Bug 41903 – [GTK] plugins/return-negative-one-from-write.html crashes

• Status: RESOLVED
• Resolution: FIXED
• Component: WebKitGTK

[Xan Lopez]

http://trac.webkit.org/changeset/61768 did some refactoring that added a new ASSERT in the setDefersLoading method. This is causing a new crash, which according to the commit is likely to be a bug.

[Xan Lopez]

Trace:

Thread 1 (Thread 5246):
#0  0x00007f4469a14603 in WebCore::ResourceHandle::setDefersLoading (
    this=0x2e12350, defers=true)
    at ../../WebCore/platform/network/ResourceHandle.cpp:150
#1  0x00007f44698f0d2b in WebCore::ResourceLoader::setDefersLoading (
    this=0x2deb440, defers=true)
    at ../../WebCore/loader/ResourceLoader.cpp:154
#2  0x00007f4469a3ff33 in WebCore::PluginStream::destroyStream (
    this=0x2d731a0) at ../../WebCore/plugins/PluginStream.cpp:271
#3  0x00007f4469a3fc63 in WebCore::PluginStream::destroyStream (
    this=0x2d731a0, reason=1) at ../../WebCore/plugins/PluginStream.cpp:238
#4  0x00007f4469a3fb83 in WebCore::PluginStream::cancelAndDestroyStream (
    this=0x2d731a0, reason=1) at ../../WebCore/plugins/PluginStream.cpp:223
#5  0x00007f4469a40609 in WebCore::PluginStream::deliverData (this=0x2d731a0)
    at ../../WebCore/plugins/PluginStream.cpp:359
#6  0x00007f4469a40c0c in WebCore::PluginStream::didReceiveData (
    this=0x2d731a0, loader=0x2deb440, data=0x2e02dc0 "T", length=8)
    at ../../WebCore/plugins/PluginStream.cpp:429
#7  0x00007f44698e81d7 in WebCore::NetscapePlugInStreamLoader::didReceiveData
    (this=0x2deb440, data=0x2e02dc0 "T", length=8, lengthReceived=0, 
    allAtOnce=false) at ../../WebCore/loader/NetscapePlugInStreamLoader.cpp:93
#8  0x00007f44698f1ce3 in WebCore::ResourceLoader::didReceiveData (
    this=0x2deb440, data=0x2e02dc0 "T", length=8, lengthReceived=0)
    at ../../WebCore/loader/ResourceLoader.cpp:431
#9  0x00007f4469de8b17 in parseDataUrl (callbackData=0x2e12350)
    at ../../WebCore/platform/network/soup/ResourceHandleSoup.cpp:412
#10 0x00007f446521b01b in g_timeout_dispatch (source=0x2e09650, callback=0, 
    user_data=0x7f44642f1e20) at /tmp/buildd/glib2.0-2.22.4/glib/gmain.c:3396
#11 0x00007f446521a90e in g_main_dispatch (context=0x473e60)
    at /tmp/buildd/glib2.0-2.22.4/glib/gmain.c:1960
#12 IA__g_main_context_dispatch (context=0x473e60)
    at /tmp/buildd/glib2.0-2.22.4/glib/gmain.c:2513
#13 0x00007f446521e2c8 in g_main_context_iterate (context=0x473e60, 
    block=<value optimized out>, dispatch=<value optimized out>, 
    self=<value optimized out>)
    at /tmp/buildd/glib2.0-2.22.4/glib/gmain.c:2591
#14 0x00007f446521e725 in IA__g_main_loop_run (loop=0x2daaab0)
    at /tmp/buildd/glib2.0-2.22.4/glib/gmain.c:2799
#15 0x00007f446709b287 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#16 0x00000000004158d3 in runTest (testPathOrURL=...)
    at ../../WebKitTools/DumpRenderTree/gtk/DumpRenderTree.cpp:528
#17 0x0000000000416f97 in main (argc=2, argv=0x7fffffffd568)
    at ../../WebKitTools/DumpRenderTree/gtk/DumpRenderTree.cpp:991

[Martin Robinson]

Committed r80736: <http://trac.webkit.org/changeset/80736>

[Martin Robinson]

This was not crashing locally, so I'm going to unskip it. I believe that when this was skipped we did not have an implementation of setDefersLoading. If it continues to crash I'll re-open and re-skip.