Bug 304272

Summary:	[GTK][WPE] WebKit::NetworkDataTaskSoup::resume related crash (affecting http/tests/webrtc/filtering-ice-candidate-same-origin-frame2.html, imported/w3c/web-platform-tests/html/anonymous-iframe/local-storage.tentative.https.window.html)
Product:	WebKit	Reporter:	Nikolas Zimmermann <zimmermann>
Component:	New Bugs	Assignee:	Lauro Moura <lmoura>
Status:	RESOLVED CONFIGURATION CHANGED
Severity:	Normal	CC:	fujii
Priority:	P2
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Linux

Nikolas Zimmermann

Reported 2025-12-16 13:37:49 PST

The bot wpe-debug completed 160 runs on the interval [300498@main-304498@main] Frecuency of results for test: http/tests/webrtc/filtering-ice-candidate-same-origin-frame2.html 154 times [96.2%] -> NOERROR 6 times [3.8%] -> CRASH The bot gtk-debug completed 114 runs on the interval [300485@main-304475@main] Frecuency of results for test: http/tests/webrtc/filtering-ice-candidate-same-origin-frame2.html 97 times [85.1%] -> NOERROR 17 times [14.9%] -> CRASH The bot wpe-debug completed 157 runs on the interval [300498@main-304498@main] Frecuency of results for test: imported/w3c/web-platform-tests/html/anonymous-iframe/local-storage.tentative.https.window.html 142 times [90.4%] -> NOERROR 12 times [7.6%] -> TEXT PASS 3 times [1.9%] -> TEXT The bot gtk-debug completed 108 runs on the interval [300485@main-304475@main] Frecuency of results for test: imported/w3c/web-platform-tests/html/anonymous-iframe/local-storage.tentative.https.window.html 95 times [88.0%] -> NOERROR 7 times [6.5%] -> TEXT PASS 5 times [4.6%] -> TEXT 1 times [0.9%] -> CRASH Backtraces when it crashes: Thread 1 (Thread 0x7f1547ea6ec0 (LWP 1817966)): #0 0x00007f154f3106b1 in g_logv () at /lib/x86_64-linux-gnu/libglib-2.0.so.0 #1 0x00007f154f310963 in g_log () at /lib/x86_64-linux-gnu/libglib-2.0.so.0 #2 0x00007f155532f9bc in g_object_ref () at /lib/x86_64-linux-gnu/libgobject-2.0.so.0 #3 0x00007f154c8db264 in soup_session_append_queue_item (session=session@entry=0x559152e51c60, msg=msg@entry=0x559153962ab0, async=async@entry=1, cancellable=cancellable@entry=0x559153961ae0) at ../../../../../jhbuild/checkout/libsoup/libsoup/soup-session.c:1361 #4 0x00007f154c8deac0 in soup_session_preconnect_async (user_data=0x7f153e148680, callback=0x7f1565f1af2e <WebKit::NetworkDataTaskSoup::preconnectCallback(_SoupSession*, _GAsyncResult*, WebKit::NetworkDataTaskSoup*)>, cancellable=0x559153961ae0, io_priority=100, msg=0x559153962ab0, session=0x559152e51c60) at ../../../../../jhbuild/checkout/libsoup/libsoup/soup-session.c:3881 #5 soup_session_preconnect_async (session=0x559152e51c60, msg=0x559153962ab0, io_priority=100, cancellable=0x559153961ae0, callback=0x7f1565f1af2e <WebKit::NetworkDataTaskSoup::preconnectCallback(_SoupSession*, _GAsyncResult*, WebKit::NetworkDataTaskSoup*)>, user_data=0x7f153e148680) at ../../../../../jhbuild/checkout/libsoup/libsoup/soup-session.c:3865 #6 0x00007f1565f19c62 in WebKit::NetworkDataTaskSoup::resume (this=0x7f153e148680) at ../../../Source/WebKit/NetworkProcess/soup/NetworkDataTaskSoup.cpp:253 #7 0x00007f1565b90602 in WebKit::NetworkLoad::start (this=0x7f153c0c0c00) at ../../../Source/WebKit/NetworkProcess/NetworkLoad.cpp:87 #8 0x00007f1565c6cae0 in WebKit::PreconnectTask::start(WTF::CompletionHandler<void (WebCore::ResourceError const&, WebCore::NetworkLoadMetrics const&)>&&, WTF::Seconds) (this=0x7f153e009120, completionHandler=..., timeout=...) at ../../../Source/WebKit/NetworkProcess/PreconnectTask.cpp:70 #9 0x00007f1565ba499e in WebKit::NetworkProcess::preconnectTo (this=0x7f153e01c460, sessionID=..., webPageProxyID=..., webPageID=..., request=..., storedCredentialsPolicy=WebCore::StoredCredentialsPolicy::Use, isNavigatingToAppBoundDomain=std::optional [no contained value], requiredCookiesVersion=0) at ../../../Source/WebKit/NetworkProcess/NetworkProcess.cpp:1626 #10 0x00007f1564bb6f60 in IPC::callMemberFunction<WebKit::NetworkProcess, WebKit::NetworkProcess, void (PAL::SessionID, WTF::ObjectIdentifierGeneric<WebKit::WebPageProxyIdentifierType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long>, unsigned long>, WTF::ObjectIdentifierGeneric<WebCore::PageIdentifierType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long>, unsigned long>, WebCore::ResourceRequest&&, WebCore::StoredCredentialsPolicy, std::optional<WebKit::NavigatingToAppBoundDomain>, unsigned long), std::tuple<PAL::SessionID, WTF::ObjectIdentifierGeneric<WebKit::WebPageProxyIdentifierType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long>, unsigned long>, WTF::ObjectIdentifierGeneric<WebCore::PageIdentifierType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long>, unsigned long>, WebCore::ResourceRequest, WebCore::StoredCredentialsPolicy, std::optional<WebKit::NavigatingToAppBoundDomain>, unsigned long> >(WebKit::NetworkProcess*, void (WebKit::NetworkProcess::*)(PAL::SessionID, WTF::ObjectIdentifierGeneric<WebKit::WebPageProxyIdentifierType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long>, unsigned long>, WTF::ObjectIdentifierGeneric<WebCore::PageIdentifierType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long>, unsigned long>, WebCore::ResourceRequest&&, WebCore::StoredCredentialsPolicy, std::optional<WebKit::NavigatingToAppBoundDomain>, unsigned long), std::tuple<PAL::SessionID, WTF::ObjectIdentifierGeneric<WebKit::WebPageProxyIdentifierType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long>, unsigned long>, WTF::ObjectIdentifierGeneric<WebCore::PageIdentifierType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long>, unsigned long>, WebCore::ResourceRequest, WebCore::StoredCredentialsPolicy, std::optional<WebKit::NavigatingToAppBoundDomain>, unsigned long>&&)::{lambda((auto:1&&)...)#1}::operator()<PAL::SessionID, WTF::ObjectIdentifierGeneric<WebKit::WebPageProxyIdentifierType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long>, unsigned long>, WTF::ObjectIdentifierGeneric<WebCore::PageIdentifierType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long>, unsigned long>, WebCore::ResourceRequest, WebCore::StoredCredentialsPolicy, std::optional<WebKit::NavigatingToAppBoundDomain>, unsigned long>(PAL::SessionID&&, WTF::ObjectIdentifierGeneric<WebKit::WebPageProxyIdentifierType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long>, unsigned long>&&, WTF::ObjectIdentifierGeneric<WebCore::PageIdentifierType, WTF::ObjectIdentifierMainThreadAccessTraits<unsigned long>, unsigned long>&&, WebCore::ResourceRequest&&, WebCore::StoredCredentialsPolicy&&, std::optional<WebKit::NavigatingToAppBoundDomain>&&, unsigned long&&) const (__closure=0x7ffce35db3a0) at ../../../Source/WebKit/Platform/IPC/HandleMessage.h:137 Link: https://build.webkit.org/results/GTK-Linux-64-bit-Debug-Tests/304475@main%20(17735)/http/tests/webrtc/filtering-ice-candidate-same-origin-frame2-crash-log.txt Link: https://build.webkit.org/results/GTK-Linux-64-bit-Debug-Tests/304475@main%20(17735)/imported/w3c/web-platform-tests/html/anonymous-iframe/local-storage.tentative.https.window-crash-log.txt

Attachments
Add attachment proposed patch, testcase, etc.

Nikolas Zimmermann

Comment 1 2025-12-16 14:41:34 PST

Gardened both in https://commits.webkit.org/304545@main.

Lauro Moura

Comment 2 2026-02-13 22:43:19 PST

Pull request: https://github.com/WebKit/WebKit/pull/58710

EWS

Comment 3 2026-02-14 06:12:19 PST

Test gardening commit 307573@main (9595e25c5f00): <https://commits.webkit.org/307573@main> Reviewed commits have been landed. Closing PR #58710 and removing active labels.

Fujii Hironori

Comment 4 2026-03-03 20:14:37 PST

Not crashing after bumping libsoup to 3.6.6.

Note You need to log in before you can comment on or make changes to this bug.