<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>41903</bug_id>
          
          <creation_ts>2010-07-08 14:20:17 -0700</creation_ts>
          <short_desc>[GTK] plugins/return-negative-one-from-write.html crashes</short_desc>
          <delta_ts>2011-03-10 10:46:35 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKitGTK</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>PC</rep_platform>
          <op_sys>OS X 10.5</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Xan Lopez">xan.lopez</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>darin</cc>
    
    <cc>mrobinson</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>248538</commentid>
    <comment_count>0</comment_count>
    <who name="Xan Lopez">xan.lopez</who>
    <bug_when>2010-07-08 14:20:17 -0700</bug_when>
    <thetext>http://trac.webkit.org/changeset/61768 did some refactoring that added a new ASSERT in the setDefersLoading method. This is causing a new crash, which according to the commit is likely to be a bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>248539</commentid>
    <comment_count>1</comment_count>
    <who name="Xan Lopez">xan.lopez</who>
    <bug_when>2010-07-08 14:22:18 -0700</bug_when>
    <thetext>Trace:

Thread 1 (Thread 5246):
#0  0x00007f4469a14603 in WebCore::ResourceHandle::setDefersLoading (
    this=0x2e12350, defers=true)
    at ../../WebCore/platform/network/ResourceHandle.cpp:150
#1  0x00007f44698f0d2b in WebCore::ResourceLoader::setDefersLoading (
    this=0x2deb440, defers=true)
    at ../../WebCore/loader/ResourceLoader.cpp:154
#2  0x00007f4469a3ff33 in WebCore::PluginStream::destroyStream (
    this=0x2d731a0) at ../../WebCore/plugins/PluginStream.cpp:271
#3  0x00007f4469a3fc63 in WebCore::PluginStream::destroyStream (
    this=0x2d731a0, reason=1) at ../../WebCore/plugins/PluginStream.cpp:238
#4  0x00007f4469a3fb83 in WebCore::PluginStream::cancelAndDestroyStream (
    this=0x2d731a0, reason=1) at ../../WebCore/plugins/PluginStream.cpp:223
#5  0x00007f4469a40609 in WebCore::PluginStream::deliverData (this=0x2d731a0)
    at ../../WebCore/plugins/PluginStream.cpp:359
#6  0x00007f4469a40c0c in WebCore::PluginStream::didReceiveData (
    this=0x2d731a0, loader=0x2deb440, data=0x2e02dc0 &quot;T&quot;, length=8)
    at ../../WebCore/plugins/PluginStream.cpp:429
#7  0x00007f44698e81d7 in WebCore::NetscapePlugInStreamLoader::didReceiveData
    (this=0x2deb440, data=0x2e02dc0 &quot;T&quot;, length=8, lengthReceived=0, 
    allAtOnce=false) at ../../WebCore/loader/NetscapePlugInStreamLoader.cpp:93
#8  0x00007f44698f1ce3 in WebCore::ResourceLoader::didReceiveData (
    this=0x2deb440, data=0x2e02dc0 &quot;T&quot;, length=8, lengthReceived=0)
    at ../../WebCore/loader/ResourceLoader.cpp:431
#9  0x00007f4469de8b17 in parseDataUrl (callbackData=0x2e12350)
    at ../../WebCore/platform/network/soup/ResourceHandleSoup.cpp:412
#10 0x00007f446521b01b in g_timeout_dispatch (source=0x2e09650, callback=0, 
    user_data=0x7f44642f1e20) at /tmp/buildd/glib2.0-2.22.4/glib/gmain.c:3396
#11 0x00007f446521a90e in g_main_dispatch (context=0x473e60)
    at /tmp/buildd/glib2.0-2.22.4/glib/gmain.c:1960
#12 IA__g_main_context_dispatch (context=0x473e60)
    at /tmp/buildd/glib2.0-2.22.4/glib/gmain.c:2513
#13 0x00007f446521e2c8 in g_main_context_iterate (context=0x473e60, 
    block=&lt;value optimized out&gt;, dispatch=&lt;value optimized out&gt;, 
    self=&lt;value optimized out&gt;)
    at /tmp/buildd/glib2.0-2.22.4/glib/gmain.c:2591
#14 0x00007f446521e725 in IA__g_main_loop_run (loop=0x2daaab0)
    at /tmp/buildd/glib2.0-2.22.4/glib/gmain.c:2799
#15 0x00007f446709b287 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#16 0x00000000004158d3 in runTest (testPathOrURL=...)
    at ../../WebKitTools/DumpRenderTree/gtk/DumpRenderTree.cpp:528
#17 0x0000000000416f97 in main (argc=2, argv=0x7fffffffd568)
    at ../../WebKitTools/DumpRenderTree/gtk/DumpRenderTree.cpp:991</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>365304</commentid>
    <comment_count>2</comment_count>
    <who name="Martin Robinson">mrobinson</who>
    <bug_when>2011-03-10 10:44:46 -0800</bug_when>
    <thetext>Committed r80736: &lt;http://trac.webkit.org/changeset/80736&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>365306</commentid>
    <comment_count>3</comment_count>
    <who name="Martin Robinson">mrobinson</who>
    <bug_when>2011-03-10 10:46:35 -0800</bug_when>
    <thetext>This was not crashing locally, so I&apos;m going to unskip it. I believe that when this was skipped we did not have an implementation of setDefersLoading. If it continues to crash I&apos;ll re-open and re-skip.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>