RESOLVED FIXED 250404
Potential crash under WebPageProxy::continueNavigationInNewProcess() 
https://bugs.webkit.org/show_bug.cgi?id=250404
Summary Potential crash under WebPageProxy::continueNavigationInNewProcess()
Chris Dumez
Reported 2023-01-10 12:42:34 PST
Potential crash under WebPageProxy::continueNavigationInNewProcess(): 0 WebKit 0x1b8b56fcc WebKit::WebPageProxy::continueNavigationInNewProcess(API::Navigation&, WebKit::WebFrameProxy&, std::__1::unique_ptr<WebKit::SuspendedPageProxy, std::__1::default_delete<WebKit::SuspendedPageProxy>>&&, WTF::Ref<WebKit::WebProcessProxy, WTF::RawPtrTraits<WebKit::WebProcessProxy>>&&, WebKit::ProcessSwapRequestedByClient, WebCore::ShouldTreatAsContinuingLoad, std::__1::optional<WTF::ObjectIdentifier<WebKit::NetworkResourceLoadIdentifierType>>) + 596 1 WebKit 0x1b8b9fe68 WTF::Detail::CallableWrapper<IPC::Connection::AsyncReplyHandler IPC::Connection::makeAsyncReplyHandler<Messages::NetworkProcess::AddAllowedFirstPartyForCookies, WebKit::WebPageProxy::triggerBrowsingContextGroupSwitchForNavigation(unsigned long long, WebCore::BrowsingContextGroupSwitchDecision, WebCore::RegistrableDomain const&, WTF::ObjectIdentifier<WebKit::NetworkResourceLoadIdentifierType>, WTF::CompletionHandler<void (bool)>&&)::$_35>(WebKit::WebPageProxy::triggerBrowsingContextGroupSwitchForNavigation(unsigned long long, WebCore::BrowsingContextGroupSwitchDecision, WebCore::RegistrableDomain const&, WTF::ObjectIdentifier<WebKit::NetworkResourceLoadIdentifierType>, WTF::CompletionHandler<void (bool)>&&)::$_35&&, WTF::ThreadLikeAssertion)::'lambda'(IPC::Decoder*), void, IPC::Decoder*>::call(IPC::Decoder*) + 272
Attachments
Add attachment proposed patch, testcase, etc.
Chris Dumez
Comment 1 2023-01-10 12:42:47 PST
<rdar://103382619>
Chris Dumez
Comment 2 2023-01-10 12:45:04 PST
Pull request: https://github.com/WebKit/WebKit/pull/8479
EWS
Comment 3 2023-01-10 15:49:15 PST
Committed 258750@main (696c77d0b3f0): <https://commits.webkit.org/258750@main> Reviewed commits have been landed. Closing PR #8479 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.