<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>251550</bug_id>
          
          <creation_ts>2023-02-01 14:17:32 -0800</creation_ts>
          <short_desc>[EME] media/encrypted-media/mock-MediaKeySession-generateRequest.html is a flaky crash</short_desc>
          <delta_ts>2023-04-11 02:43:17 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Diego Pino">dpino</reporter>
          <assigned_to name="Xabier Rodríguez Calvar">calvaris</assigned_to>
          <cc>aboya</cc>
    
    <cc>bugs-noreply</cc>
    
    <cc>calvaris</cc>
    
    <cc>eocanha</cc>
    
    <cc>philn</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1930270</commentid>
    <comment_count>0</comment_count>
    <who name="Diego Pino">dpino</who>
    <bug_when>2023-02-01 14:17:32 -0800</bug_when>
    <thetext>The following encrypted-media tests are crashing:

  media/encrypted-media/mock-MediaKeySession-generateRequest.html
  media/encrypted-media/mock-MediaKeySystemAccess.html

The test are crashing most of the times and very rarely passing.

Unfortunately there is not WPE Debug stack trace for these tests, thus I&apos;m pasting the stacktrace from WPE Release:

layout-test-results/media/encrypted-media/mock-MediaKeySession-generateRequest-crash-log.txt:

```
[Thread debugging using libthread_db enabled]
Using host libthread_db library &quot;/usr/lib/x86_64-linux-gnu/libthread_db.so.1&quot;.
Core was generated by `/app/webkit/WebKitBuild/Release/bin/WPEWebProcess 12 16 --configure-jsc-for-tes&apos;.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007f49013cbeab in WTF::HashTableIterator&lt;WTF::HashTable&lt;WTF::String, WTF::KeyValuePair&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::KeyValuePairKeyExtractor&lt;WTF::KeyValuePair&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;
[Current thread is 1 (Thread 0x7f494fe2e9c0 (LWP 12602))]

Thread 1 (Thread 0x7f494fe2e9c0 (LWP 12602)):
#0  0x00007f49013cbeab in WTF::HashTableIterator&lt;WTF::HashTable&lt;WTF::String, WTF::KeyValuePair&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::KeyValuePairKeyExtractor&lt;WTF::KeyValuePair&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;
#1  0x00007f49013ca609 in WebCore::MockCDMInstanceSession::closeSession(WTF::String const&amp;, WTF::CompletionHandler&lt;void ()&gt;&amp;&amp;) () at /app/webkit/WebKitBuild/Release/lib/libTestRunnerInjectedBundle.so
#2  0x00007f495a4b379c in WebCore::MediaKeySession::stop() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#3  0x00007f495ba306ed in WTF::Detail::CallableWrapper&lt;WebCore::ScriptExecutionContext::stopActiveDOMObjects()::{lambda(auto:1&amp;)#1}, WebCore::ScriptExecutionContext::ShouldContinue, WebCore::ActiveDOMObject&amp;&gt;::call(WebCore::ActiveDOMObject&amp;) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#4  0x00007f495ba352fa in WebCore::ScriptExecutionContext::forEachActiveDOMObject(WTF::Function&lt;WebCore::ScriptExecutionContext::ShouldContinue (WebCore::ActiveDOMObject&amp;)&gt; const&amp;) const () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#5  0x00007f495ba35421 in WebCore::ScriptExecutionContext::stopActiveDOMObjects() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#6  0x00007f495b95faac in WebCore::Document::stopActiveDOMObjects() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#7  0x00007f495b98be66 in WebCore::Document::commonTeardown() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#8  0x00007f495b999ab4 in WebCore::Document::willBeRemovedFromFrame() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#9  0x00007f495c085ca0 in WebCore::Frame::setView(WTF::RefPtr&lt;WebCore::FrameView, WTF::RawPtrTraits&lt;WebCore::FrameView&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::FrameView&gt; &gt;&amp;&amp;) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#10 0x00007f495c0b5fa4 in WebCore::Frame::createView(WebCore::IntSize const&amp;, std::optional&lt;WebCore::Color&gt; const&amp;, WebCore::IntSize const&amp;, WebCore::IntRect const&amp;, bool, WebCore::ScrollbarMode, bool, WebCore::ScrollbarMode, bool) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#11 0x00007f4958e98334 in WebKit::WebFrameLoaderClient::transitionToCommittedForNewPage() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#12 0x00007f495bf7b912 in WebCore::FrameLoader::transitionToCommitted(WebCore::CachedPage*) [clone .part.0] () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#13 0x00007f495bf7bac4 in WebCore::FrameLoader::commitProvisionalLoad() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#14 0x00007f495bf52327 in WebCore::DocumentLoader::finishedLoading() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#15 0x00007f495bf52bed in WebCore::DocumentLoader::maybeLoadEmpty() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#16 0x00007f495bf530ae in WebCore::DocumentLoader::startLoadingMainResource() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#17 0x00007f495bf7cd13 in WebCore::FrameLoader::continueLoadAfterNavigationPolicy(WebCore::ResourceRequest const&amp;, WebCore::FormState*, WebCore::NavigationPolicyDecision, WebCore::AllowNavigationToInvalidURL) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#18 0x00007f495bf84a63 in WTF::Detail::CallableWrapper&lt;WebCore::FrameLoader::loadWithDocumentLoader(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::RefPtr&lt;WebCore::FormState, WTF::RawPtrTraits&lt;WebCore::FormState&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::FormState&gt; &gt;&amp;&amp;, WebCore::AllowNavigationToInvalidURL, WTF::CompletionHandl
#19 0x00007f495bf9f72a in WebCore::FrameLoader::PolicyChecker::checkNavigationPolicy(WebCore::ResourceRequest&amp;&amp;, WebCore::ResourceResponse const&amp;, WebCore::DocumentLoader*, WTF::RefPtr&lt;WebCore::FormState, WTF::RawPtrTraits&lt;WebCore::FormState&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::FormState&gt; &gt;&amp;&amp;, WTF::CompletionHandler&lt;void (WebCor
#20 0x00007f4958ed8fb4 in WebKit::WebFrame::didReceivePolicyDecision(unsigned long, WebKit::PolicyDecision&amp;&amp;) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#21 0x00007f4958920ca3 in void IPC::handleMessage&lt;Messages::WebPage::DidReceivePolicyDecision, WebKit::WebPage, WebKit::WebPage, void (WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::FrameIdentifierType&gt; &gt;, unsigned long, WebKit::PolicyDecision&amp;&amp;, WTF::Vector&lt;WebKit::SandboxExtension::Handle, 0ul, WTF::CrashOnOverflow, 1
#22 0x00007f49589231cc in WebKit::WebPage::didReceiveWebPageMessage(IPC::Connection&amp;, IPC::Decoder&amp;) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#23 0x00007f4958b50e0a in IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&amp;, IPC::Decoder&amp;) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#24 0x00007f4958df87f6 in WebKit::WebProcess::didReceiveMessage(IPC::Connection&amp;, IPC::Decoder&amp;) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#25 0x00007f4958b495c5 in IPC::Connection::dispatchMessage(std::unique_ptr&lt;IPC::Decoder, std::default_delete&lt;IPC::Decoder&gt; &gt;) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#26 0x00007f4958b4b161 in IPC::Connection::dispatchOneIncomingMessage() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#27 0x00007f495a420c5a in WTF::RunLoop::performWork() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#28 0x00007f495a499859 in WTF::RunLoop::RunLoop()::{lambda(void*)#1}::_FUN(void*) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#29 0x00007f495a49a2cf in WTF::RunLoop::{lambda(_GSource*, int (*)(void*), void*)#1}::_FUN(_GSource*, int (*)(void*), void*) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#30 0x00007f495686cc37 in g_main_dispatch (context=0x5586eeac8730) at ../glib/gmain.c:3419
#31 g_main_context_dispatch (context=0x5586eeac8730) at ../glib/gmain.c:4137
#32 0x00007f49568c3028 in g_main_context_iterate.constprop.0 (context=0x5586eeac8730, block=block@entry=1, dispatch=dispatch@entry=1, self=&lt;optimized out&gt;) at ../glib/gmain.c:4213
#33 0x00007f495686c2af in g_main_loop_run (loop=0x5586eeac9800) at ../glib/gmain.c:4413
#34 0x00007f495a49a400 in WTF::RunLoop::run() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#35 0x00007f4958f29fa6 in WebKit::WebProcessMain(int, char**) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#36 0x00007f49560a554a in __libc_start_call_main (main=main@entry=0x5586ed0f0880 &lt;main&gt;, argc=argc@entry=4, argv=argv@entry=0x7ffe316e0b58) at ../sysdeps/nptl/libc_start_call_main.h:58
#37 0x00007f49560a560b in __libc_start_main_impl (main=0x5586ed0f0880 &lt;main&gt;, argc=4, argv=0x7ffe316e0b58, init=&lt;optimized out&gt;, fini=&lt;optimized out&gt;, rtld_fini=&lt;optimized out&gt;, stack_end=&lt;optimized out&gt;) at ../csu/libc-start.c:389
#38 0x00005586ed0f07b5 in _start () at ../sysdeps/x86_64/start.S:115
```

layout-test-results/media/encrypted-media/mock-MediaKeySystemAccess-crash-log.txt:

```
[Thread debugging using libthread_db enabled]
Using host libthread_db library &quot;/usr/lib/x86_64-linux-gnu/libthread_db.so.1&quot;.
Core was generated by `/app/webkit/WebKitBuild/Release/bin/WPEWebProcess 12 16 --configure-jsc-for-tes&apos;.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007fd4b5cd0eab in WTF::HashTableIterator&lt;WTF::HashTable&lt;WTF::String, WTF::KeyValuePair&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::KeyValuePairKeyExtractor&lt;WTF::KeyValuePair&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;
[Current thread is 1 (Thread 0x7fd5120df9c0 (LWP 14272))]

Thread 1 (Thread 0x7fd5120df9c0 (LWP 14272)):
#0  0x00007fd4b5cd0eab in WTF::HashTableIterator&lt;WTF::HashTable&lt;WTF::String, WTF::KeyValuePair&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::KeyValuePairKeyExtractor&lt;WTF::KeyValuePair&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;
#1  0x00007fd4b5ccf609 in WebCore::MockCDMInstanceSession::closeSession(WTF::String const&amp;, WTF::CompletionHandler&lt;void ()&gt;&amp;&amp;) () at /app/webkit/WebKitBuild/Release/lib/libTestRunnerInjectedBundle.so
#2  0x00007fd51c76479c in WebCore::MediaKeySession::stop() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#3  0x00007fd51dce16ed in WTF::Detail::CallableWrapper&lt;WebCore::ScriptExecutionContext::stopActiveDOMObjects()::{lambda(auto:1&amp;)#1}, WebCore::ScriptExecutionContext::ShouldContinue, WebCore::ActiveDOMObject&amp;&gt;::call(WebCore::ActiveDOMObject&amp;) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#4  0x00007fd51dce62fa in WebCore::ScriptExecutionContext::forEachActiveDOMObject(WTF::Function&lt;WebCore::ScriptExecutionContext::ShouldContinue (WebCore::ActiveDOMObject&amp;)&gt; const&amp;) const () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#5  0x00007fd51dce6421 in WebCore::ScriptExecutionContext::stopActiveDOMObjects() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#6  0x00007fd51dc10aac in WebCore::Document::stopActiveDOMObjects() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#7  0x00007fd51dc3ce66 in WebCore::Document::commonTeardown() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#8  0x00007fd51dc4aab4 in WebCore::Document::willBeRemovedFromFrame() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#9  0x00007fd51e336ca0 in WebCore::Frame::setView(WTF::RefPtr&lt;WebCore::FrameView, WTF::RawPtrTraits&lt;WebCore::FrameView&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::FrameView&gt; &gt;&amp;&amp;) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#10 0x00007fd51e366fa4 in WebCore::Frame::createView(WebCore::IntSize const&amp;, std::optional&lt;WebCore::Color&gt; const&amp;, WebCore::IntSize const&amp;, WebCore::IntRect const&amp;, bool, WebCore::ScrollbarMode, bool, WebCore::ScrollbarMode, bool) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#11 0x00007fd51b149334 in WebKit::WebFrameLoaderClient::transitionToCommittedForNewPage() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#12 0x00007fd51e22c912 in WebCore::FrameLoader::transitionToCommitted(WebCore::CachedPage*) [clone .part.0] () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#13 0x00007fd51e22cac4 in WebCore::FrameLoader::commitProvisionalLoad() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#14 0x00007fd51e203327 in WebCore::DocumentLoader::finishedLoading() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#15 0x00007fd51e203bed in WebCore::DocumentLoader::maybeLoadEmpty() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#16 0x00007fd51e2040ae in WebCore::DocumentLoader::startLoadingMainResource() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#17 0x00007fd51e22dd13 in WebCore::FrameLoader::continueLoadAfterNavigationPolicy(WebCore::ResourceRequest const&amp;, WebCore::FormState*, WebCore::NavigationPolicyDecision, WebCore::AllowNavigationToInvalidURL) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#18 0x00007fd51e235a63 in WTF::Detail::CallableWrapper&lt;WebCore::FrameLoader::loadWithDocumentLoader(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::RefPtr&lt;WebCore::FormState, WTF::RawPtrTraits&lt;WebCore::FormState&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::FormState&gt; &gt;&amp;&amp;, WebCore::AllowNavigationToInvalidURL, WTF::CompletionHandl
#19 0x00007fd51e25072a in WebCore::FrameLoader::PolicyChecker::checkNavigationPolicy(WebCore::ResourceRequest&amp;&amp;, WebCore::ResourceResponse const&amp;, WebCore::DocumentLoader*, WTF::RefPtr&lt;WebCore::FormState, WTF::RawPtrTraits&lt;WebCore::FormState&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::FormState&gt; &gt;&amp;&amp;, WTF::CompletionHandler&lt;void (WebCor
#20 0x00007fd51b189fb4 in WebKit::WebFrame::didReceivePolicyDecision(unsigned long, WebKit::PolicyDecision&amp;&amp;) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#21 0x00007fd51abd1ca3 in void IPC::handleMessage&lt;Messages::WebPage::DidReceivePolicyDecision, WebKit::WebPage, WebKit::WebPage, void (WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::FrameIdentifierType&gt; &gt;, unsigned long, WebKit::PolicyDecision&amp;&amp;, WTF::Vector&lt;WebKit::SandboxExtension::Handle, 0ul, WTF::CrashOnOverflow, 1
#22 0x00007fd51abd41cc in WebKit::WebPage::didReceiveWebPageMessage(IPC::Connection&amp;, IPC::Decoder&amp;) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#23 0x00007fd51ae01e0a in IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&amp;, IPC::Decoder&amp;) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#24 0x00007fd51b0a97f6 in WebKit::WebProcess::didReceiveMessage(IPC::Connection&amp;, IPC::Decoder&amp;) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#25 0x00007fd51adfa5c5 in IPC::Connection::dispatchMessage(std::unique_ptr&lt;IPC::Decoder, std::default_delete&lt;IPC::Decoder&gt; &gt;) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#26 0x00007fd51adfc161 in IPC::Connection::dispatchOneIncomingMessage() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#27 0x00007fd51c6d1c5a in WTF::RunLoop::performWork() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#28 0x00007fd51c74a859 in WTF::RunLoop::RunLoop()::{lambda(void*)#1}::_FUN(void*) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#29 0x00007fd51c74b2cf in WTF::RunLoop::{lambda(_GSource*, int (*)(void*), void*)#1}::_FUN(_GSource*, int (*)(void*), void*) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#30 0x00007fd518b1dc37 in g_main_dispatch (context=0x562c09ee1730) at ../glib/gmain.c:3419
#31 g_main_context_dispatch (context=0x562c09ee1730) at ../glib/gmain.c:4137
#32 0x00007fd518b74028 in g_main_context_iterate.constprop.0 (context=0x562c09ee1730, block=block@entry=1, dispatch=dispatch@entry=1, self=&lt;optimized out&gt;) at ../glib/gmain.c:4213
#33 0x00007fd518b1d2af in g_main_loop_run (loop=0x562c09ee2800) at ../glib/gmain.c:4413
#34 0x00007fd51c74b400 in WTF::RunLoop::run() () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#35 0x00007fd51b1dafa6 in WebKit::WebProcessMain(int, char**) () at /app/webkit/WebKitBuild/Release/lib/libWPEWebKit-2.0.so.0
#36 0x00007fd51835654a in __libc_start_call_main (main=main@entry=0x562c09465880 &lt;main&gt;, argc=argc@entry=4, argv=argv@entry=0x7ffcd90cc868) at ../sysdeps/nptl/libc_start_call_main.h:58
#37 0x00007fd51835660b in __libc_start_main_impl (main=0x562c09465880 &lt;main&gt;, argc=4, argv=0x7ffcd90cc868, init=&lt;optimized out&gt;, fini=&lt;optimized out&gt;, rtld_fini=&lt;optimized out&gt;, stack_end=&lt;optimized out&gt;) at ../csu/libc-start.c:389
#38 0x0000562c094657b5 in _start () at ../sysdeps/x86_64/start.S:115
```</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1944257</commentid>
    <comment_count>1</comment_count>
    <who name="Alicia Boya García">aboya</who>
    <bug_when>2023-03-27 09:02:59 -0700</bug_when>
    <thetext>These tests also reproduce the crash very well in GTK:

media/encrypted-media/mock-MediaKeySession-update.html
media/encrypted-media/mock-MediaKeySession-load.html

It&apos;s possible the bug is present in macOS as well.

Program terminated with signal SIGSEGV, Segmentation fault.
#0  WTF::StringImpl::rawHash (this=0x0) at WTF/Headers/wtf/text/StringImpl.h:348
348	    unsigned rawHash() const { return m_hashAndFlags &gt;&gt; s_flagCount; }
[Current thread is 1 (Thread 0x7f2811134ec0 (LWP 13555))]

WebCore::MediaKeySession::stop() is called after MediaKeySession has been destroyed.

#13 0x00007f17f2b2af0f in WebCore::MediaKeySession::stop (this=0x7f17810741c0) at /app/webkit/Source/WebCore/Modules/encryptedmedia/MediaKeySession.cpp:830
830	    m_instanceSession-&gt;closeSession(m_sessionId, [this, weakThis = WeakPtr { this }, logIdentifier = LOGIDENTIFIER] {
(gdb) p m_sessionId.m_impl
$5 = {static isRefPtr = &lt;optimized out&gt;, m_ptr = 0x0}

Thread 1 (Thread 0x7f2811134ec0 (LWP 13555)):
#0  WTF::StringImpl::rawHash() const (this=0x0) at WTF/Headers/wtf/text/StringImpl.h:348
#1  0x00007f2801fc9c45 in WTF::StringImpl::hasHash() const (this=0x0) at WTF/Headers/wtf/text/StringImpl.h:351
#2  0x00007f2801fc9bf9 in WTF::StringImpl::hash() const (this=0x0) at WTF/Headers/wtf/text/StringImpl.h:354
#3  0x00007f2801fc9bcd in WTF::StringHash::hash(WTF::String const&amp;) (key=&quot;(null)&quot;) at WTF/Headers/wtf/text/StringHash.h:101
#4  0x00007f28020b1f75 in WTF::IdentityHashTranslator&lt;WTF::HashMap&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt;, WTF::DefaultHash&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::HashTableTraits&gt;::KeyValuePairTraits, WTF::DefaultHash&lt;WTF::String&gt; &gt;::hash&lt;WTF::String&gt;(WTF::String const&amp;) (key=&quot;(null)&quot;) at WTF/Headers/wtf/HashTable.h:311
#5  0x00007f28020b1df9 in WTF::HashTable&lt;WTF::String, WTF::KeyValuePair&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::KeyValuePairKeyExtractor&lt;WTF::KeyValuePair&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt; &gt;, WTF::DefaultHash&lt;WTF::String&gt;, WTF::HashMap&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt;, WTF::DefaultHash&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::HashTableTraits&gt;::KeyValuePairTraits, WTF::HashTraits&lt;WTF::String&gt; &gt;::inlineLookup&lt;WTF::IdentityHashTranslator&lt;WTF::HashMap&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt;, WTF::DefaultHash&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::HashTableTraits&gt;::KeyValuePairTraits, WTF::DefaultHash&lt;WTF::String&gt; &gt;, WTF::String&gt;(WTF::String const&amp;) (this=0x7f28071c7210, key=&quot;(null)&quot;) at WTF/Headers/wtf/HashTable.h:688
#6  0x00007f28020b1d8d in WTF::HashTable&lt;WTF::String, WTF::KeyValuePair&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::KeyValuePairKeyExtractor&lt;WTF::KeyValuePair&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt; &gt;, WTF::DefaultHash&lt;WTF::String&gt;, WTF::HashMap&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt;, WTF::DefaultHash&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::HashTableTraits&gt;::KeyValuePairTraits, WTF::HashTraits&lt;WTF::String&gt; &gt;::lookup&lt;WTF::IdentityHashTranslator&lt;WTF::HashMap&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt;, WTF::DefaultHash&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::HashTableTraits&gt;::KeyValuePairTraits, WTF::DefaultHash&lt;WTF::String&gt; &gt;, WTF::String&gt;(WTF::String const&amp;) (this=0x7f28071c7210, key=&quot;(null)&quot;) at WTF/Headers/wtf/HashTable.h:673
#7  0x00007f28020b45b0 in WTF::HashTable&lt;WTF::String, WTF::KeyValuePair&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::KeyValuePairKeyExtractor&lt;WTF::KeyValuePair&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt; &gt;, WTF::DefaultHash&lt;WTF::String&gt;, WTF::HashMap&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt;, WTF::DefaultHash&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::HashTableTraits&gt;::KeyValuePairTraits, WTF::HashTraits&lt;WTF::String&gt; &gt;::find&lt;WTF::IdentityHashTranslator&lt;WTF::HashMap&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt;, WTF::DefaultHash&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::HashTableTraits&gt;::KeyValuePairTraits, WTF::DefaultHash&lt;WTF::String&gt; &gt;, WTF::String&gt;(WTF::String const&amp;) (this=0x7f28071c7210, key=&quot;(null)&quot;) at WTF/Headers/wtf/HashTable.h:1025
#8  0x00007f28020b451b in WTF::HashTable&lt;WTF::String, WTF::KeyValuePair&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::KeyValuePairKeyExtractor&lt;WTF::KeyValuePair&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt; &gt;, WTF::DefaultHash&lt;WTF::String&gt;, WTF::HashMap&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt;, WTF::DefaultHash&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::HashTableTraits&gt;::KeyValuePairTraits, WTF::HashTraits&lt;WTF::String&gt; &gt;::find(WTF::String const&amp;) (this=0x7f28071c7210, key=&quot;(null)&quot;) at WTF/Headers/wtf/HashTable.h:498
#9  0x00007f28020ace70 in WTF::HashMap&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt;, WTF::DefaultHash&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::HashTableTraits&gt;::find(WTF::String const&amp;) (this=0x7f28071c7210, key=&quot;(null)&quot;) at WTF/Headers/wtf/HashMap.h:311
#10 0x00007f28020acc85 in WTF::HashMap&lt;WTF::String, WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt;, WTF::DefaultHash&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::String&gt;, WTF::HashTraits&lt;WTF::Vector&lt;WTF::Ref&lt;WebCore::SharedBuffer, WTF::RawPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;, WTF::HashTableTraits&gt;::remove(WTF::String const&amp;) (this=0x7f28071c7210, key=&quot;(null)&quot;) at WTF/Headers/wtf/HashMap.h:502
#11 0x00007f28020aa971 in WebCore::MockCDMFactory::removeSessionWithID(WTF::String const&amp;) (this=0x7f28071c71a0, id=&quot;(null)&quot;) at /app/webkit/Source/WebCore/testing/MockCDMFactory.cpp:74
#12 0x00007f28020ac389 in WebCore::MockCDMInstanceSession::closeSession(WTF::String const&amp;, WTF::CompletionHandler&lt;void ()&gt;&amp;&amp;) (this=0x7f2807963640, sessionID=&quot;(null)&quot;, callback=...) at /app/webkit/Source/WebCore/testing/MockCDMFactory.cpp:388
#13 0x00007f282492af0f in WebCore::MediaKeySession::stop() (this=0x7f0fbe0ae640) at /app/webkit/Source/WebCore/Modules/encryptedmedia/MediaKeySession.cpp:830
#14 0x00007f28279daa8a in WebCore::ScriptExecutionContext::stopActiveDOMObjects()::$_13::operator()&lt;WebCore::ActiveDOMObject&gt;(WebCore::ActiveDOMObject&amp;) const (this=0x7f28072ad0a8, activeDOMObject=...) at /app/webkit/Source/WebCore/dom/ScriptExecutionContext.cpp:388
#15 0x00007f28279daa41 in WTF::Detail::CallableWrapper&lt;WebCore::ScriptExecutionContext::stopActiveDOMObjects()::$_13, WebCore::ScriptExecutionContext::ShouldContinue, WebCore::ActiveDOMObject&amp;&gt;::call(WebCore::ActiveDOMObject&amp;) (this=0x7f28072ad0a0, in=...) at WTF/Headers/wtf/Function.h:53
#16 0x00007f28279dfaf7 in WTF::Function&lt;WebCore::ScriptExecutionContext::ShouldContinue (WebCore::ActiveDOMObject&amp;)&gt;::operator()(WebCore::ActiveDOMObject&amp;) const (this=0x7ffd6369a5c0, in=...) at WTF/Headers/wtf/Function.h:82
#17 0x00007f28279d24ca in WebCore::ScriptExecutionContext::forEachActiveDOMObject(WTF::Function&lt;WebCore::ScriptExecutionContext::ShouldContinue (WebCore::ActiveDOMObject&amp;)&gt; const&amp;) const (this=0x7f28031260d0, apply=...) at /app/webkit/Source/WebCore/dom/ScriptExecutionContext.cpp:293
#18 0x00007f28279d29f4 in WebCore::ScriptExecutionContext::stopActiveDOMObjects() (this=0x7f28031260d0) at /app/webkit/Source/WebCore/dom/ScriptExecutionContext.cpp:387
#19 0x00007f28277fda05 in WebCore::Document::stopActiveDOMObjects() (this=0x7f2803126000) at /app/webkit/Source/WebCore/dom/Document.cpp:2911
#20 0x00007f28277fd6ac in WebCore::Document::commonTeardown() (this=0x7f2803126000) at /app/webkit/Source/WebCore/dom/Document.cpp:847
#21 0x00007f2827807ed2 in WebCore::Document::willBeRemovedFromFrame() (this=0x7f2803126000) at /app/webkit/Source/WebCore/dom/Document.cpp:2777
#22 0x00007f282853f708 in WebCore::LocalFrame::setView(WTF::RefPtr&lt;WebCore::LocalFrameView, WTF::RawPtrTraits&lt;WebCore::LocalFrameView&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::LocalFrameView&gt; &gt;&amp;&amp;) (this=0x7f28070b0220, view=...) at /app/webkit/Source/WebCore/page/LocalFrame.cpp:248
#23 0x00007f2828543256 in WebCore::LocalFrame::createView(WebCore::IntSize const&amp;, std::optional&lt;WebCore::Color&gt; const&amp;, WebCore::IntSize const&amp;, WebCore::IntRect const&amp;, bool, WebCore::ScrollbarMode, bool, WebCore::ScrollbarMode, bool) (this=0x7f28070b0220, viewportSize=..., backgroundColor=std::optional&lt;WebCore::Color&gt; [no contained value], fixedLayoutSize=..., fixedVisibleContentRect=..., useFixedLayout=false, horizontalScrollbarMode=WebCore::ScrollbarMode::Auto, horizontalLock=false, verticalScrollbarMode=WebCore::ScrollbarMode::Auto, verticalLock=false) at /app/webkit/Source/WebCore/page/LocalFrame.cpp:876
#24 0x00007f282479fca7 in WebKit::WebFrameLoaderClient::transitionToCommittedForNewPage() (this=0x7f2807034ae0) at /app/webkit/Source/WebKit/WebProcess/WebCoreSupport/WebFrameLoaderClient.cpp:1633
#25 0x00007f2828342b2e in WebCore::FrameLoader::transitionToCommitted(WebCore::CachedPage*) (this=0x7f280708c340, cachedPage=0x0) at /app/webkit/Source/WebCore/loader/FrameLoader.cpp:2318
#26 0x00007f2828341973 in WebCore::FrameLoader::commitProvisionalLoad() (this=0x7f280708c340) at /app/webkit/Source/WebCore/loader/FrameLoader.cpp:2126
#27 0x00007f28282e6679 in WebCore::DocumentLoader::commitIfReady() (this=0x7f280304b000) at /app/webkit/Source/WebCore/loader/DocumentLoader.cpp:423
#28 0x00007f28282e6da0 in WebCore::DocumentLoader::finishedLoading() (this=0x7f280304b000) at /app/webkit/Source/WebCore/loader/DocumentLoader.cpp:496
#29 0x00007f28282f1a31 in WebCore::DocumentLoader::maybeLoadEmpty() (this=0x7f280304b000) at /app/webkit/Source/WebCore/loader/DocumentLoader.cpp:2052
#30 0x00007f28282f1bd2 in WebCore::DocumentLoader::startLoadingMainResource() (this=0x7f280304b000) at /app/webkit/Source/WebCore/loader/DocumentLoader.cpp:2079
#31 0x00007f2828350858 in WebCore::FrameLoader::continueLoadAfterNavigationPolicy(WebCore::ResourceRequest const&amp;, WebCore::FormState*, WebCore::NavigationPolicyDecision, WebCore::AllowNavigationToInvalidURL)::$_11::operator()() (this=0x7f2807356328) at /app/webkit/Source/WebCore/loader/FrameLoader.cpp:3758
#32 0x00007f28283503e9 in WTF::Detail::CallableWrapper&lt;WebCore::FrameLoader::continueLoadAfterNavigationPolicy(WebCore::ResourceRequest const&amp;, WebCore::FormState*, WebCore::NavigationPolicyDecision, WebCore::AllowNavigationToInvalidURL)::$_11, void&gt;::call() (this=0x7f2807356320) at WTF/Headers/wtf/Function.h:53
#33 0x00007f28237889b2 in WTF::Function&lt;void ()&gt;::operator()() const (this=0x7ffd6369b9a0) at WTF/Headers/wtf/Function.h:82
#34 0x00007f2823775602 in WTF::CompletionHandler&lt;void ()&gt;::operator()() (this=0x7ffd6369bae0) at WTF/Headers/wtf/CompletionHandler.h:75
#35 0x00007f282833f458 in WebCore::FrameLoader::continueLoadAfterNavigationPolicy(WebCore::ResourceRequest const&amp;, WebCore::FormState*, WebCore::NavigationPolicyDecision, WebCore::AllowNavigationToInvalidURL) (this=0x7f280708c340, request=..., formState=0x0, navigationPolicyDecision=WebCore::NavigationPolicyDecision::ContinueLoad, allowNavigationToInvalidURL=WebCore::AllowNavigationToInvalidURL::Yes) at /app/webkit/Source/WebCore/loader/FrameLoader.cpp:3762
#36 0x00007f282834e83c in WebCore::FrameLoader::loadWithDocumentLoader(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::RefPtr&lt;WebCore::FormState, WTF::RawPtrTraits&lt;WebCore::FormState&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::FormState&gt; &gt;&amp;&amp;, WebCore::AllowNavigationToInvalidURL, WTF::CompletionHandler&lt;void ()&gt;&amp;&amp;)::$_8::operator()(WebCore::ResourceRequest const&amp;, WTF::WeakPtr&lt;WebCore::FormState, WTF::DefaultWeakPtrImpl&gt;&amp;&amp;, WebCore::NavigationPolicyDecision) (this=0x7f2807b23ea8, request=..., formState=..., navigationPolicyDecision=WebCore::NavigationPolicyDecision::ContinueLoad) at /app/webkit/Source/WebCore/loader/FrameLoader.cpp:1710
#37 0x00007f282834e7ac in WTF::Detail::CallableWrapper&lt;WebCore::FrameLoader::loadWithDocumentLoader(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::RefPtr&lt;WebCore::FormState, WTF::RawPtrTraits&lt;WebCore::FormState&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::FormState&gt; &gt;&amp;&amp;, WebCore::AllowNavigationToInvalidURL, WTF::CompletionHandler&lt;void ()&gt;&amp;&amp;)::$_8, void, WebCore::ResourceRequest&amp;&amp;, WTF::WeakPtr&lt;WebCore::FormState, WTF::DefaultWeakPtrImpl&gt;&amp;&amp;, WebCore::NavigationPolicyDecision&gt;::call(WebCore::ResourceRequest&amp;&amp;, WTF::WeakPtr&lt;WebCore::FormState, WTF::DefaultWeakPtrImpl&gt;&amp;&amp;, WebCore::NavigationPolicyDecision) (this=0x7f2807b23ea0, in=..., in=..., in=WebCore::NavigationPolicyDecision::ContinueLoad) at WTF/Headers/wtf/Function.h:53
#38 0x00007f282839dc04 in WTF::Function&lt;void (WebCore::ResourceRequest&amp;&amp;, WTF::WeakPtr&lt;WebCore::FormState, WTF::DefaultWeakPtrImpl&gt;&amp;&amp;, WebCore::NavigationPolicyDecision)&gt;::operator()(WebCore::ResourceRequest&amp;&amp;, WTF::WeakPtr&lt;WebCore::FormState, WTF::DefaultWeakPtrImpl&gt;&amp;&amp;, WebCore::NavigationPolicyDecision) const (this=0x7ffd6369c048, in=..., in=..., in=WebCore::NavigationPolicyDecision::ContinueLoad) at WTF/Headers/wtf/Function.h:82
#39 0x00007f2828391bfd in WTF::CompletionHandler&lt;void (WebCore::ResourceRequest&amp;&amp;, WTF::WeakPtr&lt;WebCore::FormState, WTF::DefaultWeakPtrImpl&gt;&amp;&amp;, WebCore::NavigationPolicyDecision)&gt;::operator()(WebCore::ResourceRequest&amp;&amp;, WTF::WeakPtr&lt;WebCore::FormState, WTF::DefaultWeakPtrImpl&gt;&amp;&amp;, WebCore::NavigationPolicyDecision) (this=0x7f28070bf930, in=..., in=..., in=WebCore::NavigationPolicyDecision::ContinueLoad) at WTF/Headers/wtf/CompletionHandler.h:75
#40 0x00007f282838d7cc in WebCore::FrameLoader::PolicyChecker::checkNavigationPolicy(WebCore::ResourceRequest&amp;&amp;, WebCore::ResourceResponse const&amp;, WebCore::DocumentLoader*, WTF::RefPtr&lt;WebCore::FormState, WTF::RawPtrTraits&lt;WebCore::FormState&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::FormState&gt; &gt;&amp;&amp;, WTF::CompletionHandler&lt;void (WebCore::ResourceRequest&amp;&amp;, WTF::WeakPtr&lt;WebCore::FormState, WTF::DefaultWeakPtrImpl&gt;&amp;&amp;, WebCore::NavigationPolicyDecision)&gt;&amp;&amp;, WebCore::PolicyDecisionMode)::$_6::operator()(WebCore::PolicyAction, WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::LocalPolicyCheckIdentifierType&gt; &gt;) (this=0x7f28070bf928, policyAction=WebCore::PolicyAction::Use, responseIdentifier=...) at /app/webkit/Source/WebCore/loader/PolicyChecker.cpp:232
#41 0x00007f282838cca6 in WTF::Detail::CallableWrapper&lt;WebCore::FrameLoader::PolicyChecker::checkNavigationPolicy(WebCore::ResourceRequest&amp;&amp;, WebCore::ResourceResponse const&amp;, WebCore::DocumentLoader*, WTF::RefPtr&lt;WebCore::FormState, WTF::RawPtrTraits&lt;WebCore::FormState&gt;, WTF::DefaultRefDerefTraits&lt;WebCore::FormState&gt; &gt;&amp;&amp;, WTF::CompletionHandler&lt;void (WebCore::ResourceRequest&amp;&amp;, WTF::WeakPtr&lt;WebCore::FormState, WTF::DefaultWeakPtrImpl&gt;&amp;&amp;, WebCore::NavigationPolicyDecision)&gt;&amp;&amp;, WebCore::PolicyDecisionMode)::$_6, void, WebCore::PolicyAction, WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::LocalPolicyCheckIdentifierType&gt; &gt; &gt;::call(WebCore::PolicyAction, WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::LocalPolicyCheckIdentifierType&gt; &gt;) (this=0x7f28070bf920, in=WebCore::PolicyAction::Use, in=...) at WTF/Headers/wtf/Function.h:53
#42 0x00007f28247ab24b in WTF::Function&lt;void (WebCore::PolicyAction, WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::LocalPolicyCheckIdentifierType&gt; &gt;)&gt;::operator()(WebCore::PolicyAction, WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::LocalPolicyCheckIdentifierType&gt; &gt;) const (this=0x7ffd6369c768, in=WebCore::PolicyAction::Use, in=...) at WTF/Headers/wtf/Function.h:82
#43 0x00007f282482669a in WebKit::WebFrame::didReceivePolicyDecision(unsigned long, WebKit::PolicyDecision&amp;&amp;) (this=0x7f28070240e0, listenerID=226, policyDecision=...) at /app/webkit/Source/WebKit/WebProcess/WebPage/WebFrame.cpp:440
#44 0x00007f282485e7bd in WebKit::WebPage::didReceivePolicyDecision(WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::FrameIdentifierType&gt; &gt;, unsigned long, WebKit::PolicyDecision&amp;&amp;, WTF::Vector&lt;WebKit::SandboxExtension::Handle, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; const&amp;) (this=0x7f28070c0d80, frameID=..., listenerID=226, policyDecision=..., networkExtensionsHandles=WTF::Vector of length 0, capacity 0) at /app/webkit/Source/WebKit/WebProcess/WebPage/WebPage.cpp:3809
#45 0x00007f282349a461 in _ZZN3IPC18callMemberFunctionIN6WebKit7WebPageES2_FvN7WebCore16ProcessQualifiedIN3WTF16ObjectIdentifierINS3_19FrameIdentifierTypeEEEEEmONS1_14PolicyDecisionERKNS5_6VectorINS1_16SandboxExtension6HandleELm0ENS5_15CrashOnOverflowELm16ENS5_10FastMallocEEEESt5tupleIJS9_mSA_SH_EEEEvPT_MT0_T1_OT2_ENKUlDpOT_E_clIJS9_mSA_SH_EEEDaSW_ (this=0x7ffd6369cab0, args=..., args=@0x7ffd6369cc28: 226, args=..., args=...) at /app/webkit/Source/WebKit/Platform/IPC/HandleMessage.h:136
#46 0x00007f282349a381 in _ZSt13__invoke_implIvZN3IPC18callMemberFunctionIN6WebKit7WebPageES3_FvN7WebCore16ProcessQualifiedIN3WTF16ObjectIdentifierINS4_19FrameIdentifierTypeEEEEEmONS2_14PolicyDecisionERKNS6_6VectorINS2_16SandboxExtension6HandleELm0ENS6_15CrashOnOverflowELm16ENS6_10FastMallocEEEESt5tupleIJSA_mSB_SI_EEEEvPT_MT0_T1_OT2_EUlDpOT_E_JSA_mSB_SI_EESO_St14__invoke_otherOSQ_DpOT1_ (__f=..., __args=..., __args=@0x7ffd6369cc28: 226, __args=..., __args=...) at /usr/lib/gcc/x86_64-unknown-linux-gnu/12.2.0/../../../../include/c++/12.2.0/bits/invoke.h:61
#47 0x00007f282349a241 in _ZSt8__invokeIZN3IPC18callMemberFunctionIN6WebKit7WebPageES3_FvN7WebCore16ProcessQualifiedIN3WTF16ObjectIdentifierINS4_19FrameIdentifierTypeEEEEEmONS2_14PolicyDecisionERKNS6_6VectorINS2_16SandboxExtension6HandleELm0ENS6_15CrashOnOverflowELm16ENS6_10FastMallocEEEESt5tupleIJSA_mSB_SI_EEEEvPT_MT0_T1_OT2_EUlDpOT_E_JSA_mSB_SI_EENSt15__invoke_resultISO_JDpT0_EE4typeEOSO_DpOS10_ (__fn=..., __args=..., __args=@0x7ffd6369cc28: 226, __args=..., __args=...) at /usr/lib/gcc/x86_64-unknown-linux-gnu/12.2.0/../../../../include/c++/12.2.0/bits/invoke.h:96
#48 0x00007f282349a1b5 in _ZSt12__apply_implIZN3IPC18callMemberFunctionIN6WebKit7WebPageES3_FvN7WebCore16ProcessQualifiedIN3WTF16ObjectIdentifierINS4_19FrameIdentifierTypeEEEEEmONS2_14PolicyDecisionERKNS6_6VectorINS2_16SandboxExtension6HandleELm0ENS6_15CrashOnOverflowELm16ENS6_10FastMallocEEEESt5tupleIJSA_mSB_SI_EEEEvPT_MT0_T1_OT2_EUlDpOT_E_SN_JLm0ELm1ELm2ELm3EEEDcOSO_OSQ_St16integer_sequenceImJXspT1_EEE (__f=..., __t=...) at /usr/lib/gcc/x86_64-unknown-linux-gnu/12.2.0/../../../../include/c++/12.2.0/tuple:1852
#49 0x00007f282349a112 in _ZSt5applyIZN3IPC18callMemberFunctionIN6WebKit7WebPageES3_FvN7WebCore16ProcessQualifiedIN3WTF16ObjectIdentifierINS4_19FrameIdentifierTypeEEEEEmONS2_14PolicyDecisionERKNS6_6VectorINS2_16SandboxExtension6HandleELm0ENS6_15CrashOnOverflowELm16ENS6_10FastMallocEEEESt5tupleIJSA_mSB_SI_EEEEvPT_MT0_T1_OT2_EUlDpOT_E_SN_EDcOSO_OSQ_ (__f=..., __t=...) at /usr/lib/gcc/x86_64-unknown-linux-gnu/12.2.0/../../../../include/c++/12.2.0/tuple:1863
#50 0x00007f2823498cbd in IPC::callMemberFunction&lt;WebKit::WebPage, WebKit::WebPage, void (WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::FrameIdentifierType&gt; &gt;, unsigned long, WebKit::PolicyDecision&amp;&amp;, WTF::Vector&lt;WebKit::SandboxExtension::Handle, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; const&amp;), std::tuple&lt;WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::FrameIdentifierType&gt; &gt;, unsigned long, WebKit::PolicyDecision, WTF::Vector&lt;WebKit::SandboxExtension::Handle, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt; &gt;(WebKit::WebPage*, void (WebKit::WebPage::*)(WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::FrameIdentifierType&gt; &gt;, unsigned long, WebKit::PolicyDecision&amp;&amp;, WTF::Vector&lt;WebKit::SandboxExtension::Handle, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; const&amp;), std::tuple&lt;WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::FrameIdentifierType&gt; &gt;, unsigned long, WebKit::PolicyDecision, WTF::Vector&lt;WebKit::SandboxExtension::Handle, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &gt;&amp;&amp;) (object=0x7f28070c0d80, function=(void (WebKit::WebPage::*)(class WebKit::WebPage * const, class WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::FrameIdentifierType&gt; &gt;, unsigned long, struct WebKit::PolicyDecision &amp;&amp;, const class WTF::Vector&lt;WebKit::SandboxExtension::Handle, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &amp;)) 0x7f282485e5c0 &lt;WebKit::WebPage::didReceivePolicyDecision(WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::FrameIdentifierType&gt; &gt;, unsigned long, WebKit::PolicyDecision&amp;&amp;, WTF::Vector&lt;WebKit::SandboxExtension::Handle, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; const&amp;)&gt;, tuple=...) at /app/webkit/Source/WebKit/Platform/IPC/HandleMessage.h:134
#51 0x00007f282345e910 in IPC::handleMessage&lt;Messages::WebPage::DidReceivePolicyDecision, WebKit::WebPage, WebKit::WebPage, void (WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::FrameIdentifierType&gt; &gt;, unsigned long, WebKit::PolicyDecision&amp;&amp;, WTF::Vector&lt;WebKit::SandboxExtension::Handle, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; const&amp;)&gt;(IPC::Connection&amp;, IPC::Decoder&amp;, WebKit::WebPage*, void (WebKit::WebPage::*)(WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::FrameIdentifierType&gt; &gt;, unsigned long, WebKit::PolicyDecision&amp;&amp;, WTF::Vector&lt;WebKit::SandboxExtension::Handle, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; const&amp;)) (connection=..., decoder=..., object=0x7f28070c0d80, function=(void (WebKit::WebPage::*)(class WebKit::WebPage * const, class WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::FrameIdentifierType&gt; &gt;, unsigned long, struct WebKit::PolicyDecision &amp;&amp;, const class WTF::Vector&lt;WebKit::SandboxExtension::Handle, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; &amp;)) 0x7f282485e5c0 &lt;WebKit::WebPage::didReceivePolicyDecision(WebCore::ProcessQualified&lt;WTF::ObjectIdentifier&lt;WebCore::FrameIdentifierType&gt; &gt;, unsigned long, WebKit::PolicyDecision&amp;&amp;, WTF::Vector&lt;WebKit::SandboxExtension::Handle, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc&gt; const&amp;)&gt;) at /app/webkit/Source/WebKit/Platform/IPC/HandleMessage.h:236
#52 0x00007f2823454da6 in WebKit::WebPage::didReceiveWebPageMessage(IPC::Connection&amp;, IPC::Decoder&amp;) (this=0x7f28070c0d80, connection=..., decoder=...) at DerivedSources/WebKit/WebPageMessageReceiver.cpp:583
#53 0x00007f2824863b23 in WebKit::WebPage::didReceiveMessage(IPC::Connection&amp;, IPC::Decoder&amp;) (this=0x7f28070c0d80, connection=..., decoder=...) at /app/webkit/Source/WebKit/WebProcess/WebPage/WebPage.cpp:5601
#54 0x00007f2823ca3563 in IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&amp;, IPC::Decoder&amp;) (this=0x7f2807030138, connection=..., decoder=...) at /app/webkit/Source/WebKit/Platform/IPC/MessageReceiverMap.cpp:129
#55 0x00007f282446b271 in WebKit::WebProcess::didReceiveMessage(IPC::Connection&amp;, IPC::Decoder&amp;) (this=0x7f2807030100, connection=..., decoder=...) at /app/webkit/Source/WebKit/WebProcess/WebProcess.cpp:931
#56 0x00007f2823c775ea in IPC::Connection::dispatchMessage(IPC::Decoder&amp;) (this=0x7f280705c1d0, decoder=...) at /app/webkit/Source/WebKit/Platform/IPC/Connection.cpp:1197
#57 0x00007f2823c7780a in IPC::Connection::dispatchMessage(std::unique_ptr&lt;IPC::Decoder, std::default_delete&lt;IPC::Decoder&gt; &gt;) (this=0x7f280705c1d0, message=std::unique_ptr&lt;IPC::Decoder&gt; = {...}) at /app/webkit/Source/WebKit/Platform/IPC/Connection.cpp:1245
#58 0x00007f2823c77a8d in IPC::Connection::dispatchOneIncomingMessage() (this=0x7f280705c1d0) at /app/webkit/Source/WebKit/Platform/IPC/Connection.cpp:1310
#59 0x00007f2823c7e02d in IPC::Connection::enqueueIncomingMessage(std::unique_ptr&lt;IPC::Decoder, std::default_delete&lt;IPC::Decoder&gt; &gt;)::$_15::operator()() const (this=0x7f2807090458) at /app/webkit/Source/WebKit/Platform/IPC/Connection.cpp:1159
#60 0x00007f2823c7dfe9 in WTF::Detail::CallableWrapper&lt;IPC::Connection::enqueueIncomingMessage(std::unique_ptr&lt;IPC::Decoder, std::default_delete&lt;IPC::Decoder&gt; &gt;)::$_15, void&gt;::call() (this=0x7f2807090450) at WTF/Headers/wtf/Function.h:53
#61 0x00007f281a252912 in WTF::Function&lt;void ()&gt;::operator()() const (this=0x7ffd6369e120) at WTF/Headers/wtf/Function.h:82
#62 0x00007f281ba9b67e in WTF::RunLoop::performWork() (this=0x7f28070140c0) at /app/webkit/Source/WTF/wtf/RunLoop.cpp:147
#63 0x00007f281bb521f9 in WTF::RunLoop::RunLoop()::$_1::operator()(void*) const (this=0x7f28070140c0, userData=0x7f28070140c0) at /app/webkit/Source/WTF/wtf/glib/RunLoopGLib.cpp:80
#64 0x00007f281bb521d5 in WTF::RunLoop::RunLoop()::$_1::__invoke(void*) (userData=0x7f28070140c0) at /app/webkit/Source/WTF/wtf/glib/RunLoopGLib.cpp:79
#65 0x00007f281bb52189 in WTF::RunLoop::$_0::operator()(_GSource*, int (*)(void*), void*) const (this=0x13c0510, source=0x13c0510, callback=0x7f281bb521c0 &lt;WTF::RunLoop::RunLoop()::$_1::__invoke(void*)&gt;, userData=0x7f28070140c0) at /app/webkit/Source/WTF/wtf/glib/RunLoopGLib.cpp:53
#66 0x00007f281bb51385 in WTF::RunLoop::$_0::__invoke(_GSource*, int (*)(void*), void*) (source=0x13c0510, callback=0x7f281bb521c0 &lt;WTF::RunLoop::RunLoop()::$_1::__invoke(void*)&gt;, userData=0x7f28070140c0) at /app/webkit/Source/WTF/wtf/glib/RunLoopGLib.cpp:45
#67 0x00007f2815720c37 in g_main_dispatch (context=0x1391ec0) at ../glib/gmain.c:3419
#68 g_main_context_dispatch (context=0x1391ec0) at ../glib/gmain.c:4137
#69 0x00007f2815777028 in g_main_context_iterate.constprop.0 (context=0x1391ec0, block=block@entry=1, dispatch=dispatch@entry=1, self=&lt;optimized out&gt;) at ../glib/gmain.c:4213
#70 0x00007f28157202af in g_main_loop_run (loop=0x13c04f0) at ../glib/gmain.c:4413
#71 0x00007f281bb51908 in WTF::RunLoop::run() () at /app/webkit/Source/WTF/wtf/glib/RunLoopGLib.cpp:108
#72 0x00007f2824908174 in WebKit::AuxiliaryProcessMainBase&lt;WebKit::WebProcess, true&gt;::run(int, char**) (this=0x7ffd6369e418, argc=4, argv=0x7ffd6369e5e8) at /app/webkit/Source/WebKit/Shared/AuxiliaryProcessMain.h:71
#73 0x00007f28248fd710 in WebKit::AuxiliaryProcessMain&lt;WebKit::WebProcessMainGtk&gt;(int, char**) (argc=4, argv=0x7ffd6369e5e8) at /app/webkit/Source/WebKit/Shared/AuxiliaryProcessMain.h:97
#74 0x00007f28248fbebf in WebKit::WebProcessMain(int, char**) (argc=4, argv=0x7ffd6369e5e8) at /app/webkit/Source/WebKit/WebProcess/gtk/WebProcessMainGtk.cpp:98
#75 0x0000000000201862 in main(int, char**) (argc=4, argv=0x7ffd6369e5e8) at /app/webkit/Source/WebKit/WebProcess/EntryPoint/unix/WebProcessMain.cpp:31</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1944963</commentid>
    <comment_count>2</comment_count>
    <who name="Xabier Rodríguez Calvar">calvaris</who>
    <bug_when>2023-03-29 07:13:25 -0700</bug_when>
    <thetext>Pull request: https://github.com/WebKit/WebKit/pull/12111</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1947880</commentid>
    <comment_count>3</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2023-04-11 02:42:53 -0700</bug_when>
    <thetext>Committed 262819@main (cc44de0d9d44): &lt;https://commits.webkit.org/262819@main&gt;

Reviewed commits have been landed. Closing PR #12111 and removing active labels.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1947881</commentid>
    <comment_count>4</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2023-04-11 02:43:17 -0700</bug_when>
    <thetext>&lt;rdar://problem/107874602&gt;</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>