Bug 109225 – [Gtk] WebKit2 crashes when loading pages with http 304 code.

• Component: WebKitGTK
• Status: RESOLVED DUPLICATE

[arno.]

Hi, when loading a page with a 304 code from cache, MiniBrowser crashes.
This happens because in that case, receiveData happens before receiveResponse.
Then, in that case, setCertificateToMainResource is called before a response has been set to the webresource. So, webkitURIResponseSetCertificateInfo(webkit_web_resource_get_response(priv->mainResource.get()), results in a null parameter being used in webkitURIResponseSetCertificateInfo).

Here is the crash backtrace:

#0  0xb6918bd9 in webkitURIResponseSetCertificateInfo(_WebKitURIResponse*, WebKit::WebCertificateInfo*) ()
   from /home/arno/webkit/WebKit.upstream/WebKitBuild/Release/.libs/libwebkit2gtk-3.0.so.0
#1  0xb6922c45 in setCertificateToMainResource(_WebKitWebView*) () from /home/arno/webkit/WebKit.upstream/WebKitBuild/Release/.libs/libwebkit2gtk-3.0.so.0
#2  0xb6928dcd in webkitWebViewLoadChanged(_WebKitWebView*, WebKitLoadEvent) () from /home/arno/webkit/WebKit.upstream/WebKitBuild/Release/.libs/libwebkit2gtk-3.0.so.0
#3  0xb690a34b in didCommitLoadForFrame(OpaqueWKPage const*, OpaqueWKFrame const*, void const*, void const*) ()
   from /home/arno/webkit/WebKit.upstream/WebKitBuild/Release/.libs/libwebkit2gtk-3.0.so.0
#4  0xb6978912 in WebKit::WebLoaderClient::didCommitLoadForFrame(WebKit::WebPageProxy*, WebKit::WebFrameProxy*, WebKit::APIObject*) ()
   from /home/arno/webkit/WebKit.upstream/WebKitBuild/Release/.libs/libwebkit2gtk-3.0.so.0
#5  0xb698c20e in WebKit::WebPageProxy::didCommitLoadForFrame(unsigned long long, WTF::String const&, bool, unsigned int, WebKit::PlatformCertificateInfo const&, CoreIPC::MessageDecoder&) () from /home/arno/webkit/WebKit.upstream/WebKitBuild/Release/.libs/libwebkit2gtk-3.0.so.0
#6  0xb6a4aeb8 in void CoreIPC::handleMessageVariadic<Messages::WebPageProxy::DidCommitLoadForFrame, WebKit::WebPageProxy, void (WebKit::WebPageProxy::*)(unsigned long long, WTF::String const&, bool, unsigned int, WebKit::PlatformCertificateInfo const&, CoreIPC::MessageDecoder&)>(CoreIPC::MessageDecoder&, WebKit::WebPageProxy*, void (WebKit::WebPageProxy::*)(unsigned long long, WTF::String const&, bool, unsigned int, WebKit::PlatformCertificateInfo const&, CoreIPC::MessageDecoder&)) ()
   from /home/arno/webkit/WebKit.upstream/WebKitBuild/Release/.libs/libwebkit2gtk-3.0.so.0
#7  0xb6a4a458 in WebKit::WebPageProxy::didReceiveWebPageProxyMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&) ()
   from /home/arno/webkit/WebKit.upstream/WebKitBuild/Release/.libs/libwebkit2gtk-3.0.so.0
#8  0xb69850a7 in WebKit::WebPageProxy::didReceiveMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&) ()
   from /home/arno/webkit/WebKit.upstream/WebKitBuild/Release/.libs/libwebkit2gtk-3.0.so.0
#9  0xb69a230c in WebKit::WebProcessProxy::didReceiveMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&) ()
   from /home/arno/webkit/WebKit.upstream/WebKitBuild/Release/.libs/libwebkit2gtk-3.0.so.0

[arno.]

loading the above url twice in a row will crash MiniBrowser.

[arno.]

Created attachment 187164 [details]
crashtest source

[Sergio Villar Senin]

Although this was reported first, I'm setting this as dup of the other because there is a patch available

*** This bug has been marked as a duplicate of bug 109287 ***