Bug 114214

Summary: Crash in ScrollingCoordinator::mainThreadScrollingReasons() when going back
Product: WebKit Reporter: Beth Dakin <bdakin>
Component: Layout and RenderingAssignee: Beth Dakin <bdakin>
Status: RESOLVED FIXED    
Severity: Normal CC: andersca, bdakin, cmarcelo, jamesr, luiz, tonikitoo, webkit.review.bot
Priority: P2 Keywords: InRadar
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
Patch andersca: review+

Description Beth Dakin 2013-04-08 13:50:13 PDT
It's possible to hit the following crash when going back:

  1 com.apple.WebCore              0x7fff8ef4c02e WebCore::ScrollingCoordinator::mainThreadScrollingReasons() const + 0xae
   2 com.apple.WebCore              0x7fff8ea4dc4f non-virtual thunk to WebCore::FrameView::isRubberBandInProgress() const + 0x3f
   3 com.apple.WebCore              0x7fff8e4bad49 WebCore::ScrollView::updateScrollbars(WebCore::IntSize const&) + 0x889
   4 com.apple.WebCore              0x7fff8e445398 WebCore::ScrollView::setFrameRect(WebCore::IntRect const&) + 0x78
   5 com.apple.WebCore              0x7fff8e44528b WebCore::FrameView::setFrameRect(WebCore::IntRect const&) + 0x4b
   6 com.apple.WebCore              0x7fff8e6c5d8b WebCore::FrameLoader::open(WebCore::CachedFrameBase&) + 0x27b
   7 com.apple.WebCore              0x7fff8e6c5ae1 WebCore::CachedFrame::open() + 0x21
   8 com.apple.WebCore              0x7fff8e6c59e9 WebCore::CachedPage::restore(WebCore::Page*) + 0x19
   9 com.apple.WebCore              0x7fff8e32f74e WebCore::FrameLoader::commitProvisionalLoad() + 0x25e
  10 com.apple.WebCore              0x7fff8e397a29 WebCore::FrameLoader::continueLoadAfterNavigationPolicy(WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool) + 0x319
  11 com.apple.WebCore              0x7fff8e3976e0 WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy(void*, WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool) + 0x20
  12 com.apple.WebCore              0x7fff8e396d1a WebCore::PolicyChecker::checkNavigationPolicy(WebCore::ResourceRequest const&, WebCore::DocumentLoader*, WTF::PassRefPtr<WebCore::FormState>, void (*)(void*, WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool), void*) + 0x25a
  13 com.apple.WebCore              0x7fff8e3968be WebCore::FrameLoader::loadWithDocumentLoader(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::PassRefPtr<WebCore::FormState>) + 0x38e
  14 com.apple.WebCore              0x7fff8ea41141 WebCore::FrameLoader::loadDifferentDocumentItem(WebCore::HistoryItem*, WebCore::FrameLoadType, WebCore::FrameLoader::FormSubmissionCacheLoadPolicy) + 0x61
  15 com.apple.WebCore              0x7fff8e64a8cb WebCore::HistoryController::recursiveGoToItem(WebCore::HistoryItem*, WebCore::HistoryItem*, WebCore::FrameLoadType) + 0x1bb
  16 com.apple.WebCore              0x7fff8e64a483 WebCore::HistoryController::goToItem(WebCore::HistoryItem*, WebCore::FrameLoadType) + 0xd3
  17 com.apple.WebCore              0x7fff8e64a115 WebCore::Page::goToItem(WebCore::HistoryItem*, WebCore::FrameLoadType) + 0x55
  18 com.apple.WebKit2              0x7fff8f75d84b WebKit::WebPage::goForward(unsigned long long) + 0x27
  19 com.apple.WebKit2              0x7fff8f76d06e WebKit::WebPage::didReceiveWebPageMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&) + 0x532
  20 com.apple.WebKit2              0x7fff8f6c8349 CoreIPC::MessageReceiverMap::dispatchMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&) + 0x7d
  21 com.apple.WebKit2              0x7fff8f7978fa WebKit::WebProcess::didReceiveMessage(CoreIPC::Connection*, CoreIPC::MessageDecoder&) + 0x1c
  22 com.apple.WebKit2              0x7fff8f6a484b CoreIPC::Connection::dispatchMessage(WTF::PassOwnPtr<CoreIPC::MessageDecoder>) + 0x65
  23 com.apple.WebKit2              0x7fff8f6a5b34 CoreIPC::Connection::dispatchOneMessage() + 0x6a
  24 com.apple.WebCore              0x7fff8ef3211f WebCore::RunLoop::performWork() + 0x9f
  25 com.apple.WebCore              0x7fff8ef327af WebCore::RunLoop::performWork(void*) + 0x3f
  26 com.apple.CoreFoundation       0x7fff9a3dc1b1 

<rdar://problem/13208616>
Comment 1 Beth Dakin 2013-04-08 13:55:31 PDT
Created attachment 196952 [details]
Patch
Comment 2 Beth Dakin 2013-04-08 13:58:59 PDT
Thanks Anders!

http://trac.webkit.org/changeset/147949