Bug 315745 – Crash under WebPageProxy::createSandboxExtensionsIfNeeded()

• Status: RESOLVED
• Resolution: FIXED
• Component: WebKit2

[Chris Dumez]

Crash under WebPageProxy::createSandboxExtensionsIfNeeded():
```
10 WTFCrashWithInfo(int, char const*, char const*, int) (WebKit)
          10 WebKit::AuxiliaryProcessProxy::connection() const (WebKit)
            10 WebKit::AuxiliaryProcessProxy::protectedConnection() const (WebKit)
      ==> 10 WebKit::WebPageProxy::createSandboxExtensionsIfNeeded(WTF::Vector<WTF::String, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc> const&, WebKit::SandboxExtensionHandle&, WTF::Vector<WebKit::SandboxExtensionHandle, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&)::$_0::operator()(WTF::String const&) const (WebKit) <==
                10 WebKit::WebPageProxy::createSandboxExtensionsIfNeeded(WTF::Vector<WTF::String, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc> const&, WebKit::SandboxExtensionHandle&, WTF::Vector<WebKit::SandboxExtensionHandle, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>&) (WebKit)
                  10 WebKit::performDragWithLegacyFiles(WebKit::WebPageProxy&, WTF::Box<WTF::Vector<WTF::String, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>>&&, WTF::Box<WebCore::DragData>&&, WTF::String const&)::$_0::operator()() (WebKit)
                    10 decltype(std::declval<WebKit::performDragWithLegacyFiles(WebKit::WebPageProxy&, WTF::Box<WTF::Vector<WTF::String, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>>&&, WTF::Box<WebCore::DragData>&&, WTF::String const&)::$_0>()()) std::__1::__invoke[abi:sn200100]<WebKit::performDragWithLegacyFiles(WebKit::WebPageProxy&, WTF::Box<WTF::Vector<WTF::String, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>>&&, WTF::Box<WebCore::DragData>&&, WTF::String const&)::$_0>(WebKit::performDragWithLegacyFiles(WebKit::WebPageProxy&, WTF::Box<WTF::Vector<WTF::String, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>>&&, WTF::Box<WebCore::DragData>&&, WTF::String const&)::$_0&&) (WebKit)
                      10 decltype(auto) std::__1::__apply_tuple_impl[abi:sn200100]<WebKit::performDragWithLegacyFiles(WebKit::WebPageProxy&, WTF::Box<WTF::Vector<WTF::String, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>>&&, WTF::Box<WebCore::DragData>&&, WTF::String const&)::$_0, std::__1::tuple<>>(WebKit::performDragWithLegacyFiles(WebKit::WebPageProxy&, WTF::Box<WTF::Vector<WTF::String, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>>&&, WTF::Box<WebCore::DragData>&&, WTF::String const&)::$_0&&, std::__1::tuple<>&&, std::__1::__tuple_indices<>) (WebKit)
                        10 decltype(auto) std::__1::apply[abi:sn200100]<WebKit::performDragWithLegacyFiles(WebKit::WebPageProxy&, WTF::Box<WTF::Vector<WTF::String, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>>&&, WTF::Box<WebCore::DragData>&&, WTF::String const&)::$_0, std::__1::tuple<>>(WebKit::performDragWithLegacyFiles(WebKit::WebPageProxy&, WTF::Box<WTF::Vector<WTF::String, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>>&&, WTF::Box<WebCore::DragData>&&, WTF::String const&)::$_0&&, std::__1::tuple<>&&) (WebKit)
                          10 WTF::Function<void (IPC::Connection*, IPC::Decoder*)>::operator()(IPC::Connection*, IPC::Decoder*) const (WebKit)
                            10 WTF::CompletionHandler<void (IPC::Connection*, IPC::Decoder*)>::operator()(IPC::Connection*, IPC::Decoder*) (WebKit)
                              10 WebKit::AuxiliaryProcessProxy::sendMessage(WTF::UniqueRef<IPC::Encoder>&&, WTF::OptionSet<IPC::SendOption, (WTF::ConcurrencyTag)0>, std::__1::optional<IPC::ConnectionAsyncReplyHandler>, WebKit::AuxiliaryProcessProxy::ShouldStartProcessThrottlerActivity)::$_1::operator()(IPC::Connection*, IPC::Decoder*) (WebKit)
                                10 WTF::Detail::CallableWrapper<WebKit::AuxiliaryProcessProxy::sendMessage(WTF::UniqueRef<IPC::Encoder>&&, WTF::OptionSet<IPC::SendOption, (WTF::ConcurrencyTag)0>, std::__1::optional<IPC::ConnectionAsyncReplyHandler>, WebKit::AuxiliaryProcessProxy::ShouldStartProcessThrottlerActivity)::$_1, void, IPC::Connection*, IPC::Decoder*>::call(IPC::Connection*, IPC::Decoder*) (WebKit)
```

[Chris Dumez]

rdar://170160413

[Chris Dumez]

Pull request: https://github.com/WebKit/WebKit/pull/65875

[EWS]

Committed 314085@main (5f39d2e3104a): <https://commits.webkit.org/314085@main>

Reviewed commits have been landed. Closing PR #65875 and removing active labels.