[WinCairo] REGRESSION(r245186) Crash in NetworkCache::IOChannel::read in http/tests/IndexedDB some tests

• Component: WebKit2
• Status: RESOLVED FIXED

[Fujii Hironori]

[WinCairo] REGRESSION(r245186) Crash in NetworkCache::IOChannel::read in http/tests/IndexedDB some tests

  http/tests/IndexedDB/collect-IDB-objects.https.html [ Crash ]
  http/tests/IndexedDB/storage-limit-1.https.html [ Crash ]
  http/tests/IndexedDB/storage-limit-2.https.html [ Crash ]
  http/tests/IndexedDB/storage-limit.https.html [ Crash ]

Backtrace:

>  # Child-SP          RetAddr           Call Site
> 00 0000000a`a00ff8b0 00007ff9`18244e8e WTF!WTFCrash(void)+0x9 [C:\webkit\ga\Source\WTF\wtf\Assertions.cpp @ 310]
> 01 (Inline Function) --------`-------- WebKit2!WTF::VectorBufferBase<unsigned char>::allocateBuffer+0xcc [C:\webkit\ga\WebKitBuild\Release\WTF\Headers\wtf\Vector.h @ 290]
> 02 (Inline Function) --------`-------- WebKit2!WTF::VectorBuffer<unsigned char,0>::VectorBuffer+0xdd [C:\webkit\ga\WebKitBuild\Release\WTF\Headers\wtf\Vector.h @ 396]
> 03 (Inline Function) --------`-------- WebKit2!WTF::Vector<unsigned char,0,WTF::CrashOnOverflow,16>::Vector+0xdd [C:\webkit\ga\WebKitBuild\Release\WTF\Headers\wtf\Vector.h @ 632]
> 04 (Inline Function) --------`-------- WebKit2!WebKit::NetworkCache::IOChannel::read::<unnamed-tag>::operator()+0xe1 [C:\webkit\ga\Source\WebKit\NetworkProcess\cache\NetworkCacheIOChannelCurl.cpp @ 77]
> 05 0000000a`a00ff8e0 00007ff9`3a17f1d4 WebKit2!WTF::Detail::CallableWrapper<`lambda at ..\..\Source\WebKit\NetworkProcess\cache\NetworkCacheIOChannelCurl.cpp:76:20',void>::call(void)+0xfe [C:\webkit\ga\WebKitBuild\Release\WTF\Headers\wtf\Function.h @ 52]
> 06 (Inline Function) --------`-------- WTF!WTF::Function<void +0x9 [C:\webkit\ga\Source\WTF\wtf\Function.h @ 79]
> 07 0000000a`a00ff970 00007ff9`3a1dd898 WTF!WTF::RunLoop::performWork(void)+0xc4 [C:\webkit\ga\Source\WTF\wtf\RunLoop.cpp @ 106]
> 08 (Inline Function) --------`-------- WTF!WTF::RunLoop::wndProc+0x18 [C:\webkit\ga\Source\WTF\wtf\win\RunLoopWin.cpp @ 56]
> 09 0000000a`a00ff9e0 00007ff9`5e82ca66 WTF!WTF::RunLoop::RunLoopWndProc(struct HWND__ * hWnd = 0x00000000`00b00e32, unsigned int message = 0x401, unsigned int64 wParam = 0x00000151`1ea06010, int64 lParam = 0n0)+0x38 [C:\webkit\ga\Source\WTF\wtf\win\RunLoopWin.cpp @ 39]
> 0a 0000000a`a00ffa30 00007ff9`5e82c582 USER32!UserCallWinProcCheckWow+0x266
> 0b 0000000a`a00ffbb0 00007ff9`3a1dd9fb USER32!DispatchMessageWorker+0x1b2
> 0c 0000000a`a00ffc30 00007ff9`182327c2 WTF!WTF::RunLoop::run(void)+0x4b [C:\webkit\ga\Source\WTF\wtf\win\RunLoopWin.cpp @ 69]
> 0d 0000000a`a00ffcb0 00007ff7`6847100a WebKit2!WebKit::AuxiliaryProcessMain<WebKit::NetworkProcess,WebKit::AuxiliaryProcessMainBase>(int argc = <Value unavailable error>, char ** argv = <Value unavailable error>)+0x92 [C:\webkit\ga\Source\WebKit\Shared\unix\AuxiliaryProcessMain.h @ 66]
> 0e 0000000a`a00ffd50 00007ff7`68471210 WebKitNetworkProcess!main(int argc = <Value unavailable error>, char ** argv = <Value unavailable error>)+0xa [C:\webkit\ga\Source\WebKit\NetworkProcess\EntryPoint\win\NetworkProcessMain.cpp @ 34]
> 0f (Inline Function) --------`-------- WebKitNetworkProcess!invoke_main+0x22 [d:\agent\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl @ 78]
> 10 0000000a`a00ffd80 00007ff9`5f1e7974 WebKitNetworkProcess!__scrt_common_main_seh(void)+0x10c [d:\agent\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl @ 288]
> 11 0000000a`a00ffdc0 00007ff9`6152a271 KERNEL32!BaseThreadInitThunk+0x14
> 12 0000000a`a00ffdf0 00000000`00000000 ntdll!RtlUserThreadStart+0x21

[Fujii Hironori]

Created attachment 370024 [details]
CrashLog_3514_2019-05-16_12-35-28-438.txt

[Fujii Hironori]

Created attachment 370670 [details]
Patch

[Fujii Hironori]

Comment on attachment 370670 [details]
Patch

Clearing flags on attachment: 370670

Committed r245847: <https://trac.webkit.org/changeset/245847>

[Fujii Hironori]

All reviewed patches have been landed.  Closing bug.

[Radar WebKit Bug Importer]

<rdar://problem/51208106>