Bug 120475 – [Windows] Moving back in history from a page with <video>, then moving forward causes crash

• Status: RESOLVED
• Resolution: FIXED
• Component: Media

[Brent Fulgham]

The following steps cause a crash:

1. Launch WinLauncher.
2. Navigate to a page displaying video.  You do not need to start the video playing.
3. Use the "back" option to move back a level in the web history.
4. Use the "forward" option to return to the page displaying video.
5. *CRASH*

NOTE: Sometimes the crash occurs after moving "back", without requiring the "forward" step.

Crash dump:
>	CoreMedia.dll!FigBaseObjectFinalize(const void * cf)  Line 281 + 0x6 bytes	C
 	CoreFoundation.dll!_CFRelease(const void * cf)  Line 42344 + 0x3 bytes	C++
 	CoreFoundation.dll!CFRelease(const void * cf)  Line 41477 + 0x6 bytes	C++
 	AVFoundationCF.dll!player_sendSubtitleNotification(void * context)  Line 726 + 0xb bytes	C
 	libdispatch.dll!_dispatch_continuation_pop(void * dou)  Line 39407 + 0x9 bytes	C++
 	libdispatch.dll!_dispatch_queue_drain(dispatch_queue_s * dq)  Line 40401 + 0x11 bytes	C++
 	libdispatch.dll!_dispatch_queue_invoke(dispatch_queue_s * dq)  Line 40343 + 0x15 bytes	C++
 	7fffffff()	
 	libdispatch.dll!736633bf()

[Radar WebKit Bug Importer]

<rdar://problem/14868236>

[Brent Fulgham]

This behavior does not happen under Mac OS.

[Brent Fulgham]

*** Bug 121816 has been marked as a duplicate of this bug. ***

[Brent Fulgham]

Created attachment 212414 [details]
Patch

[WebKit Commit Bot]

Comment on attachment 212414 [details]
Patch

Clearing flags on attachment: 212414

Committed r156315: <http://trac.webkit.org/changeset/156315>

[WebKit Commit Bot]

All reviewed patches have been landed.  Closing bug.