Bug 128375

Summary:	IndexedDB: storage/websql/change-version-handle-reuse.html asserts at IDBTransactionBackend::~IDBTransactionBackend()
Product:	WebKit	Reporter:	zalan <zalan>
Component:	WebCore Misc.	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED DUPLICATE
Severity:	Normal	CC:	apavlov, beidson
Priority:	P2
Version:	528+ (Nightly build)
Hardware:	Unspecified
OS:	Unspecified

Description zalan 2014-02-07 08:24:53 PST

CRASHING TEST: storage/websql/change-version-handle-reuse.html

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.JavaScriptCore      	0x0000000107e3c2ca WTFCrash + 42 (Assertions.cpp:333)
1   com.apple.WebCore             	0x000000010a018c35 WebCore::IDBTransactionBackend::~IDBTransactionBackend() + 69 (IDBTransactionBackend.cpp:87)
2   com.apple.WebCore             	0x000000010a018be5 WebCore::IDBTransactionBackend::~IDBTransactionBackend() + 21 (IDBTransactionBackend.cpp:88)
3   com.apple.WebCore             	0x000000010a02d919 WTF::RefCounted<WebCore::IDBTransactionBackend>::deref() + 73 (RefCounted.h:147)
4   com.apple.WebCore             	0x000000010a02d8c9 void WTF::derefIfNotNull<WebCore::IDBTransactionBackend>(WebCore::IDBTransactionBackend*) + 57 (PassRefPtr.h:40)
5   com.apple.WebCore             	0x000000010a034d38 WTF::RefPtr<WebCore::IDBTransactionBackend>::~RefPtr() + 24 (RefPtr.h:55)
6   com.apple.WebCore             	0x000000010a02b285 WTF::RefPtr<WebCore::IDBTransactionBackend>::~RefPtr() + 21 (RefPtr.h:55)
7   com.apple.WebCore             	0x000000010a0cd59c WTF::KeyValuePair<WebCore::IDBTransactionBackend*, WTF::RefPtr<WebCore::IDBTransactionBackend> >::~KeyValuePair() + 28 (HashTraits.h:169)
8   com.apple.WebCore             	0x000000010a0cd575 WTF::KeyValuePair<WebCore::IDBTransactionBackend*, WTF::RefPtr<WebCore::IDBTransactionBackend> >::~KeyValuePair() + 21 (HashTraits.h:169)
9   com.apple.WebCore             	0x000000010a0cd508 WTF::HashTable<WebCore::IDBTransactionBackend*, WTF::KeyValuePair<WebCore::IDBTransactionBackend*, WTF::RefPtr<WebCore::IDBTransactionBackend> >, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<WebCore::IDBTransactionBackend*, WTF::RefPtr<WebCore::IDBTransactionBackend> > >, WTF::PtrHash<WebCore::IDBTransactionBackend*>, WTF::HashMap<WebCore::IDBTransactionBackend*, WTF::RefPtr<WebCore::IDBTransactionBackend>, WTF::PtrHash<WebCore::IDBTransactionBackend*>, WTF::HashTraits<WebCore::IDBTransactionBackend*>, WTF::HashTraits<WTF::RefPtr<WebCore::IDBTransactionBackend> > >::KeyValuePairTraits, WTF::HashTraits<WebCore::IDBTransactionBackend*> >::deallocateTable(WTF::KeyValuePair<WebCore::IDBTransactionBackend*, WTF::RefPtr<WebCore::IDBTransactionBackend> >*, int) + 88 (HashTable.h:1052)
10  com.apple.WebCore             	0x000000010a0d1b3c WTF::HashTable<WebCore::IDBTransactionBackend*, WTF::KeyValuePair<WebCore::IDBTransactionBackend*, WTF::RefPtr<WebCore::IDBTransactionBackend> >, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<WebCore::IDBTransactionBackend*, WTF::RefPtr<WebCore::IDBTransactionBackend> > >, WTF::PtrHash<WebCore::IDBTransactionBackend*>, WTF::HashMap<WebCore::IDBTransactionBackend*, WTF::RefPtr<WebCore::IDBTransactionBackend>, WTF::PtrHash<WebCore::IDBTransactionBackend*>, WTF::HashTraits<WebCore::IDBTransactionBackend*>, WTF::HashTraits<WTF::RefPtr<WebCore::IDBTransactionBackend> > >::KeyValuePairTraits, WTF::HashTraits<WebCore::IDBTransactionBackend*> >::~HashTable() + 60 (HashTable.h:353)
11  com.apple.WebCore             	0x000000010a0d1af5 WTF::HashTable<WebCore::IDBTransactionBackend*, WTF::KeyValuePair<WebCore::IDBTransactionBackend*, WTF::RefPtr<WebCore::IDBTransactionBackend> >, WTF::KeyValuePairKeyExtractor<WTF::KeyValuePair<WebCore::IDBTransactionBackend*, WTF::RefPtr<WebCore::IDBTransactionBackend> > >, WTF::PtrHash<WebCore::IDBTransactionBackend*>, WTF::HashMap<WebCore::IDBTransactionBackend*, WTF::RefPtr<WebCore::IDBTransactionBackend>, WTF::PtrHash<WebCore::IDBTransactionBackend*>, WTF::HashTraits<WebCore::IDBTransactionBackend*>, WTF::HashTraits<WTF::RefPtr<WebCore::IDBTransactionBackend> > >::KeyValuePairTraits, WTF::HashTraits<WebCore::IDBTransactionBackend*> >::~HashTable() + 21 (HashTable.h:357)
12  com.apple.WebCore             	0x000000010a0d1ad5 WTF::HashMap<WebCore::IDBTransactionBackend*, WTF::RefPtr<WebCore::IDBTransactionBackend>, WTF::PtrHash<WebCore::IDBTransactionBackend*>, WTF::HashTraits<WebCore::IDBTransactionBackend*>, WTF::HashTraits<WTF::RefPtr<WebCore::IDBTransactionBackend> > >::~HashMap() + 21 (HashMap.h:36)
13  com.apple.WebCore             	0x000000010a0c9f65 WTF::HashMap<WebCore::IDBTransactionBackend*, WTF::RefPtr<WebCore::IDBTransactionBackend>, WTF::PtrHash<WebCore::IDBTransactionBackend*>, WTF::HashTraits<WebCore::IDBTransactionBackend*>, WTF::HashTraits<WTF::RefPtr<WebCore::IDBTransactionBackend> > >::~HashMap() + 21 (HashMap.h:36)
14  com.apple.WebCore             	0x000000010a0c9389 WebCore::IDBTransactionCoordinator::~IDBTransactionCoordinator() + 89 (IDBTransactionCoordinator.cpp:47)
15  com.apple.WebCore             	0x000000010a0c9325 WebCore::IDBTransactionCoordinator::~IDBTransactionCoordinator() + 21 (IDBTransactionCoordinator.cpp:47)
16  com.apple.WebCore             	0x000000010a0c92f9 WebCore::IDBTransactionCoordinator::~IDBTransactionCoordinator() + 25 (IDBTransactionCoordinator.cpp:46)
17  com.apple.WebCore             	0x000000010aa20f7e void WTF::deleteOwnedPtr<WebCore::IDBTransactionCoordinator>(WebCore::IDBTransactionCoordinator*) + 46 (OwnPtrCommon.h:52)
18  com.apple.WebCore             	0x000000010aa20f48 WTF::OwnPtr<WebCore::IDBTransactionCoordinator>::~OwnPtr() + 24 (OwnPtr.h:47)
19  com.apple.WebCore             	0x000000010aa15205 WTF::OwnPtr<WebCore::IDBTransactionCoordinator>::~OwnPtr() + 21 (OwnPtr.h:47)
20  com.apple.WebCore             	0x000000010aa0acc7 WebCore::IDBDatabaseBackend::~IDBDatabaseBackend() + 215 (IDBDatabaseBackend.cpp:131)
21  com.apple.WebCore             	0x000000010aa0abe5 WebCore::IDBDatabaseBackend::~IDBDatabaseBackend() + 21 (IDBDatabaseBackend.cpp:131)
22  com.apple.WebCore             	0x0000000109bbe0b9 WTF::RefCounted<WebCore::IDBDatabaseBackend>::deref() + 73 (RefCounted.h:147)
23  com.apple.WebCore             	0x0000000109bbe069 void WTF::derefIfNotNull<WebCore::IDBDatabaseBackend>(WebCore::IDBDatabaseBackend*) + 57 (PassRefPtr.h:40)
24  com.apple.WebCore             	0x0000000109bbe1f8 WTF::RefPtr<WebCore::IDBDatabaseBackend>::~RefPtr() + 24 (RefPtr.h:55)
25  com.apple.WebCore             	0x0000000109bbd085 WTF::RefPtr<WebCore::IDBDatabaseBackend>::~RefPtr() + 21 (RefPtr.h:55)
26  com.apple.WebCore             	0x000000010a38f8b1 WebCore::IDBDatabase::~IDBDatabase() + 145 (IDBDatabase.cpp:76)
27  com.apple.WebCore             	0x000000010a38f7e5 WebCore::IDBDatabase::~IDBDatabase() + 21 (IDBDatabase.cpp:76)
28  com.apple.WebCore             	0x000000010a38f7b9 WebCore::IDBDatabase::~IDBDatabase() + 25 (IDBDatabase.cpp:74)
29  com.apple.WebCore             	0x0000000109bbdfb3 WTF::RefCounted<WebCore::IDBDatabase>::deref() + 83 (RefCounted.h:147)
30  com.apple.WebCore             	0x0000000109bbdf4f void WTF::derefIfNotNull<WebCore::IDBDatabase>(WebCore::IDBDatabase*) + 63 (PassRefPtr.h:40)
31  com.apple.WebCore             	0x0000000109bbdf08 WTF::RefPtr<WebCore::IDBDatabase>::~RefPtr() + 24 (RefPtr.h:55)
32  com.apple.WebCore             	0x0000000109bbd475 WTF::RefPtr<WebCore::IDBDatabase>::~RefPtr() + 21 (RefPtr.h:55)
33  com.apple.WebCore             	0x000000010aa629d3 WebCore::IDBAny::~IDBAny() + 163 (IDBAny.cpp:65)
34  com.apple.WebCore             	0x000000010aa62925 WebCore::IDBAny::~IDBAny() + 21 (IDBAny.cpp:65)
35  com.apple.WebCore             	0x00000001094ce08f WTF::RefCounted<WebCore::IDBAny>::deref() + 79 (RefCounted.h:147)
36  com.apple.WebCore             	0x00000001094ce02f void WTF::derefIfNotNull<WebCore::IDBAny>(WebCore::IDBAny*) + 63 (PassRefPtr.h:40)
37  com.apple.WebCore             	0x0000000109bbdb68 WTF::RefPtr<WebCore::IDBAny>::~RefPtr() + 24 (RefPtr.h:55)
38  com.apple.WebCore             	0x0000000109bbdb45 WTF::RefPtr<WebCore::IDBAny>::~RefPtr() + 21 (RefPtr.h:55)
39  com.apple.WebCore             	0x000000010ab6f536 WebCore::IDBRequest::~IDBRequest() + 342 (IDBRequest.cpp:94)
40  com.apple.WebCore             	0x0000000109bbc1fd WebCore::IDBOpenDBRequest::~IDBOpenDBRequest() + 93 (IDBOpenDBRequest.cpp:59)
41  com.apple.WebCore             	0x0000000109bbc135 WebCore::IDBOpenDBRequest::~IDBOpenDBRequest() + 21 (IDBOpenDBRequest.cpp:59)
42  com.apple.WebCore             	0x0000000109bbc109 WebCore::IDBOpenDBRequest::~IDBOpenDBRequest() + 25 (IDBOpenDBRequest.cpp:58)
43  com.apple.WebCore             	0x00000001094ce203 WTF::RefCounted<WebCore::IDBCallbacks>::deref() + 83 (RefCounted.h:147)
44  com.apple.WebCore             	0x0000000109bbd86c WebCore::IDBRequest::derefEventTarget() + 28 (IDBRequest.h:140)
45  com.apple.WebCore             	0x0000000109bbd8cc non-virtual thunk to WebCore::IDBRequest::derefEventTarget() + 28 (IDBOpenDBRequest.cpp:140)
46  com.apple.WebCore             	0x00000001091c5a16 WebCore::EventTarget::deref() + 22 (EventTarget.h:114)
47  com.apple.WebCore             	0x00000001092a6a40 WebCore::JSEventTarget::releaseImpl() + 32 (JSEventTarget.h:55)
48  com.apple.WebCore             	0x00000001097efb91 WebCore::JSIDBOpenDBRequestOwner::finalize(JSC::Handle<JSC::Unknown>, void*) + 113 (JSIDBOpenDBRequest.cpp:231)
49  com.apple.JavaScriptCore      	0x0000000107de829d JSC::WeakBlock::finalize(JSC::WeakImpl*) + 189 (WeakSetInlines.h:52)
50  com.apple.JavaScriptCore      	0x0000000107de7c1e JSC::WeakBlock::sweep() + 158 (WeakBlock.cpp:77)
51  com.apple.JavaScriptCore      	0x0000000107def3f0 JSC::WeakSet::sweep() + 64 (WeakSet.cpp:46)
52  com.apple.JavaScriptCore      	0x0000000107c5630d JSC::MarkedBlock::sweep(JSC::MarkedBlock::SweepMode) + 109 (MarkedBlock.cpp:111)
53  com.apple.JavaScriptCore      	0x0000000107c5591a JSC::MarkedAllocator::tryAllocateHelper(unsigned long) + 250 (MarkedAllocator.cpp:54)
54  com.apple.JavaScriptCore      	0x0000000107c54312 JSC::MarkedAllocator::tryAllocate(unsigned long) + 114 (MarkedAllocator.cpp:93)
55  com.apple.JavaScriptCore      	0x0000000107c53c65 JSC::MarkedAllocator::allocateSlowCase(unsigned long) + 245 (MarkedAllocator.cpp:111)
56  com.apple.JavaScriptCore      	0x000000010774d22f JSC::MarkedAllocator::allocate(unsigned long) + 79 (MarkedAllocator.h:93)
57  com.apple.JavaScriptCore      	0x000000010777b119 JSC::MarkedSpace::allocateWithNormalDestructor(unsigned long) + 41 (MarkedSpace.h:242)
58  com.apple.JavaScriptCore      	0x000000010777b0d6 JSC::Heap::allocateWithNormalDestructor(unsigned long) + 118 (Heap.h:450)
59  com.apple.JavaScriptCore      	0x0000000107b6ef87 void* JSC::allocateCell<JSC::FunctionPrototype>(JSC::Heap&, unsigned long) + 151 (JSCellInlines.h:95)
60  com.apple.JavaScriptCore      	0x0000000107b6eedf void* JSC::allocateCell<JSC::FunctionPrototype>(JSC::Heap&) + 31 (JSCellInlines.h:109)
61  com.apple.JavaScriptCore      	0x0000000107b56473 JSC::FunctionPrototype::create(JSC::VM&, JSC::Structure*) + 35 (FunctionPrototype.h:34)
62  com.apple.JavaScriptCore      	0x0000000107b4c3eb JSC::JSGlobalObject::reset(JSC::JSValue) + 219 (JSGlobalObject.cpp:268)
63  com.apple.JavaScriptCore      	0x0000000107b4c2d4 JSC::JSGlobalObject::init(JSC::JSObject*) + 1076 (JSGlobalObject.cpp:206)
64  com.apple.WebCore             	0x0000000109e3b438 JSC::JSGlobalObject::finishCreation(JSC::VM&, JSC::JSObject*) + 120 (JSGlobalObject.h:292)
65  com.apple.WebCore             	0x0000000109e3af3a WebCore::JSDOMGlobalObject::finishCreation(JSC::VM&, JSC::JSObject*) + 58 (JSDOMGlobalObject.cpp:68)
66  com.apple.WebCore             	0x0000000109ece978 WebCore::JSDOMWindowBase::finishCreation(JSC::VM&, WebCore::JSDOMWindowShell*) + 72 (JSDOMWindowBase.cpp:72)
67  com.apple.WebCore             	0x0000000109ed8de4 WebCore::JSDOMWindow::create(JSC::VM&, JSC::Structure*, WTF::PassRefPtr<WebCore::DOMWindow>, WebCore::JSDOMWindowShell*) + 164 (JSDOMWindow.h:41)
68  com.apple.WebCore             	0x0000000109ed87c7 WebCore::JSDOMWindowShell::setWindow(WTF::PassRefPtr<WebCore::DOMWindow>) + 343 (JSDOMWindowShell.cpp:86)
69  com.apple.WebCore             	0x000000010a8fa453 WebCore::ScriptController::clearWindowShell(WebCore::DOMWindow*, bool) + 323 (ScriptController.cpp:193)
70  com.apple.WebCore             	0x000000010990a3de WebCore::FrameLoader::clear(WebCore::Document*, bool, bool, bool) + 430 (FrameLoader.cpp:624)
71  com.apple.WebCore             	0x0000000109632e5f WebCore::DocumentWriter::begin(WebCore::URL const&, bool, WebCore::Document*) + 495 (DocumentWriter.cpp:143)
72  com.apple.WebCore             	0x00000001095faa7a WebCore::DocumentLoader::commitData(char const*, unsigned long) + 106 (DocumentLoader.cpp:792)
73  com.apple.WebKit2             	0x0000000105ba2d80 WebKit::WebFrameLoaderClient::committedLoad(WebCore::DocumentLoader*, char const*, int) + 96 (WebFrameLoaderClient.cpp:860)
74  com.apple.WebCore             	0x00000001095fcac0 WebCore::DocumentLoader::commitLoad(char const*, int) + 208 (DocumentLoader.cpp:773)
75  com.apple.WebCore             	0x00000001095fd0e8 WebCore::DocumentLoader::dataReceived(WebCore::CachedResource*, char const*, int) + 1064 (DocumentLoader.cpp:895)
76  com.apple.WebCore             	0x000000010923e1c1 WebCore::CachedRawResource::notifyClientsDataWasReceived(char const*, unsigned int) + 161 (CachedRawResource.cpp:112)
77  com.apple.WebCore             	0x000000010923e09d WebCore::CachedRawResource::addDataBuffer(WebCore::ResourceBuffer*) + 221 (CachedRawResource.cpp:69)
78  com.apple.WebCore             	0x000000010aad095e WebCore::SubresourceLoader::didReceiveDataOrBuffer(char const*, int, WTF::PassRefPtr<WebCore::SharedBuffer>, long long, WebCore::DataPayloadType) + 478 (SubresourceLoader.cpp:274)
79  com.apple.WebCore             	0x000000010aad0a8b WebCore::SubresourceLoader::didReceiveBuffer(WTF::PassRefPtr<WebCore::SharedBuffer>, long long, WebCore::DataPayloadType) + 75 (SubresourceLoader.cpp:255)
80  com.apple.WebCore             	0x000000010a8acb4c WebCore::ResourceLoader::didReceiveBuffer(WebCore::ResourceHandle*, WTF::PassRefPtr<WebCore::SharedBuffer>, int) + 140 (ResourceLoader.cpp:511)
81  com.apple.WebCore             	0x000000010ad0ab79 -[WebCoreResourceHandleAsDelegate connection:didReceiveData:lengthReceived:] + 249 (WebCoreResourceHandleAsDelegate.mm:224)
82  com.apple.Foundation          	0x00007fff93892d88 __65-[NSURLConnectionInternal _withConnectionAndDelegate:onlyActive:]_block_invoke_0 + 28
83  com.apple.Foundation          	0x00007fff93892ccc -[NSURLConnectionInternal _withConnectionAndDelegate:onlyActive:] + 227
84  com.apple.Foundation          	0x00007fff93892bc8 -[NSURLConnectionInternal _withActiveConnectionAndDelegate:] + 63
85  com.apple.Foundation          	0x00007fff9389577b _NSURLConnectionDidReceiveData_LengthReceived + 86
86  com.apple.CFNetwork           	0x00007fff8d3f5914 ___delegate_didReceiveDataArray_block_invoke_0 + 132
87  com.apple.CFNetwork           	0x00007fff8d3e860a ___withDelegateAsync_block_invoke_0 + 90
88  com.apple.CFNetwork           	0x00007fff8d478fea __block_global_1 + 28
89  com.apple.CoreFoundation      	0x00007fff90341154 CFArrayApplyFunction + 68
90  com.apple.CFNetwork           	0x00007fff8d3d9374 RunloopBlockContext::perform() + 124
91  com.apple.CFNetwork           	0x00007fff8d3d924b MultiplexerSource::perform() + 221
92  com.apple.CoreFoundation      	0x00007fff90322b31 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
93  com.apple.CoreFoundation      	0x00007fff90322455 __CFRunLoopDoSources0 + 245
94  com.apple.CoreFoundation      	0x00007fff903457f5 __CFRunLoopRun + 789
95  com.apple.CoreFoundation      	0x00007fff903450e2 CFRunLoopRunSpecific + 290
96  com.apple.HIToolbox           	0x00007fff8e980eb4 RunCurrentEventLoopInMode + 209
97  com.apple.HIToolbox           	0x00007fff8e980c52 ReceiveNextEventCommon + 356
98  com.apple.HIToolbox           	0x00007fff8e980ae3 BlockUntilNextEventMatchingListInMode + 62
99  com.apple.AppKit              	0x00007fff94a9f533 _DPSNextEvent + 685
100 com.apple.AppKit              	0x00007fff94a9edf2 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 128
101 com.apple.AppKit              	0x00007fff94a961a3 -[NSApplication run] + 517
102 com.apple.WebKit2             	0x0000000105b19fbf WebKit::WebContentProcessMainDelegate::startRunLoop() + 95 (WebContentProcessMain.mm:186)
103 com.apple.WebKit2             	0x0000000105b18fff int WebKit::ChildProcessMain<WebKit::WebProcess, WebKit::WebContentProcessMainDelegate>(int, char**) + 671 (ChildProcessEntryPoint.h:93)
104 com.apple.WebKit2             	0x0000000105b18d4b WebContentProcessMain + 27 (WebContentProcessMain.mm:197)
105 com.apple.WebProcess          	0x000000010564ccc1 WebKit::BootstrapMain(int, char**) + 465
106 com.apple.WebProcess          	0x000000010564cae2 main + 34
107 libdyld.dylib                 	0x00007fff8e6ff7e1 start + 1

Comment 1 zalan 2014-02-07 08:26:23 PST

This might be a dupe of bug 128341

Comment 2 Brady Eidson 2014-02-07 09:07:51 PST

(In reply to comment #1)
> This might be a dupe of bug 128341

Yup - We don't need to keep filing the same bug.
This has a more complete backtrace, though.  Very nice.

*** This bug has been marked as a duplicate of bug 128341 ***