Bug 146388 - Crash: com.apple.WebKit.WebContent at com.apple.WebCore: WebCore::CachedFrameBase::restore + 333
Summary: Crash: com.apple.WebKit.WebContent at com.apple.WebCore: WebCore::CachedFrame...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: Page Loading (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Chris Dumez
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2015-06-27 15:28 PDT by Chris Dumez
Modified: 2015-06-28 11:54 PDT (History)
5 users (show)

See Also:

Attachments
Patch (9.97 KB, patch)
2015-06-27 17:31 PDT, Chris Dumez 		no flags Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Chris Dumez 2015-06-27 15:28:55 PDT 
Reproduction steps:
1. Goto http://www.audiusa.com/models
2. Click on 2015 S3
3. Gesture back

Crash trace:
>  1 com.apple.WebCore              0x7fff9a3627ed WebCore::CachedFrameBase::restore() + 0x14d
   2 com.apple.WebCore              0x7fff9a362610 WebCore::FrameLoader::open(WebCore::CachedFrameBase&) + 0x300
   3 com.apple.WebCore              0x7fff9a442b39 WebCore::CachedPage::restore(WebCore::Page&) + 0x19
   4 com.apple.WebCore              0x7fff9a0e286c WebCore::FrameLoader::commitProvisionalLoad() + 0x1fc
   5 com.apple.WebCore              0x7fff9a67381e WebCore::FrameLoader::continueLoadAfterNavigationPolicy(WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool, WebCore::AllowNavigationToInvalidURL) + 0x34e
   6 com.apple.WebCore              0x7fff9a6770df std::__1::__function::__func<WebCore::FrameLoader::loadWithDocumentLoader(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::PassRefPtr<WebCore::FormState>, WebCore::AllowNavigationToInvalidURL)::$_4, std::__1::allocator<WebCore::FrameLoader::loadWithDocumentLoader(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::PassRefPtr<WebCore::FormState>, WebCore::AllowNavigationToInvalidURL)::$_4>, void (WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool)>::operator()(WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>&&, bool&&) + 0x2f
   7 com.apple.WebCore              0x7fff9a135820 WebCore::PolicyCallback::call(bool) + 0x50
   8 com.apple.WebCore              0x7fff9a1357a3 WebCore::PolicyChecker::continueAfterNavigationPolicy(WebCore::PolicyAction) + 0x593
   9 com.apple.WebKit               0x7fff8d85619c WebKit::WebFrame::didReceivePolicyDecision(unsigned long long, WebCore::PolicyAction, unsigned long long, unsigned long long) + 0xc0
  10 com.apple.WebKit               0x7fff8d857d7b WebKit::WebFrameLoaderClient::dispatchDecidePolicyForNavigationAction(WebCore::NavigationAction const&, WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, std::__1::function<void (WebCore::PolicyAction)>) + 0x491
  11 com.apple.WebCore              0x7fff9ac36562 WebCore::PolicyChecker::checkNavigationPolicy(WebCore::ResourceRequest const&, WebCore::DocumentLoader*, WTF::PassRefPtr<WebCore::FormState>, std::__1::function<void (WebCore::ResourceRequest const&, WTF::PassRefPtr<WebCore::FormState>, bool)>) + 0xf02
  12 com.apple.WebCore              0x7fff9a672e14 WebCore::FrameLoader::loadWithDocumentLoader(WebCore::DocumentLoader*, WebCore::FrameLoadType, WTF::PassRefPtr<WebCore::FormState>, WebCore::AllowNavigationToInvalidURL) + 0x804
  13 com.apple.WebCore              0x7fff9a66f005 WebCore::FrameLoader::loadDifferentDocumentItem(WebCore::HistoryItem&, WebCore::FrameLoadType, WebCore::FrameLoader::FormSubmissionCacheLoadPolicy) + 0x185
  14 com.apple.WebCore              0x7fff9a6bf336 WebCore::HistoryController::goToItem(WebCore::HistoryItem&, WebCore::FrameLoadType) + 0xc6
  15 com.apple.WebCore              0x7fff9ac02761 WebCore::Page::goToItem(WebCore::HistoryItem&, WebCore::FrameLoadType) + 0x51
  16 com.apple.WebKit               0x7fff8d881e16 WebKit::WebPage::goToBackForwardItem(unsigned long long, unsigned long long) + 0x40
Comment 1 Chris Dumez 2015-06-27 15:29:13 PDT 
rdar://problem/21567343
Comment 2 Chris Dumez 2015-06-27 17:31:15 PDT 
Created attachment 255712 [details]
Patch
Comment 3 WebKit Commit Bot 2015-06-28 11:54:51 PDT 
Comment on attachment 255712 [details]
Patch

Clearing flags on attachment: 255712

Committed r186049: <http://trac.webkit.org/changeset/186049>
Comment 4 WebKit Commit Bot 2015-06-28 11:54:55 PDT 
All reviewed patches have been landed.  Closing bug.