Bug 86443 – [GTK][Mac][Win] New plugins/npruntime/delete-plugin-within-* tests introduced in r117012 fail/crash

• Status: NEW
• Component: Tools / Tests

[Csaba Osztrogonác]

Bug 86131 is security bug, maybe it is too, because a new test crashes.

--- /ramdisk/qt-linux-64-release/build/layout-test-results/plugins/npruntime/delete-plugin-within-hasProperty-return-false-expected.txt 
+++ /ramdisk/qt-linux-64-release/build/layout-test-results/plugins/npruntime/delete-plugin-within-hasProperty-return-false-actual.txt 
@@ -1,2 +1,1 @@
-CONSOLE MESSAGE: line 13: Uncaught ReferenceError: NPObject deleted
 

--- /ramdisk/qt-linux-64-release/build/layout-test-results/plugins/npruntime/delete-plugin-within-hasProperty-return-true-expected.txt 
+++ /ramdisk/qt-linux-64-release/build/layout-test-results/plugins/npruntime/delete-plugin-within-hasProperty-return-true-actual.txt 
@@ -1,2 +1,1 @@
-CONSOLE MESSAGE: line 13: Uncaught ReferenceError: NPObject deleted
 

--- /ramdisk/qt-linux-64-release/build/layout-test-results/plugins/npruntime/delete-plugin-within-setProperty-expected.txt 
+++ /ramdisk/qt-linux-64-release/build/layout-test-results/plugins/npruntime/delete-plugin-within-setProperty-actual.txt 
@@ -1,2 +1,1 @@
-CONSOLE MESSAGE: line 13: Uncaught ReferenceError: NPObject deleted
 
crash log for DumpRenderTree (pid 29077):
STDOUT: <empty>
STDERR: 1   0x422c58 /ramdisk/qt-linux-64-release/build/WebKitBuild/Release/bin/DumpRenderTree() [0x422c58]
STDERR: 2   0x7f7a2fbd5ff0 /lib/libpthread.so.0(+0xeff0) [0x7f7a2fbd5ff0]
STDERR: 3   0x7f7a358a6990 /ramdisk/qt-linux-64-release/build/WebKitBuild/Release/lib/libQtWebKit.so.4(WTF::HashMap<JSC::Bindings::RuntimeObject*, JSC::Weak<JSC::Bindings::RuntimeObject>, WTF::PtrHash<JSC::Bindings::RuntimeObject*>, WTF::HashTraits<JSC::Bindings::RuntimeObject*>, WTF::HashTraits<JSC::Weak<JSC::Bindings::RuntimeObject> > >::inlineAdd(JSC::Bindings::RuntimeObject* const&, JSC::PassWeak<JSC::Bindings::RuntimeObject>&)+0x10) [0x7f7a358a6990]
STDERR: 4   0x7f7a358a6d23 /ramdisk/qt-linux-64-release/build/WebKitBuild/Release/lib/libQtWebKit.so.4(JSC::Bindings::RootObject::addRuntimeObject(JSC::JSGlobalData&, JSC::Bindings::RuntimeObject*)+0x63) [0x7f7a358a6d23]
STDERR: 5   0x7f7a3589b822 /ramdisk/qt-linux-64-release/build/WebKitBuild/Release/lib/libQtWebKit.so.4(JSC::Bindings::Instance::createRuntimeObject(JSC::ExecState*)+0xb2) [0x7f7a3589b822]
STDERR: 6   0x7f7a3589b140 /ramdisk/qt-linux-64-release/build/WebKitBuild/Release/lib/libQtWebKit.so.4(JSC::Bindings::convertNPVariantToValue(JSC::ExecState*, _NPVariant const*, JSC::Bindings::RootObject*)+0x100) [0x7f7a3589b140]
STDERR: 7   0x7f7a3589aa56 /ramdisk/qt-linux-64-release/build/WebKitBuild/Release/lib/libQtWebKit.so.4(JSC::Bindings::CField::valueFromInstance(JSC::ExecState*, JSC::Bindings::Instance const*) const+0xc6) [0x7f7a3589aa56]
STDERR: 8   0x7f7a358a5ae3 /ramdisk/qt-linux-64-release/build/WebKitBuild/Release/lib/libQtWebKit.so.4(JSC::Bindings::RuntimeObject::fieldGetter(JSC::ExecState*, JSC::JSValue, JSC::PropertyName)+0x53) [0x7f7a358a5ae3]
STDERR: 9   0x7f7a358621ee /ramdisk/qt-linux-64-release/build/WebKitBuild/Release/lib/libQtWebKit.so.4(WebCore::runtimeObjectPropertyGetter(JSC::ExecState*, JSC::JSValue, JSC::PropertyName)+0x1ce) [0x7f7a358621ee]
STDERR: 10  0x7f7a36870062 /ramdisk/qt-linux-64-release/build/WebKitBuild/Release/lib/libQtWebKit.so.4(JSC::JSValue::get(JSC::ExecState*, JSC::PropertyName, JSC::PropertySlot&) const+0x1a2) [0x7f7a36870062]
STDERR: 11  0x7f7a36909ca5 /ramdisk/qt-linux-64-release/build/WebKitBuild/Release/lib/libQtWebKit.so.4(cti_op_get_by_id+0x65) [0x7f7a36909ca5]
STDERR: 12  0x7f79ea530637 [0x7f79ea530637]

[Csaba Osztrogonác]

Debug crash log for plugins/npruntime/delete-plugin-within-invoke.html on Qt:

crash log for DumpRenderTree (pid 25958):
STDOUT: <empty>
STDERR: ASSERTION FAILED: m_rootObject->isValid()
STDERR: ../../../../Source/WebCore/bridge/jsc/BridgeJSC.cpp(91) : JSC::JSObject* JSC::Bindings::Instance::createRuntimeObject(JSC::ExecState*)
STDERR: 1   0x7fa317e75efd /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::Bindings::Instance::createRuntimeObject(JSC::ExecState*)+0xa5) [0x7fa317e75efd]
STDERR: 2   0x7fa317e75226 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::Bindings::convertNPVariantToValue(JSC::ExecState*, _NPVariant const*, JSC::Bindings::RootObject*)+0x1ca) [0x7fa317e75226]
STDERR: 3   0x7fa317e732af /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::Bindings::CInstance::invokeMethod(JSC::ExecState*, JSC::RuntimeMethod*)+0x3f7) [0x7fa317e732af]
STDERR: 4   0x7fa317e84d1b /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(+0x20ffd1b) [0x7fa317e84d1b]
STDERR: 5   0x7fa3194259cb /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(cti_op_call_NotJSFunction+0x166) [0x7fa3194259cb]
STDERR: 6   0x7fa3194208dd /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(+0x369b8dd) [0x7fa3194208dd]
STDERR: 7   0x7fa3193f63f9 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::JITCode::execute(JSC::RegisterFile*, JSC::ExecState*, JSC::JSGlobalData*)+0x61) [0x7fa3193f63f9]
STDERR: 8   0x7fa3193f2261 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::ScopeChainNode*, JSC::JSObject*)+0x10c1) [0x7fa3193f2261]
STDERR: 9   0x7fa3194b1fde /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::evaluate(JSC::ExecState*, JSC::ScopeChainNode*, JSC::SourceCode const&, JSC::JSValue, JSC::JSValue*)+0x1bf) [0x7fa3194b1fde]
STDERR: 10  0x7fa317dfb33c /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::JSMainThreadExecState::evaluate(JSC::ExecState*, JSC::ScopeChainNode*, JSC::SourceCode const&, JSC::JSValue, JSC::JSValue*)+0x54) [0x7fa317dfb33c]
STDERR: 11  0x7fa317e2c4b7 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::ScriptController::evaluateInWorld(WebCore::ScriptSourceCode const&, WebCore::DOMWrapperWorld*)+0x19f) [0x7fa317e2c4b7]
STDERR: 12  0x7fa317e2c61a /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::ScriptController::evaluate(WebCore::ScriptSourceCode const&)+0x34) [0x7fa317e2c61a]
STDERR: 13  0x7fa31815876f /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::ScriptElement::executeScript(WebCore::ScriptSourceCode const&)+0x1b1) [0x7fa31815876f]
STDERR: 14  0x7fa31815810c /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::ScriptElement::prepareScript(WTF::TextPosition const&, WebCore::ScriptElement::LegacyTypeSupport)+0x856) [0x7fa31815810c]
STDERR: 15  0x7fa318361134 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::HTMLScriptRunner::runScript(WebCore::Element*, WTF::TextPosition const&)+0x190) [0x7fa318361134]
STDERR: 16  0x7fa318360675 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::HTMLScriptRunner::execute(WTF::PassRefPtr<WebCore::Element>, WTF::TextPosition const&)+0xa3) [0x7fa318360675]
STDERR: 17  0x7fa318351c0e /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::HTMLDocumentParser::runScriptsForPausedTreeBuilder()+0x134) [0x7fa318351c0e]
STDERR: 18  0x7fa318351d07 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::HTMLDocumentParser::canTakeNextToken(WebCore::HTMLDocumentParser::SynchronousMode, WebCore::PumpSession&)+0x99) [0x7fa318351d07]
STDERR: 19  0x7fa3183521b7 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::HTMLDocumentParser::pumpTokenizer(WebCore::HTMLDocumentParser::SynchronousMode)+0x399) [0x7fa3183521b7]
STDERR: 20  0x7fa318351a0b /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::HTMLDocumentParser::pumpTokenizerIfPossible(WebCore::HTMLDocumentParser::SynchronousMode)+0xb1) [0x7fa318351a0b]
STDERR: 21  0x7fa318352865 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::HTMLDocumentParser::append(WebCore::SegmentedString const&)+0x14b) [0x7fa318352865]
STDERR: 22  0x7fa31806ef2e /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::DecodedDataDocumentParser::flush(WebCore::DocumentWriter*)+0xa0) [0x7fa31806ef2e]
STDERR: 23  0x7fa3185124cc /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::DocumentWriter::end()+0x116) [0x7fa3185124cc]
STDERR: 24  0x7fa31850496f /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::DocumentLoader::finishedLoading()+0xd7) [0x7fa31850496f]
STDERR: 25  0x7fa318540b3e /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::MainResourceLoader::didFinishLoading(double)+0x192) [0x7fa318540b3e]
STDERR: 26  0x7fa31854f93f /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::ResourceLoader::didFinishLoading(WebCore::ResourceHandle*, double)+0x33) [0x7fa31854f93f]
STDERR: 27  0x7fa318a0b515 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::QNetworkReplyHandler::finish()+0x1d3) [0x7fa318a0b515]
STDERR: 28  0x7fa318a094ba /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::QNetworkReplyHandlerCallQueue::flush()+0x9c) [0x7fa318a094ba]
STDERR: 29  0x7fa318a091a3 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::QNetworkReplyHandlerCallQueue::push(void (WebCore::QNetworkReplyHandler::*)())+0x3d) [0x7fa318a091a3]
STDERR: 30  0x7fa318a0a9a0 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::QNetworkReplyWrapper::didReceiveFinished()+0x46) [0x7fa318a0a9a0]
STDERR: 31  0x7fa318a0ddeb /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(+0x2c88deb) [0x7fa318a0ddeb]



Debug crash log for plugins/npruntime/delete-plugin-within-getProperty.html on Qt:
crash log for DumpRenderTree (pid 24886):
STDOUT: <empty>
STDERR: ASSERTION FAILED: m_rootObject
STDERR: ../../../../Source/WebCore/bridge/jsc/BridgeJSC.cpp(58) : JSC::Bindings::Instance::Instance(WTF::PassRefPtr<JSC::Bindings::RootObject>)
STDERR: 1   0x7fed119f58e2 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::Bindings::Instance::Instance(WTF::PassRefPtr<JSC::Bindings::RootObject>)+0x98) [0x7fed119f58e2]
STDERR: 2   0x7fed119f292d /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::Bindings::CInstance::CInstance(NPObject*, WTF::PassRefPtr<JSC::Bindings::RootObject>)+0x3d) [0x7fed119f292d]
STDERR: 3   0x7fed119f4b30 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::Bindings::CInstance::create(NPObject*, WTF::PassRefPtr<JSC::Bindings::RootObject>)+0x56) [0x7fed119f4b30]
STDERR: 4   0x7fed119f5208 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::Bindings::convertNPVariantToValue(JSC::ExecState*, _NPVariant const*, JSC::Bindings::RootObject*)+0x1ac) [0x7fed119f5208]
STDERR: 5   0x7fed119f491c /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::Bindings::CField::valueFromInstance(JSC::ExecState*, JSC::Bindings::Instance const*) const+0xea) [0x7fed119f491c]
STDERR: 6   0x7fed11a05826 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::Bindings::RuntimeObject::fieldGetter(JSC::ExecState*, JSC::JSValue, JSC::PropertyName)+0xfe) [0x7fed11a05826]
STDERR: 7   0x7fed119146b9 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::PropertySlot::getValue(JSC::ExecState*, JSC::PropertyName) const+0xc9) [0x7fed119146b9]
STDERR: 8   0x7fed11915507 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::JSObject::get(JSC::ExecState*, JSC::PropertyName) const+0x71) [0x7fed11915507]
STDERR: 9   0x7fed11991d69 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::runtimeObjectPropertyGetter(JSC::ExecState*, JSC::JSValue, JSC::PropertyName)+0x68) [0x7fed11991d69]
STDERR: 10  0x7fed119146b9 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::PropertySlot::getValue(JSC::ExecState*, JSC::PropertyName) const+0xc9) [0x7fed119146b9]
STDERR: 11  0x7fed1198f8c0 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::JSValue::get(JSC::ExecState*, JSC::PropertyName, JSC::PropertySlot&) const+0xda) [0x7fed1198f8c0]
STDERR: 12  0x7fed12fa2c26 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(cti_op_get_by_id+0xae) [0x7fed12fa2c26]
STDERR: 13  0x7fed12fa08dd /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(+0x369b8dd) [0x7fed12fa08dd]
STDERR: 14  0x7fed12f763f9 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::JITCode::execute(JSC::RegisterFile*, JSC::ExecState*, JSC::JSGlobalData*)+0x61) [0x7fed12f763f9]
STDERR: 15  0x7fed12f72261 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::ScopeChainNode*, JSC::JSObject*)+0x10c1) [0x7fed12f72261]
STDERR: 16  0x7fed13031fde /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(JSC::evaluate(JSC::ExecState*, JSC::ScopeChainNode*, JSC::SourceCode const&, JSC::JSValue, JSC::JSValue*)+0x1bf) [0x7fed13031fde]
STDERR: 17  0x7fed1197b33c /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::JSMainThreadExecState::evaluate(JSC::ExecState*, JSC::ScopeChainNode*, JSC::SourceCode const&, JSC::JSValue, JSC::JSValue*)+0x54) [0x7fed1197b33c]
STDERR: 18  0x7fed119ac4b7 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::ScriptController::evaluateInWorld(WebCore::ScriptSourceCode const&, WebCore::DOMWrapperWorld*)+0x19f) [0x7fed119ac4b7]
STDERR: 19  0x7fed119ac61a /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::ScriptController::evaluate(WebCore::ScriptSourceCode const&)+0x34) [0x7fed119ac61a]
STDERR: 20  0x7fed11cd876f /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::ScriptElement::executeScript(WebCore::ScriptSourceCode const&)+0x1b1) [0x7fed11cd876f]
STDERR: 21  0x7fed11cd810c /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::ScriptElement::prepareScript(WTF::TextPosition const&, WebCore::ScriptElement::LegacyTypeSupport)+0x856) [0x7fed11cd810c]
STDERR: 22  0x7fed11ee1134 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::HTMLScriptRunner::runScript(WebCore::Element*, WTF::TextPosition const&)+0x190) [0x7fed11ee1134]
STDERR: 23  0x7fed11ee0675 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::HTMLScriptRunner::execute(WTF::PassRefPtr<WebCore::Element>, WTF::TextPosition const&)+0xa3) [0x7fed11ee0675]
STDERR: 24  0x7fed11ed1c0e /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::HTMLDocumentParser::runScriptsForPausedTreeBuilder()+0x134) [0x7fed11ed1c0e]
STDERR: 25  0x7fed11ed1d07 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::HTMLDocumentParser::canTakeNextToken(WebCore::HTMLDocumentParser::SynchronousMode, WebCore::PumpSession&)+0x99) [0x7fed11ed1d07]
STDERR: 26  0x7fed11ed21b7 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::HTMLDocumentParser::pumpTokenizer(WebCore::HTMLDocumentParser::SynchronousMode)+0x399) [0x7fed11ed21b7]
STDERR: 27  0x7fed11ed1a0b /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::HTMLDocumentParser::pumpTokenizerIfPossible(WebCore::HTMLDocumentParser::SynchronousMode)+0xb1) [0x7fed11ed1a0b]
STDERR: 28  0x7fed11ed2865 /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::HTMLDocumentParser::append(WebCore::SegmentedString const&)+0x14b) [0x7fed11ed2865]
STDERR: 29  0x7fed11beef2e /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::DecodedDataDocumentParser::flush(WebCore::DocumentWriter*)+0xa0) [0x7fed11beef2e]
STDERR: 30  0x7fed120924cc /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::DocumentWriter::end()+0x116) [0x7fed120924cc]
STDERR: 31  0x7fed1208496f /home/webkitbuildbot/slaves/debug64bit/buildslave/qt-linux-64-debug/build/WebKitBuild/Debug/lib/libQtWebKit.so.4(WebCore::DocumentLoader::finishedLoading()+0xd7) [0x7fed1208496f]

[Csaba Osztrogonác]

I skipped them on Qt - https://trac.webkit.org/changeset/117031/trunk/LayoutTests/platform/qt/Skipped

Please unskip them with the proper fix.

[Zan Dobersek]

Marked as failures for GTK in http://trac.webkit.org/changeset/117042.

[Csaba Osztrogonác]

Adam, Nate? Any idea why these tests fail everywhere?

[Csaba Osztrogonác]

*** Bug 86480 has been marked as a duplicate of this bug. ***

[Adam Barth]

> Adam, Nate? Any idea why these tests fail everywhere?

The test is likely exposing bugs in that plugin code.  They're likely real crashes that could be triggered by plugins.

[Jessie Berlin]

This is also happening on WK2 Windows:
http://build.webkit.org/results/Windows%207%20Release%20(WebKit2%20Tests)/r118926%20(18738)/plugins/npruntime/delete-plugin-within-hasProperty-return-false-crash-log.txt
http://build.webkit.org/results/Windows%207%20Release%20(WebKit2%20Tests)/r118926%20(18738)/plugins/npruntime/delete-plugin-within-hasProperty-return-true-crash-log.txt
http://build.webkit.org/results/Windows%207%20Release%20(WebKit2%20Tests)/r118926%20(18738)/plugins/npruntime/delete-plugin-within-setProperty-crash-log.txt

STACK_TEXT:  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0021e5a0 7de49ca4 7dc575e0 7e2f6680 00000000 <Unloaded_npTestNetscapePlugin.dll>+0x4e31
0021e5f4 71b519c4 00a41598 7dfbfe28 00000000 0x7de49ca4
0021e60c 7397dd62 013c7f90 03820038 7dfd9438 WebKit!WebKit::JSNPObject::getOwnPropertySlot+0x44 [c:\cygwin\home\buildbot\slave\win-release\build\source\webkit2\webprocess\plugins\netscape\jsnpobject.cpp @ 271]
0021e66c 71c9033b 03820038 7dfd9438 7dfd9438 JavaScriptCore!JSC::JSObject::hasProperty+0x102 [c:\cygwin\home\buildbot\slave\win-release\build\source\javascriptcore\runtime\jsobject.cpp @ 246]
0021e684 71c91e95 03820038 7dfd9438 0021e70c WebKit!WebCore::runtimeObjectCustomGetOwnPropertySlot+0x2b [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\bindings\js\jspluginelementfunctions.cpp @ 119]
0021e69c 71f9ebba 03820038 7dfd9438 0021e70c WebKit!WebCore::JSHTMLAppletElement::getOwnPropertySlotDelegate+0x15 [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\bindings\js\jshtmlappletelementcustom.cpp @ 38]
0021e6bc 739558f1 013c7fd0 03820038 7dfd9438 WebKit!WebCore::JSHTMLEmbedElement::getOwnPropertySlot+0x1a [c:\cygwin\home\buildbot\slave\win-release\build\webkitbuild\release\obj\webcore\derivedsources\jshtmlembedelement.cpp @ 138]
0021e6e8 739fd737 0021e73c 03820038 7dfd9438 JavaScriptCore!JSC::JSValue::get+0x221 [c:\cygwin\home\buildbot\slave\win-release\build\source\javascriptcore\runtime\jsobject.h @ 818]
0021e750 12e72cea 00000000 013c7fd0 fffffffb JavaScriptCore!cti_op_get_by_id+0x57 [c:\cygwin\home\buildbot\slave\win-release\build\source\javascriptcore\jit\jitstubs.cpp @ 1677]
0021e7a0 73a00202 12e72a20 7eebe8dc 03820038 0x12e72cea
0021e7d4 73a0445f 0021eca0 7eebe8dc 03820038 JavaScriptCore!JSC::JITCode::execute+0x22 [c:\cygwin\home\buildbot\slave\win-release\build\source\javascriptcore\jit\jitcode.h @ 127]
0021ed84 7395c33a 0021eda8 03dd3850 03820000 JavaScriptCore!JSC::Interpreter::execute+0xddf [c:\cygwin\home\buildbot\slave\win-release\build\source\javascriptcore\interpreter\interpreter.cpp @ 1232]
0021edb8 71c85101 0021ee1c 0281e4c8 0283b8d0 JavaScriptCore!JSC::evaluate+0x10a [c:\cygwin\home\buildbot\slave\win-release\build\source\javascriptcore\runtime\completion.cpp @ 75]
0021ede4 71cbcdc4 0021ee1c 0281e4c8 0283b8d0 WebKit!WebCore::JSMainThreadExecState::evaluate+0x31 [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\bindings\js\jsmainthreadexecstate.h @ 76]
0021ee40 71cbcee4 0021ee78 7edd6f20 00000000 WebKit!WebCore::ScriptController::evaluateInWorld+0x114 [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\bindings\js\scriptcontroller.cpp @ 146]
0021ee5c 71d4488a 0021ee78 0021ee98 7e1d614c WebKit!WebCore::ScriptController::evaluate+0x44 [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\bindings\js\scriptcontroller.cpp @ 162]
0021ee80 71d6e9b7 0021ee98 7e5cb380 7e9dd24c WebKit!WebCore::ScriptElement::executeScript+0x7a [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\dom\scriptelement.cpp @ 295]
0021ef08 7221665b 0021f014 7e2d8c40 7e9dd210 WebKit!WebCore::ScriptElement::prepareScript+0x357 [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\dom\scriptelement.cpp @ 240]
0021efdc 722168f3 7e9dd24c 0021f014 7e9dd210 WebKit!WebCore::HTMLScriptRunner::runScript+0x4b [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\html\parser\htmlscriptrunner.cpp @ 298]
0021eff8 72173e02 7e9dd210 0021f014 0021f050 WebKit!WebCore::HTMLScriptRunner::execute+0x23 [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\html\parser\htmlscriptrunner.cpp @ 172]
0021f020 72173e54 7ef0205c 7ef02020 7ef02000 WebKit!WebCore::HTMLDocumentParser::runScriptsForPausedTreeBuilder+0x92 [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\html\parser\htmldocumentparser.cpp @ 208]
0021f034 72174a28 00000000 0021f050 7deea6d8 WebKit!WebCore::HTMLDocumentParser::canTakeNextToken+0x44 [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\html\parser\htmldocumentparser.cpp @ 226]
0021f078 72174d98 00000000 7ef02000 0021f0d8 WebKit!WebCore::HTMLDocumentParser::pumpTokenizer+0x128 [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\html\parser\htmldocumentparser.cpp @ 278]
0021f088 71d59b44 0021f0a0 7eec4700 7deea6d8 WebKit!WebCore::HTMLDocumentParser::append+0xc8 [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\html\parser\htmldocumentparser.cpp @ 372]
0021f0d8 7215fdc3 7e1f8600 7deea680 7deea680 WebKit!WebCore::DecodedDataDocumentParser::flush+0x74 [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\dom\decodeddatadocumentparser.cpp @ 60]
0021f0e8 71e6c9bf 7ef33480 7219b3ad 00000000 WebKit!WebCore::DocumentWriter::end+0x23 [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\loader\documentwriter.cpp @ 239]
0021f0f0 7219b3ad 00000000 7ddd5d60 0021f110 WebKit!WebCore::DocumentLoader::finishedLoading+0x7f [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\loader\documentloader.cpp @ 300]
0021f100 7203eca3 00000000 00000000 0021f128 WebKit!WebCore::MainResourceLoader::didFinishLoading+0x6d [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\loader\mainresourceloader.cpp @ 545]
0021f110 71cc203b 7ddd5d60 00000000 00000000 WebKit!WebCore::ResourceLoader::didFinishLoading+0x13 [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\loader\resourceloader.cpp @ 436]
0021f128 725d759f 117a6020 7ddd5d60 6304cb19 WebKit!WebCore::didFinishLoading+0x2b [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\platform\network\cf\resourcehandlecfnet.cpp @ 301]
0021f1c4 725d8f76 0021f264 009e7b40 73dd7a80 CFNetwork!CFReadStreamCreateWithFormArray+0x768f
0021f34c 725d92e5 0021f420 00000004 3d51b988 CFNetwork!CFReadStreamCreateWithFormArray+0x9066
0021f4d8 725d26e2 3d51b9bc 00000004 117a6020 CFNetwork!CFReadStreamCreateWithFormArray+0x93d5
0021f548 725d38e4 00a14778 000004cf 71ba35f6 CFNetwork!CFReadStreamCreateWithFormArray+0x27d2
0021f56c 764e62fa 0024020a 000004cf 117a6020 CFNetwork!CFReadStreamCreateWithFormArray+0x39d4
0021f598 764e6d3a 725d3860 0024020a 000004cf USER32!InternalCallWinProc+0x23
0021f610 764e77c4 00000000 725d3860 0024020a USER32!UserCallWinProcCheckWow+0x109
0021f670 764e788a 725d3860 00000000 0021f6b4 USER32!DispatchMessageWorker+0x3bc
0021f680 71ba3221 0021f698 0021f6fc 00000000 USER32!DispatchMessageW+0xf
0021f6b4 71b412ee 75c01222 7ee90488 7ee913c0 WebKit!WebCore::RunLoop::run+0x41 [c:\cygwin\home\buildbot\slave\win-release\build\source\webcore\platform\win\runloopwin.cpp @ 76]
0021f6c8 71b16606 0021f6fc 00000000 7ee951f0 WebKit!WebKit::WebProcessMain+0xde [c:\cygwin\home\buildbot\slave\win-release\build\source\webkit2\webprocess\win\webprocessmainwin.cpp @ 84]
0021f6e8 71b166ac 00000000 013e0000 002814ce WebKit!WebKitMain+0x116 [c:\cygwin\home\buildbot\slave\win-release\build\source\webkit2\webprocess\webkitmain.cpp @ 59]
0021f714 013e1098 013e0000 00000000 002814ce WebKit!WebKitMain+0x9c [c:\cygwin\home\buildbot\slave\win-release\build\source\webkit2\webprocess\webkitmain.cpp @ 187]
0021f944 013e1258 013e0000 00000000 002814ce WebKit2WebProcess!wWinMain+0x98 [c:\cygwin\home\buildbot\slave\win-release\build\source\webkit2\win\mainwin.cpp @ 67]
0021f9d8 75c0339a 7efde000 0021fa24 77499ef2 WebKit2WebProcess!__tmainCRTStartup+0x150 [f:\dd\vctools\crt_bld\self_x86\crt\src\crtexe.c @ 589]
0021f9e4 77499ef2 7efde000 733e872c 00000000 kernel32!BaseThreadInitThunk+0xe
0021fa24 77499ec5 013e13c4 7efde000 00000000 ntdll!__RtlUserThreadStart+0x70
0021fa3c 00000000 013e13c4 7efde000 00000000 ntdll!_RtlUserThreadStart+0x1b

[Jessie Berlin]

Added to the Windows Skipped list in http://trac.webkit.org/changeset/118974

[Radar WebKit Bug Importer]

<rdar://problem/11560224>

[Csaba Osztrogonác]

The bug is still valid. Is anybody working on it?

[Zan Dobersek]

The following two tests are still crashing on the GTK WebKit1 port:
plugins/npruntime/delete-plugin-within-getProperty.html
plugins/npruntime/delete-plugin-within-invoke.html

No crashes occur in these two tests on the GTK WebKit2 port.
Note that these two tests are probably still crashing on other ports listed in the title as well, they're just skipped.

Dashboard:
http://test-results.appspot.com/dashboards/flakiness_dashboard.html#group=%40ToT%20-%20webkit.org&tests=plugins%2Fnpruntime%2Fdelete-plugin-within-getProperty.html%2Cplugins%2Fnpruntime%2Fdelete-plugin-within-invoke.html