Bug 98960

Summary:	[WK2] fast/parser/document-open-in-unload.html causes next test to crash
Product:	WebKit	Reporter:	Vicki Pfau <jeffrey+webkit>
Component:	Page Loading	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED DUPLICATE
Severity:	Normal	CC:	beidson
Priority:	P2	Keywords:	InRadar, LayoutTestFailure
Version:	528+ (Nightly build)
Hardware:	Unspecified
OS:	Unspecified

Vicki Pfau

Reported 2012-10-10 15:46:19 PDT

The layout test fast/parser/document-open-in-unload.html will cause the next test to crash when run with WebKit Test Runner. A portion of the backtrace reveals the crash to be inside of the loader: 0 com.apple.WebCore 0x00000001057980dc WebCore::DocumentLoader::isClientRedirect() const + 12 (DocumentLoader.h:124) 1 com.apple.WebCore 0x00000001057918e8 WebCore::FrameLoader::commitProvisionalLoad() + 1784 (FrameLoader.cpp:1750) 2 com.apple.WebCore 0x00000001054c027c WebCore::DocumentLoader::commitIfReady() + 60 (DocumentLoader.cpp:283) 3 com.apple.WebCore 0x00000001054c081c WebCore::DocumentLoader::commitLoad(char const*, int) + 76 (DocumentLoader.cpp:314) 4 com.apple.WebCore 0x00000001054c0cfb WebCore::DocumentLoader::receivedData(char const*, int) + 59 (DocumentLoader.cpp:388) 5 com.apple.WebCore 0x0000000106123b87 WebCore::MainResourceLoader::addData(char const*, int, bool) + 87 (MainResourceLoader.cpp:193) 6 com.apple.WebCore 0x000000010657a1ec WebCore::ResourceLoader::didReceiveData(char const*, int, long long, bool) + 108 (ResourceLoader.cpp:281) 7 com.apple.WebCore 0x0000000106125475 WebCore::MainResourceLoader::didReceiveData(char const*, int, long long, bool) + 1013 (MainResourceLoader.cpp:482) 8 com.apple.WebCore 0x000000010657ab2f WebCore::ResourceLoader::didReceiveData(WebCore::ResourceHandle*, char const*, int, int) + 143 (ResourceLoader.cpp:436) ... It appears that FrameLoader::m_documentLoader becomes null at some point before m_documentLoader->isClientRedirect gets called, causing the crash.

Attachments
Add attachment proposed patch, testcase, etc.

Vicki Pfau

Comment 1 2012-10-10 16:09:47 PDT

Skipped in r130976

Brady Eidson

Comment 2 2012-10-10 16:18:09 PDT

(In reply to comment #0) > The layout test fast/parser/document-open-in-unload.html will cause the next test to crash when run with WebKit Test Runner. Any idea when this started...?

Vicki Pfau

Comment 3 2012-10-10 16:26:00 PDT

<rdar://problem/12474923>

Alexey Proskuryakov

Comment 4 2012-10-10 21:47:38 PDT

*** This bug has been marked as a duplicate of bug 98345 ***

Note You need to log in before you can comment on or make changes to this bug.