::HTMLElement::~HTMLElement() Line 62 + 0x8 bytes C++ WebKit_debug.dll!WebCore::HTMLDivElement::~HTMLDivElement() Line 41 + 0x8 bytes C++ WebKit_debug.dll!WebCore::HTMLDivElement::`scalar deleting destructor'() + 0x16 bytes C++ WebKit_debug.dll!WebCore::TreeShared<WebCore::Node>::removedLastRef() Line 99 + 0x22 bytes C++ WebKit_debug.dll!WebCore::TreeShared<WebCore::Node>::deref() Line 69 + 0xf bytes C++ WebKit_debug.dll!WTF::RefPtr<WebCore::Node>::~RefPtr<WebCore::Node>() Line 50 + 0x2d bytes C++ WebKit_debug.dll!WebCore::JSNode::~JSNode() Line 192 + 0xb bytes C++ WebKit_debug.dll!WebCore::JSEventTargetNode::~JSEventTargetNode() + 0x16 bytes C++ WebKit_debug.dll!WebCore::JSElement::~JSElement() + 0x16 bytes C++ WebKit_debug.dll!WebCore::JSHTMLElement::~JSHTMLElement() + 0x16 bytes C++ WebKit_debug.dll!WebCore::JSHTMLDivElement::~JSHTMLDivElement() + 0x16 bytes C++ WebKit_debug.dll!WebCore::JSHTMLDivElement::`scalar deleting destructor'() + 0x16 bytes C++ WebKit_debug.dll!JSC::Heap::sweep<0>() Line 898 + 0x10 bytes C++ WebKit_debug.dll!JSC::Heap::collect() Line 997 + 0x8 bytes C++ WebKit_debug.dll!WebCore::GCController::gcTimerFired(WebCore::Timer<WebCore::GCController> * __formal=0x047fe168) Line 75 C++ WebKit_debug.dll!WebCore::Timer<WebCore::GCController>::fired() Line 99 + 0x23 bytes C++ WebKit_debug.dll!WebCore::TimerBase::fireTimers(double fireTime=1228326265.6454067, const WTF::Vector<WebCore::TimerBase *,0> & firingTimers=[3](0x0482c498 {m_nextFireTime=??? m_repeatInterval=??? m_heapIndex=??? ...},0x06b44230 {m_nextFireTime=??? m_repeatInterval=??? m_heapIndex=??? ...},0x047fe168 {m_nextFireTime=??? m_repeatInterval=??? m_heapIndex=??? ...})) Line 347 + 0xf bytes C++ WebKit_debug.dll!WebCore::TimerBase::sharedTimerFired() Line 368 + 0x12 bytes C++ WebKit_debug.dll!WebCore::TimerWindowWndProc(HWND__ * hWnd=0x00040a1c, unsigned int message=49540, unsigned int wParam=0, long lParam=0) Line 102 + 0x8 bytes C++ 101217 1 aroben 2008-12-03 10:00:48 -0800 Also, XMLHttpRequest::m_loader->m_frame is null 101225 2 25716 ap 2008-12-03 11:00:36 -0800 Created attachment 25716 reduced test case (will crash) 101228 3 aroben 2008-12-03 11:23:59 -0800 <rdar://problem/6415475> 101250 4 25720 ap 2008-12-03 13:06:44 -0800 Created attachment 25720 proposed fix 101254 5 25720 darin 2008-12-03 13:34:38 -0800 Comment on attachment 25720 proposed fix r=me 101257 6 ap 2008-12-03 13:44:52 -0800 Committed revision 38962. 25716 2008-12-03 11:00:36 -0800 2008-12-03 11:00:36 -0800 reduced test case (will crash) xhr-stop.html text/html 118 ap PHNjcmlwdD4KdmFyIHhociA9IG5ldyBYTUxIdHRwUmVxdWVzdDsKeGhyLm9wZW4oIkdFVCIsICJo dHRwOi8vd3d3LmFwcGxlLmNvbSIpOwp4aHIuc2VuZCgpOwp3aW5kb3cuY2xvc2UoKTsKPC9zY3Jp cHQ+Cg== 25720 2008-12-03 13:06:44 -0800 2008-12-03 13:34:38 -0800 proposed fix XHRvsClosedWindow.txt text/plain 5958 ap SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvQ2hhbmdlTG9n CShyZXZpc2lvbiAzODk1OSkKKysrIFdlYkNvcmUvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA IC0xLDMgKzEsMjAgQEAKKzIwMDgtMTItMDMgIEFsZXhleSBQcm9za3VyeWFrb3YgIDxhcEB3ZWJr aXQub3JnPgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAg IGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yMjYzMAorICAgICAgICBB c3NlcnRpb24gZmFpbHVyZSBpbiBYTUxIdHRwUmVxdWVzdDo6Y29udGV4dERlc3Ryb3llZAorCisg ICAgICAgIFRlc3Q6IGh0dHAvdGVzdHMveG1saHR0cHJlcXVlc3QvY2xvc2Utd2luZG93Lmh0bWwK KworICAgICAgICAqIGxvYWRlci9GcmFtZUxvYWRlci5jcHA6CisgICAgICAgIChXZWJDb3JlOjpG cmFtZUxvYWRlcjo6Y2xlYXIpOgorICAgICAgICAoV2ViQ29yZTo6RnJhbWVMb2FkZXI6OmNvbW1p dFByb3Zpc2lvbmFsTG9hZCk6CisgICAgICAgIE1vdmUgc3RvcHBpbmcgYWN0aXZlIG9iamVjdHMg dG8gY2xlYXIoKSwgc28gdGhhdCBjbG9zaW5nIGEgd2luZG93IGlzIGFsc28gY292ZXJlZC4KKwor ICAgICAgICAqIHhtbC9YTUxIdHRwUmVxdWVzdC5jcHA6IChXZWJDb3JlOjpYTUxIdHRwUmVxdWVz dDo6YWJvcnQpOiBQcm90ZWN0IHRoZSBvYmplY3QgaW4gYWJvcnQoKSwKKyAgICAgICAgYmVjYXVz ZSBpbnRlcm5hbEFib3J0KCkgZGVyZWYoKSdzLgorCiAyMDA4LTEyLTAzICBEZWFuIEphY2tzb24g IDxkaW5vQGFwcGxlLmNvbT4KIAogICAgICAgICBSZXZpZXdlZCBieSBEYW4gQmVybnN0ZWluLgpJ bmRleDogV2ViQ29yZS9sb2FkZXIvRnJhbWVMb2FkZXIuY3BwCj09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNv cmUvbG9hZGVyL0ZyYW1lTG9hZGVyLmNwcAkocmV2aXNpb24gMzg5NDIpCisrKyBXZWJDb3JlL2xv YWRlci9GcmFtZUxvYWRlci5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTgxNiw2ICs4MTYsNyBAQCB2 b2lkIEZyYW1lTG9hZGVyOjpjbGVhcihib29sIGNsZWFyV2luZG93CiAgICAgCiAgICAgaWYgKG1f ZnJhbWUtPmRvY3VtZW50KCkgJiYgIW1fZnJhbWUtPmRvY3VtZW50KCktPmluUGFnZUNhY2hlKCkp IHsKICAgICAgICAgbV9mcmFtZS0+ZG9jdW1lbnQoKS0+Y2FuY2VsUGFyc2luZygpOworICAgICAg ICBtX2ZyYW1lLT5kb2N1bWVudCgpLT5zdG9wQWN0aXZlRE9NT2JqZWN0cygpOwogICAgICAgICBp ZiAobV9mcmFtZS0+ZG9jdW1lbnQoKS0+YXR0YWNoZWQoKSkgewogICAgICAgICAgICAgbV9mcmFt ZS0+ZG9jdW1lbnQoKS0+d2lsbFJlbW92ZSgpOwogICAgICAgICAgICAgbV9mcmFtZS0+ZG9jdW1l bnQoKS0+ZGV0YWNoKCk7CkBAIC0yNjk1LDEzICsyNjk2LDExIEBAIHZvaWQgRnJhbWVMb2FkZXI6 OmNvbW1pdFByb3Zpc2lvbmFsTG9hZCgKICAgICAgICAgICAgIC8vIGl0IGNvdWxkIHNvbWV0aW1l cyBmaXJlIHdoZW4gdHJhbnNpdGlvbmluZyB0byBhIG5vbi1IVE1MIGRvY3VtZW50IHJlcHJlc2Vu dGF0aW9uIChzdWNoIGFzIHRoZSBNYWMgYm9va21hcmtzIHZpZXcpLgogICAgICAgICAgICAgLy8g VG8gYXZvaWQgdGhpcywgd2UgY2xlYXIgYWxsIHRpbWVvdXRzIGlmIHRoZSBwYWdlIGlzIG5vdCB0 byBiZSBjYWNoZWQgaW4gdGhlIGJhY2sgZm9yd2FyZCBsaXN0LgogICAgICAgICAgICAgLy8gQ2Fj aGVkIHBhZ2VzIGhhdmUgdGhlaXIgdGltZXJzIHBhdXNlZCBzbyB0aGV5IGFyZSBmaW5lLgorICAg ICAgICAgICAgLy8gRklYTUU6IEludGVncmF0ZSBjbGVhcmluZyB0aW1lb3V0cyBpbnRvIHN0b3BB Y3RpdmVET01PYmplY3RzKCkuCiAgICAgICAgICAgICBTY3JpcHRDb250cm9sbGVyKiBwcm94eSA9 IG1fZnJhbWUtPnNjcmlwdCgpOwogICAgICAgICAgICAgaWYgKHByb3h5LT5oYXZlV2luZG93U2hl bGwoKSkKICAgICAgICAgICAgICAgICBwcm94eS0+d2luZG93U2hlbGwoKS0+d2luZG93KCktPmNs ZWFyQWxsVGltZW91dHMoKTsKICAgICAgICAgfQotICAgICAgICAvLyBGSVhNRTogSW50ZWdyYXRl IGNsZWFyaW5nIHRpbWVvdXRzIGludG8gc3RvcEFjdGl2ZURPTU9iamVjdHMoKS4KLSAgICAgICAg aWYgKERvY3VtZW50KiBkb2N1bWVudCA9IG1fZnJhbWUtPmRvY3VtZW50KCkpCi0gICAgICAgICAg ICBkb2N1bWVudC0+c3RvcEFjdGl2ZURPTU9iamVjdHMoKTsKICAgICB9CiAgICAgCiAgICAgaWYg KG1fbG9hZFR5cGUgIT0gRnJhbWVMb2FkVHlwZVJlcGxhY2UpCkluZGV4OiBXZWJDb3JlL3htbC9Y TUxIdHRwUmVxdWVzdC5jcHAKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gV2ViQ29yZS94bWwvWE1MSHR0cFJlcXVl c3QuY3BwCShyZXZpc2lvbiAzODk0MikKKysrIFdlYkNvcmUveG1sL1hNTEh0dHBSZXF1ZXN0LmNw cAkod29ya2luZyBjb3B5KQpAQCAtODUxLDYgKzg1MSw5IEBAIHZvaWQgWE1MSHR0cFJlcXVlc3Q6 OmxvYWRSZXF1ZXN0QXN5bmNocm8KIAogdm9pZCBYTUxIdHRwUmVxdWVzdDo6YWJvcnQoKQogewor ICAgIC8vIGludGVybmFsQWJvcnQoKSBjYWxscyBkcm9wUHJvdGVjdGlvbigpLCB3aGljaCBtYXkg cmVsZWFzZSB0aGUgbGFzdCByZWZlcmVuY2UuCisgICAgUmVmUHRyPFhNTEh0dHBSZXF1ZXN0PiBw cm90ZWN0KHRoaXMpOworCiAgICAgYm9vbCBzZW5kRmxhZyA9IG1fbG9hZGVyOwogCiAgICAgaW50 ZXJuYWxBYm9ydCgpOwpJbmRleDogTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCj09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0t IExheW91dFRlc3RzL0NoYW5nZUxvZwkocmV2aXNpb24gMzg5NTkpCisrKyBMYXlvdXRUZXN0cy9D aGFuZ2VMb2cJKHdvcmtpbmcgY29weSkKQEAgLTEsMyArMSwxNCBAQAorMjAwOC0xMi0wMyAgQWxl eGV5IFByb3NrdXJ5YWtvdiAgPGFwQHdlYmtpdC5vcmc+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkg Tk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19i dWcuY2dpP2lkPTIyNjMwCisgICAgICAgIEFzc2VydGlvbiBmYWlsdXJlIGluIFhNTEh0dHBSZXF1 ZXN0Ojpjb250ZXh0RGVzdHJveWVkCisKKyAgICAgICAgKiBodHRwL3Rlc3RzL3htbGh0dHByZXF1 ZXN0L2Nsb3NlLXdpbmRvdy1leHBlY3RlZC50eHQ6IEFkZGVkLgorICAgICAgICAqIGh0dHAvdGVz dHMveG1saHR0cHJlcXVlc3QvY2xvc2Utd2luZG93Lmh0bWw6IEFkZGVkLgorICAgICAgICAqIGh0 dHAvdGVzdHMveG1saHR0cHJlcXVlc3QvcmVzb3VyY2VzL2Nsb3NlLXdpbmRvdy1mcmFtZS5odG1s OiBBZGRlZC4KKwogMjAwOC0xMi0wMyAgRGVhbiBKYWNrc29uICA8ZGlub0BhcHBsZS5jb20+CiAK ICAgICAgICAgUmV2aWV3ZWQgYnkgRGFuIEJlcm5zdGVpbi4KSW5kZXg6IExheW91dFRlc3RzL2h0 dHAvdGVzdHMveG1saHR0cHJlcXVlc3QvY2xvc2Utd2luZG93LWV4cGVjdGVkLnR4dAo9PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09Ci0tLSBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3htbGh0dHByZXF1ZXN0L2Nsb3NlLXdpbmRv dy1leHBlY3RlZC50eHQJKHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3ht bGh0dHByZXF1ZXN0L2Nsb3NlLXdpbmRvdy1leHBlY3RlZC50eHQJKHJldmlzaW9uIDApCkBAIC0w LDAgKzEsMyBAQAorVGVzdCBmb3IgYnVnIDIyNjMwOiBBc3NlcnRpb24gZmFpbHVyZSBpbiBYTUxI dHRwUmVxdWVzdDo6Y29udGV4dERlc3Ryb3llZC4KKworU1VDQ0VTUyEgRGlkIG5vdCBhc3NlcnQh CgpQcm9wZXJ0eSBjaGFuZ2VzIG9uOiBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3htbGh0dHByZXF1 ZXN0L2Nsb3NlLXdpbmRvdy1leHBlY3RlZC50eHQKX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpOYW1lOiBzdm46bWltZS10 eXBlCiAgICsgdGV4dC9wbGFpbgpOYW1lOiBzdm46ZW9sLXN0eWxlCiAgICsgbmF0aXZlCgpJbmRl eDogTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy94bWxodHRwcmVxdWVzdC9jbG9zZS13aW5kb3cuaHRt bAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3htbGh0dHByZXF1ZXN0L2Ns b3NlLXdpbmRvdy5odG1sCShyZXZpc2lvbiAwKQorKysgTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy94 bWxodHRwcmVxdWVzdC9jbG9zZS13aW5kb3cuaHRtbAkocmV2aXNpb24gMCkKQEAgLTAsMCArMSwx OCBAQAorPGh0bWw+Cis8c2NyaXB0PgoraWYgKHdpbmRvdy5sYXlvdXRUZXN0Q29udHJvbGxlcikg eworICAgIGxheW91dFRlc3RDb250cm9sbGVyLndhaXRVbnRpbERvbmUoKTsKKyAgICBsYXlvdXRU ZXN0Q29udHJvbGxlci5zZXRDYW5PcGVuV2luZG93cygpOworICAgIGxheW91dFRlc3RDb250cm9s bGVyLmR1bXBBc1RleHQoKTsKK30KKworZnVuY3Rpb24gcnVuVGVzdCgpIHsKKyAgICB2YXIgdyA9 IHdpbmRvdy5vcGVuKCdyZXNvdXJjZXMvY2xvc2Utd2luZG93LWZyYW1lLmh0bWwnKTsKK30KKzwv c2NyaXB0PgorPGJvZHkgb25sb2FkPSJydW5UZXN0KCk7Ij4KKzxwPlRlc3QgZm9yIDxhIGhyZWY9 Imh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yMjYzMCI+YnVnIDIyNjMw PGEvPjoKK0Fzc2VydGlvbiBmYWlsdXJlIGluIFhNTEh0dHBSZXF1ZXN0Ojpjb250ZXh0RGVzdHJv eWVkLgorPHA+U1VDQ0VTUyEgRGlkIG5vdCBhc3NlcnQhPC9wPgorPC9ib2R5PgorPC9odG1sPgoK UHJvcGVydHkgY2hhbmdlcyBvbjogTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy94bWxodHRwcmVxdWVz dC9jbG9zZS13aW5kb3cuaHRtbApfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCk5hbWU6IHN2bjptaW1lLXR5cGUKICAgKyB0 ZXh0L2h0bWwKCkluZGV4OiBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3htbGh0dHByZXF1ZXN0L3Jl c291cmNlcy9jbG9zZS13aW5kb3ctZnJhbWUuaHRtbAo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0 cy9odHRwL3Rlc3RzL3htbGh0dHByZXF1ZXN0L3Jlc291cmNlcy9jbG9zZS13aW5kb3ctZnJhbWUu aHRtbAkocmV2aXNpb24gMCkKKysrIExheW91dFRlc3RzL2h0dHAvdGVzdHMveG1saHR0cHJlcXVl c3QvcmVzb3VyY2VzL2Nsb3NlLXdpbmRvdy1mcmFtZS5odG1sCShyZXZpc2lvbiAwKQpAQCAtMCww ICsxLDcgQEAKKzxzY3JpcHQ+Cit2YXIgeGhyID0gbmV3IFhNTEh0dHBSZXF1ZXN0OworeGhyLm9w ZW4oIkdFVCIsIGxvY2F0aW9uLmhyZWYgKyAiPyIpOworeGhyLnNlbmQoKTsKK3dpbmRvdy5jbG9z ZSgpOword2luZG93Lm9wZW5lci5zZXRUaW1lb3V0KCJpZiAod2luZG93LmxheW91dFRlc3RDb250 cm9sbGVyKSBsYXlvdXRUZXN0Q29udHJvbGxlci5ub3RpZnlEb25lKCkiLCAxMCk7Cis8L3Njcmlw dD4KClByb3BlcnR5IGNoYW5nZXMgb246IExheW91dFRlc3RzL2h0dHAvdGVzdHMveG1saHR0cHJl cXVlc3QvcmVzb3VyY2VzL2Nsb3NlLXdpbmRvdy1mcmFtZS5odG1sCl9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KTmFtZTog c3ZuOm1pbWUtdHlwZQogICArIHRleHQvaHRtbAoK