<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>24067</bug_id>
          
          <creation_ts>2009-02-20 15:00:36 -0800</creation_ts>
          <short_desc>REGRESSION: Crash in WebCore::Document::initSecurityContext</short_desc>
          <delta_ts>2009-02-25 09:01:39 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Page Loading</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>Regression</keywords>
          <priority>P1</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Holger Freyther">zecke</reporter>
          <assigned_to name="Alexey Proskuryakov">ap</assigned_to>
          <cc>abarth</cc>
    
    <cc>ap</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>110437</commentid>
    <comment_count>0</comment_count>
    <who name="Holger Freyther">zecke</who>
    <bug_when>2009-02-20 15:00:36 -0800</bug_when>
    <thetext>A slightly modified test of fast/dom/Window/window-open-self.html is crashing. I&apos;m 99% confident that this regression was introduced by r40824. This is crashing mac, Qt and Gtk.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>110439</commentid>
    <comment_count>1</comment_count>
    <who name="Holger Freyther">zecke</who>
    <bug_when>2009-02-20 15:02:51 -0800</bug_when>
    <thetext>This was uncovered because the Gtk+ DumpRenderTree is loading about:blank after each test. It might be more easy to apply this by hand than applying a patch.

diff --git a/LayoutTests/fast/dom/Window/resources/destination.html b/LayoutTests/fast/dom/Window/resources/destination.html
index 33d0269..4e9064e 100644
--- a/LayoutTests/fast/dom/Window/resources/destination.html
+++ b/LayoutTests/fast/dom/Window/resources/destination.html
@@ -1,2 +1,2 @@
 &lt;p&gt;Hooray, you got here! That means the test succeeded!&lt;/p&gt;
-&lt;script&gt;if (window.layoutTestController) layoutTestController.notifyDone();&lt;/script&gt;
+&lt;script&gt;window.open(&quot;about:blank&quot;, &quot;_self&quot;);&lt;/script&gt;
</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>110440</commentid>
    <comment_count>2</comment_count>
    <who name="Holger Freyther">zecke</who>
    <bug_when>2009-02-20 15:03:39 -0800</bug_when>
    <thetext>Backtrace (inline to ease searching):

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb577a700 (LWP 1335)]
0xb76e0336 in WebCore::Document::initSecurityContext () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
Current language:  auto; currently c++
(gdb) bt
#0  0xb76e0336 in WebCore::Document::initSecurityContext () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#1  0xb76e2d56 in WebCore::Document::Document () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#2  0xb77c48b4 in WebCore::HTMLDocument::HTMLDocument () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#3  0xb76d756f in WebCore::DOMImplementation::createDocument () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#4  0xb785556d in WebCore::FrameLoader::begin () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#5  0xb785cebc in WebCore::FrameLoader::receivedFirstData () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#6  0xb785d29e in WebCore::FrameLoader::setEncoding () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#7  0xb75f9b25 in WebKit::FrameLoaderClient::committedLoad () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#8  0xb75f7cc2 in WebKit::FrameLoaderClient::finishedLoading () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#9  0xb785f558 in WebCore::FrameLoader::finishedLoadingDocument () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#10 0xb783d6d6 in WebCore::DocumentLoader::finishedLoading () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#11 0xb7852693 in WebCore::FrameLoader::finishedLoading () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#12 0xb7864a50 in WebCore::MainResourceLoader::didFinishLoading () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#13 0xb7866dd6 in WebCore::MainResourceLoader::continueAfterContentPolicy () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#14 0xb786705e in WebCore::MainResourceLoader::continueAfterContentPolicy () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#15 0xb7852d45 in WebCore::FrameLoader::continueAfterContentPolicy () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#16 0xb7602a6e in webkit_web_policy_decision_use () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#17 0xb75fa990 in WebKit::FrameLoaderClient::dispatchDecidePolicyForMIMEType () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#18 0xb785198c in WebCore::FrameLoader::checkContentPolicy () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#19 0xb78658c7 in WebCore::MainResourceLoader::didReceiveResponse () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#20 0xb7864eeb in WebCore::MainResourceLoader::handleEmptyLoad () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#21 0xb7866a13 in WebCore::MainResourceLoader::loadNow () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#22 0xb7867f6e in WebCore::MainResourceLoader::load () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#23 0xb783e56e in WebCore::DocumentLoader::startLoadingMainResource () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#24 0xb784ba04 in WebCore::FrameLoader::continueLoadAfterWillSubmitForm () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#25 0xb78529e8 in WebCore::FrameLoader::continueLoadAfterNavigationPolicy () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#26 0xb7852a25 in WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#27 0xb784f118 in WebCore::PolicyCheck::call () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#28 0xb7852b8e in WebCore::FrameLoader::continueAfterNavigationPolicy () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#29 0xb7602a6e in webkit_web_policy_decision_use () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#30 0xb75fad1e in WebKit::FrameLoaderClient::dispatchDecidePolicyForNavigationAction () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#31 0xb78507bf in WebCore::FrameLoader::checkNavigationPolicy () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#32 0xb7851ed4 in WebCore::FrameLoader::loadWithDocumentLoader () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#33 0xb7856737 in WebCore::FrameLoader::loadWithNavigationAction () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#34 0xb7856b7d in WebCore::FrameLoader::loadURL () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#35 0xb7856cd8 in WebCore::FrameLoader::loadURL () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#36 0xb785930b in WebCore::FrameLoader::loadFrameRequestWithFormAndValues () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#37 0xb785a4a0 in WebCore::FrameLoader::urlSelected () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#38 0xb785a5ef in WebCore::FrameLoader::urlSelected () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#39 0xb785a8f0 in WebCore::FrameLoader::changeLocation () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#40 0xb785a9d5 in WebCore::FrameLoader::changeLocation () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#41 0xb785aa90 in WebCore::FrameLoader::redirectionTimerFired () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#42 0xb78608d1 in WebCore::Timer&lt;WebCore::FrameLoader&gt;::fired () from /home/ich/source/apple/WebKit-tt.git/WebKitBuild/Release/.libs/libwebkit-1.0.so.1
#43 0xb78f2caa in WebCore::ThreadTimers::fireTimers (this=0xb568b410, fireTime=1235170297.4847701, firingTimers=@0xbf88a39c) at ../../WebCore/platform/ThreadTimers.cpp:111
#44 0xb78f2d57 in WebCore::ThreadTimers::sharedTimerFiredInternal (this=0xb568b410) at ../../WebCore/platform/ThreadTimers.cpp:141
#45 0xb78f2de2 in WebCore::ThreadTimers::sharedTimerFired () at ../../WebCore/platform/ThreadTimers.cpp:122
</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>110471</commentid>
    <comment_count>3</comment_count>
      <attachid>27852</attachid>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2009-02-21 05:17:56 -0800</bug_when>
    <thetext>Created attachment 27852
test case (crash)

There are two ways to fix this bug:
1) Restore the null check in Document::initSecurityContext().
2) Change FrameLoader::begin() to create a new document before detaching the old one.

The former will just restore the old behavior, but the latter might be more correct, because the below code from initSecurityContext would run. I don&apos;t know how to test for security context aliasing to find out what Firefox does in this particular case.

    if (ownerFrame) {
        m_cookieURL = ownerFrame-&gt;document()-&gt;cookieURL();
        // We alias the SecurityOrigins to match Firefox, see Bug 15313
        // https://bugs.webkit.org/show_bug.cgi?id=15313
        ScriptExecutionContext::setSecurityOrigin(ownerFrame-&gt;document()-&gt;securityOrigin());
    }</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>110534</commentid>
    <comment_count>4</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2009-02-22 23:02:22 -0800</bug_when>
    <thetext>(In reply to comment #3)
&gt; I don&apos;t know how to test for security context aliasing
&gt; to find out what Firefox does in this particular case.

You can test for the aliasing by setting document.domain in one frame and seeing if the document.domain value changes in the other frame.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>110631</commentid>
    <comment_count>5</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2009-02-23 13:50:36 -0800</bug_when>
    <thetext>&gt; You can test for the aliasing by setting document.domain in one frame and
&gt; seeing if the document.domain value changes in the other frame.

I guess it doesn&apos;t matter then, as it&apos;s the same frame (opening _self just replaces content).</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>110633</commentid>
    <comment_count>6</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2009-02-23 13:53:59 -0800</bug_when>
    <thetext>(In reply to comment #5)
&gt; I guess it doesn&apos;t matter then, as it&apos;s the same frame (opening _self just
&gt; replaces content).

It matters if the first frame has a security context that is already aliased to another frame.  :)
</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>110719</commentid>
    <comment_count>7</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2009-02-24 03:43:31 -0800</bug_when>
    <thetext>Tricky! Firefox inherits aliasing in this case, but WebKit did not. So, removing this null check helped to uncover a bug.

Running tests now to check that moving document construction doesn&apos;t break anything else.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>110728</commentid>
    <comment_count>8</comment_count>
      <attachid>27915</attachid>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2009-02-24 05:25:27 -0800</bug_when>
    <thetext>Created attachment 27915
proposed fix</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>110752</commentid>
    <comment_count>9</comment_count>
      <attachid>27915</attachid>
    <who name="Darin Adler">darin</who>
    <bug_when>2009-02-24 09:37:05 -0800</bug_when>
    <thetext>Comment on attachment 27915
proposed fix

r=me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>110768</commentid>
    <comment_count>10</comment_count>
    <who name="Holger Freyther">zecke</who>
    <bug_when>2009-02-24 10:56:04 -0800</bug_when>
    <thetext>wow!</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>110966</commentid>
    <comment_count>11</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2009-02-25 09:01:39 -0800</bug_when>
    <thetext>Committed revision 41213.

</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>27852</attachid>
            <date>2009-02-21 05:17:56 -0800</date>
            <delta_ts>2009-02-21 05:30:36 -0800</delta_ts>
            <desc>test case (crash)</desc>
            <filename>window-open-self-about-blank.html</filename>
            <type>text/html</type>
            <size>409</size>
            <attacher name="Alexey Proskuryakov">ap</attacher>
            
              <data encoding="base64">PHNjcmlwdD4KaWYgKHdpbmRvdy5sYXlvdXRUZXN0Q29udHJvbGxlcikgewogICAgbGF5b3V0VGVz
dENvbnRyb2xsZXIuZHVtcEFzVGV4dCgpOwogICAgbGF5b3V0VGVzdENvbnRyb2xsZXIud2FpdFVu
dGlsRG9uZSgpOwogICAgbGF5b3V0VGVzdENvbnRyb2xsZXIuc2V0Q2FuT3BlbldpbmRvd3MoKTsK
ICAgIHdpbmRvdy5vcGVuKCJkYXRhOnRleHQvaHRtbCw8c2NyaXB0PnNldFRpbWVvdXQoJ2xheW91
dFRlc3RDb250cm9sbGVyLm5vdGlmeURvbmUoKScsIDIwMCk8L3NjciIgKyAiaXB0PiIpOwp9IGVs
c2UKICAgIGFsZXJ0KCJUaGlzIHRlc3Qgc2hvdWxkIHJlZGlyZWN0IHRvIGFib3V0OmJsYW5rIHdp
dGhvdXQgY3Jhc2hpbmcuIik7Cgp3aW5kb3cub3BlbigiYWJvdXQ6YmxhbmsiLCAiX3NlbGYiKTsK
PC9zY3JpcHQ+Cg==
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>27915</attachid>
            <date>2009-02-24 05:25:27 -0800</date>
            <delta_ts>2009-02-24 09:37:05 -0800</delta_ts>
            <desc>proposed fix</desc>
            <filename>AboutBlankSecurityOrigin.txt</filename>
            <type>text/plain</type>
            <size>5406</size>
            <attacher name="Alexey Proskuryakov">ap</attacher>
            
              <data encoding="base64">SW5kZXg6IFdlYkNvcmUvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvQ2hhbmdlTG9n
CShyZXZpc2lvbiA0MTE3NikKKysrIFdlYkNvcmUvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBA
IC0xLDMgKzEsMjIgQEAKKzIwMDktMDItMjQgIEFsZXhleSBQcm9za3VyeWFrb3YgIDxhcEB3ZWJr
aXQub3JnPgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAg
IGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yNDA2NworICAgICAgICBS
RUdSRVNTSU9OOiBDcmFzaCBpbiBXZWJDb3JlOjpEb2N1bWVudDo6aW5pdFNlY3VyaXR5Q29udGV4
dAorCisgICAgICAgIFRoZSBjcmFzaCBzdGFydGVkIHRvIGhhcHBlbiB3aGVuIHdlIHJlbW92ZWQg
YSBjaGVjayBmb3IgZnJhbWUtPmRvY3VtZW50KCkgYmVpbmcgbnVsbC4KKyAgICAgICAgSG93ZXZl
ciwgdGhlIG9yaWdpbmFsIGRvY3VtZW50IHNob3VsZG4ndCBiZSBudWxsIGhlcmUsIGJlY2F1c2Ug
aXQgaXMgbmVlZGVkIHRvIGFsaWFzCisgICAgICAgIHNlY3VyaXR5IG9yaWdpbnMuIFNvLCB0aGlz
IHBhdGNoIGZpeGVzIHRoZSBjcmFzaCBieSBjb3JyZWN0aW5nIHNlY3VyaXR5IG9yaWdpbiBiZWhh
dmlvci4KKworICAgICAgICBUZXN0OiBodHRwL3Rlc3RzL3NlY3VyaXR5L2Fib3V0Qmxhbmsvd2lu
ZG93LW9wZW4tc2VsZi1hYm91dC1ibGFuay5odG1sCisgICAgICAgIFRoaXMgdGVzdHMgZm9yIG5v
dCBjcmFzaGluZywgYW5kIGZvciBpbmhlcml0aW5nIHRoZSBkb21haW4gZnJvbSB0aGUgZG9jdW1l
bnQgYmVpbmcgcmVwbGFjZWQuCisgICAgICAgIFByZXNlcnZpbmcgdGhlIGFsaWFzaW5nIGNhbm5v
dCBiZSB0ZXN0ZWQgZm9yIGF1dG9tYXRpY2FsbHksIGJlY2F1c2Ugd2UnZCBuZWVkIGEgbm9uLXRy
aXZpYWwKKyAgICAgICAgZG9tYWluIHRvIHJlbW92ZSBhIHByZWZpeCBmcm9tLgorCisgICAgICAg
ICogbG9hZGVyL0ZyYW1lTG9hZGVyLmNwcDogKFdlYkNvcmU6OkZyYW1lTG9hZGVyOjpiZWdpbik6
IENyZWF0ZSBhIG5ldyBkb2N1bWVudCBiZWZvcmUKKyAgICAgICAgY2xlYXJpbmcgdGhlIGZyYW1l
LCBzbyB0aGF0IERvY3VtZW50Ojppbml0U2VjdXJpdHlDb250ZXh0KCkgY291bGQgYWNjZXNzIHRo
ZSBvbGQgb25lLgorCiAyMDA5LTAyLTI0ICBKaWFuIExpICA8amlhbmxpQGNocm9taXVtLm9yZz4K
IAogICAgICAgICBSZXZpZXdlZCBieSBBbGV4ZXkgUHJvc2t1cnlha292LgpJbmRleDogV2ViQ29y
ZS9sb2FkZXIvRnJhbWVMb2FkZXIuY3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFdlYkNvcmUvbG9hZGVyL0Zy
YW1lTG9hZGVyLmNwcAkocmV2aXNpb24gNDExNzApCisrKyBXZWJDb3JlL2xvYWRlci9GcmFtZUxv
YWRlci5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTkwNSw2ICs5MDUsMTQgQEAgdm9pZCBGcmFtZUxv
YWRlcjo6YmVnaW4oY29uc3QgS1VSTCYgdXJsLAogICAgIC8vIG1pZ2h0IGRlc3Ryb3kgdGhlIGRv
Y3VtZW50IHRoYXQgb3ducyBpdC4KICAgICBSZWZQdHI8U2VjdXJpdHlPcmlnaW4+IGZvcmNlZFNl
Y3VyaXR5T3JpZ2luID0gb3JpZ2luOwogCisgICAgUmVmUHRyPERvY3VtZW50PiBkb2N1bWVudDsK
KworICAgIC8vIENyZWF0ZSBhIG5ldyBkb2N1bWVudCBiZWZvcmUgY2xlYXJpbmcgdGhlIGZyYW1l
LCBiZWNhdXNlIGl0IG1heSBuZWVkIHRvIGluaGVyaXQgYW4gYWxpYXNlZCBzZWN1cml0eSBjb250
ZXh0LgorICAgIGlmICghbV9pc0Rpc3BsYXlpbmdJbml0aWFsRW1wdHlEb2N1bWVudCAmJiBtX2Ns
aWVudC0+c2hvdWxkVXNlUGx1Z2luRG9jdW1lbnQobV9yZXNwb25zZU1JTUVUeXBlKSkKKyAgICAg
ICAgZG9jdW1lbnQgPSBQbHVnaW5Eb2N1bWVudDo6Y3JlYXRlKG1fZnJhbWUpOworICAgIGVsc2UK
KyAgICAgICAgZG9jdW1lbnQgPSBET01JbXBsZW1lbnRhdGlvbjo6Y3JlYXRlRG9jdW1lbnQobV9y
ZXNwb25zZU1JTUVUeXBlLCBtX2ZyYW1lLCBtX2ZyYW1lLT5pblZpZXdTb3VyY2VNb2RlKCkpOwor
CiAgICAgYm9vbCByZXNldFNjcmlwdGluZyA9ICEobV9pc0Rpc3BsYXlpbmdJbml0aWFsRW1wdHlE
b2N1bWVudCAmJiBtX2ZyYW1lLT5kb2N1bWVudCgpLT5zZWN1cml0eU9yaWdpbigpLT5pc1NlY3Vy
ZVRyYW5zaXRpb25Ubyh1cmwpKTsKICAgICBjbGVhcihyZXNldFNjcmlwdGluZywgcmVzZXRTY3Jp
cHRpbmcpOwogICAgIGlmIChyZXNldFNjcmlwdGluZykKQEAgLTkyMywxMiArOTMxLDYgQEAgdm9p
ZCBGcmFtZUxvYWRlcjo6YmVnaW4oY29uc3QgS1VSTCYgdXJsLAogICAgIG1fb3V0Z29pbmdSZWZl
cnJlciA9IHJlZi5zdHJpbmcoKTsKICAgICBtX1VSTCA9IHVybDsKIAotICAgIFJlZlB0cjxEb2N1
bWVudD4gZG9jdW1lbnQ7Ci0gICAgCi0gICAgaWYgKCFtX2lzRGlzcGxheWluZ0luaXRpYWxFbXB0
eURvY3VtZW50ICYmIG1fY2xpZW50LT5zaG91bGRVc2VQbHVnaW5Eb2N1bWVudChtX3Jlc3BvbnNl
TUlNRVR5cGUpKQotICAgICAgICBkb2N1bWVudCA9IFBsdWdpbkRvY3VtZW50OjpjcmVhdGUobV9m
cmFtZSk7Ci0gICAgZWxzZQotICAgICAgICBkb2N1bWVudCA9IERPTUltcGxlbWVudGF0aW9uOjpj
cmVhdGVEb2N1bWVudChtX3Jlc3BvbnNlTUlNRVR5cGUsIG1fZnJhbWUsIG1fZnJhbWUtPmluVmll
d1NvdXJjZU1vZGUoKSk7CiAgICAgbV9mcmFtZS0+c2V0RG9jdW1lbnQoZG9jdW1lbnQpOwogCiAg
ICAgaWYgKGRpc3BhdGNoKQpJbmRleDogTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCj09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0K
LS0tIExheW91dFRlc3RzL0NoYW5nZUxvZwkocmV2aXNpb24gNDExNzYpCisrKyBMYXlvdXRUZXN0
cy9DaGFuZ2VMb2cJKHdvcmtpbmcgY29weSkKQEAgLTEsMyArMSwxMyBAQAorMjAwOS0wMi0yNCAg
QWxleGV5IFByb3NrdXJ5YWtvdiAgPGFwQHdlYmtpdC5vcmc+CisKKyAgICAgICAgUmV2aWV3ZWQg
YnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hv
d19idWcuY2dpP2lkPTI0MDY3CisgICAgICAgIFJFR1JFU1NJT046IENyYXNoIGluIFdlYkNvcmU6
OkRvY3VtZW50Ojppbml0U2VjdXJpdHlDb250ZXh0CisKKyAgICAgICAgKiBodHRwL3Rlc3RzL3Nl
Y3VyaXR5L2Fib3V0Qmxhbmsvd2luZG93LW9wZW4tc2VsZi1hYm91dC1ibGFuay1leHBlY3RlZC50
eHQ6IEFkZGVkLgorICAgICAgICAqIGh0dHAvdGVzdHMvc2VjdXJpdHkvYWJvdXRCbGFuay93aW5k
b3ctb3Blbi1zZWxmLWFib3V0LWJsYW5rLmh0bWw6IEFkZGVkLgorCiAyMDA5LTAyLTI0ICBBbGV4
ZXkgUHJvc2t1cnlha292ICA8YXBAd2Via2l0Lm9yZz4KIAogICAgICAgICBSZXZpZXdlZCBieSBN
YXJrIFJvd2UgKCJhd2Vzb21lISIpLgpJbmRleDogTGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1
cml0eS9hYm91dEJsYW5rL3dpbmRvdy1vcGVuLXNlbGYtYWJvdXQtYmxhbmstZXhwZWN0ZWQudHh0
Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkvYWJvdXRCbGFu
ay93aW5kb3ctb3Blbi1zZWxmLWFib3V0LWJsYW5rLWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMCkK
KysrIExheW91dFRlc3RzL2h0dHAvdGVzdHMvc2VjdXJpdHkvYWJvdXRCbGFuay93aW5kb3ctb3Bl
bi1zZWxmLWFib3V0LWJsYW5rLWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMCkKQEAgLTAsMCArMSwy
IEBACitBTEVSVDogUEFTUworCgpQcm9wZXJ0eSBjaGFuZ2VzIG9uOiBMYXlvdXRUZXN0cy9odHRw
L3Rlc3RzL3NlY3VyaXR5L2Fib3V0Qmxhbmsvd2luZG93LW9wZW4tc2VsZi1hYm91dC1ibGFuay1l
eHBlY3RlZC50eHQKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fX19fXwpOYW1lOiBzdm46bWltZS10eXBlCiAgICsgdGV4dC9wbGFp
bgpOYW1lOiBzdm46ZW9sLXN0eWxlCiAgICsgbmF0aXZlCgpJbmRleDogTGF5b3V0VGVzdHMvaHR0
cC90ZXN0cy9zZWN1cml0eS9hYm91dEJsYW5rL3dpbmRvdy1vcGVuLXNlbGYtYWJvdXQtYmxhbmsu
aHRtbAo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3NlY3VyaXR5L2Fib3V0
Qmxhbmsvd2luZG93LW9wZW4tc2VsZi1hYm91dC1ibGFuay5odG1sCShyZXZpc2lvbiAwKQorKysg
TGF5b3V0VGVzdHMvaHR0cC90ZXN0cy9zZWN1cml0eS9hYm91dEJsYW5rL3dpbmRvdy1vcGVuLXNl
bGYtYWJvdXQtYmxhbmsuaHRtbAkocmV2aXNpb24gMCkKQEAgLTAsMCArMSwxMyBAQAorPCEtLSBo
dHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MjQwNjcgLS0+Cis8c2NyaXB0
PgoraWYgKHdpbmRvdy5sYXlvdXRUZXN0Q29udHJvbGxlcikgeworICAgIGxheW91dFRlc3RDb250
cm9sbGVyLmR1bXBBc1RleHQoKTsKKyAgICBsYXlvdXRUZXN0Q29udHJvbGxlci53YWl0VW50aWxE
b25lKCk7CisgICAgbGF5b3V0VGVzdENvbnRyb2xsZXIuc2V0Q2FuT3BlbldpbmRvd3MoKTsKKyAg
ICB3aW5kb3cub3BlbigiamF2YXNjcmlwdDonPHNjcmlwdD5hbGVydChvcGVuZXIuZG9jdW1lbnQu
ZG9tYWluID8gXCJQQVNTXCIgOiBcIkZBSUw6IERvbWFpbiBpcyB1bmRlZmluZWQuXCIpOyBzZXRU
aW1lb3V0KFwibGF5b3V0VGVzdENvbnRyb2xsZXIubm90aWZ5RG9uZSgpO1wiLCAyMDApPC9zY3Ii
ICsgImlwdD4nIik7Cit9IGVsc2UKKyAgICBhbGVydCgiVGhpcyB0ZXN0IHNob3VsZCByZWRpcmVj
dCB0byBhYm91dDpibGFuayB3aXRob3V0IGNyYXNoaW5nLiBXaGVuIHJ1biBpbiBhdXRvbWF0ZWQg
bW9kZSwgaXQgYWxzbyBjaGVja3MgdGhhdCB0aGUgcmVzdWx0aW5nIGRvY3VtZW50IGRvbWFpbiBp
cyBjb3JyZWN0LiIpOworCit3aW5kb3cub3BlbigiYWJvdXQ6YmxhbmsiLCAiX3NlbGYiKTsKKzwv
c2NyaXB0PgorPHA+RkFJTDogVGhpcyBkb2N1bWVudCBzaG91bGQgYmUgcmVwbGFjZWQgd2l0aCBh
Ym91dDpibGFuay48L3A+CgpQcm9wZXJ0eSBjaGFuZ2VzIG9uOiBMYXlvdXRUZXN0cy9odHRwL3Rl
c3RzL3NlY3VyaXR5L2Fib3V0Qmxhbmsvd2luZG93LW9wZW4tc2VsZi1hYm91dC1ibGFuay5odG1s
Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X19fX19fX19fX18KTmFtZTogc3ZuOm1pbWUtdHlwZQogICArIHRleHQvaHRtbAoK
</data>
<flag name="review"
          id="13591"
          type_id="1"
          status="+"
          setter="darin"
    />
          </attachment>
      

    </bug>

</bugzilla>