Crash in WebContent process with customer schemes. WebKit: WebKit::WebURLSchemeTaskProxy::processNextPendingTask() <== WebKit: WebKit::WebURLSchemeHandlerProxy::taskDidReceiveData(unsigned long long, unsigned long, unsigned char const*) WebKit: WebKit::WebURLSchemeHandlerProxy::taskDidReceiveData(unsigned long long, unsigned long, unsigned char const*) WebKit: WebKit::WebPage::urlSchemeTaskDidReceiveData(unsigned long long, unsigned long long, IPC::DataReference const&) WebKit: WebKit::WebPage::didReceiveWebPageMessage(IPC::Connection&, IPC::Decoder&) Everywhere else in WebURLSchemeTaskProxy we protect it with a Ref before later calling processNextPendingTask. But not in didReceiveData. So lets do that. <rdar://problem/52968793>
Created attachment 374737 [details] Patch
Comment on attachment 374737 [details] Patch Clearing flags on attachment: 374737 Committed r247787: <https://trac.webkit.org/changeset/247787>
All reviewed patches have been landed. Closing bug.
<rdar://problem/53510380>