<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head><meta http-equiv="content-type" content="text/html; charset=utf-8" />
<title>[186410] releases/WebKitGTK/webkit-2.8/Source</title>
</head>
<body>

<style type="text/css"><!--
#msg dl.meta { border: 1px #006 solid; background: #369; padding: 6px; color: #fff; }
#msg dl.meta dt { float: left; width: 6em; font-weight: bold; }
#msg dt:after { content:':';}
#msg dl, #msg dt, #msg ul, #msg li, #header, #footer, #logmsg { font-family: verdana,arial,helvetica,sans-serif; font-size: 10pt;  }
#msg dl a { font-weight: bold}
#msg dl a:link    { color:#fc3; }
#msg dl a:active  { color:#ff0; }
#msg dl a:visited { color:#cc6; }
h3 { font-family: verdana,arial,helvetica,sans-serif; font-size: 10pt; font-weight: bold; }
#msg pre { overflow: auto; background: #ffc; border: 1px #fa0 solid; padding: 6px; }
#logmsg { background: #ffc; border: 1px #fa0 solid; padding: 1em 1em 0 1em; }
#logmsg p, #logmsg pre, #logmsg blockquote { margin: 0 0 1em 0; }
#logmsg p, #logmsg li, #logmsg dt, #logmsg dd { line-height: 14pt; }
#logmsg h1, #logmsg h2, #logmsg h3, #logmsg h4, #logmsg h5, #logmsg h6 { margin: .5em 0; }
#logmsg h1:first-child, #logmsg h2:first-child, #logmsg h3:first-child, #logmsg h4:first-child, #logmsg h5:first-child, #logmsg h6:first-child { margin-top: 0; }
#logmsg ul, #logmsg ol { padding: 0; list-style-position: inside; margin: 0 0 0 1em; }
#logmsg ul { text-indent: -1em; padding-left: 1em; }#logmsg ol { text-indent: -1.5em; padding-left: 1.5em; }
#logmsg > ul, #logmsg > ol { margin: 0 0 1em 0; }
#logmsg pre { background: #eee; padding: 1em; }
#logmsg blockquote { border: 1px solid #fa0; border-left-width: 10px; padding: 1em 1em 0 1em; background: white;}
#logmsg dl { margin: 0; }
#logmsg dt { font-weight: bold; }
#logmsg dd { margin: 0; padding: 0 0 0.5em 0; }
#logmsg dd:before { content:'\00bb';}
#logmsg table { border-spacing: 0px; border-collapse: collapse; border-top: 4px solid #fa0; border-bottom: 1px solid #fa0; background: #fff; }
#logmsg table th { text-align: left; font-weight: normal; padding: 0.2em 0.5em; border-top: 1px dotted #fa0; }
#logmsg table td { text-align: right; border-top: 1px dotted #fa0; padding: 0.2em 0.5em; }
#logmsg table thead th { text-align: center; border-bottom: 1px solid #fa0; }
#logmsg table th.Corner { text-align: left; }
#logmsg hr { border: none 0; border-top: 2px dashed #fa0; height: 1px; }
#header, #footer { color: #fff; background: #636; border: 1px #300 solid; padding: 6px; }
#patch { width: 100%; }
#patch h4 {font-family: verdana,arial,helvetica,sans-serif;font-size:10pt;padding:8px;background:#369;color:#fff;margin:0;}
#patch .propset h4, #patch .binary h4 {margin:0;}
#patch pre {padding:0;line-height:1.2em;margin:0;}
#patch .diff {width:100%;background:#eee;padding: 0 0 10px 0;overflow:auto;}
#patch .propset .diff, #patch .binary .diff  {padding:10px 0;}
#patch span {display:block;padding:0 10px;}
#patch .modfile, #patch .addfile, #patch .delfile, #patch .propset, #patch .binary, #patch .copfile {border:1px solid #ccc;margin:10px 0;}
#patch ins {background:#dfd;text-decoration:none;display:block;padding:0 10px;}
#patch del {background:#fdd;text-decoration:none;display:block;padding:0 10px;}
#patch .lines, .info {color:#888;background:#fff;}
--></style>
<div id="msg">
<dl class="meta">
<dt>Revision</dt> <dd><a href="http://trac.webkit.org/projects/webkit/changeset/186410">186410</a></dd>
<dt>Author</dt> <dd>carlosgc@webkit.org</dd>
<dt>Date</dt> <dd>2015-07-07 00:28:18 -0700 (Tue, 07 Jul 2015)</dd>
</dl>

<h3>Log Message</h3>
<pre>Merge <a href="http://trac.webkit.org/projects/webkit/changeset/185542">r185542</a> - [WK2] API::Navigation objects are leaked on history navigation to HistoryItems in PageCache
https://bugs.webkit.org/show_bug.cgi?id=145948

Reviewed by Darin Adler.

Source/WebCore:

API::Navigation objects were leaked on history navigation to
HistoryItems in PageCache. In such case, we would create 2 Navigation
objects instead of 1 and the first one would be leaked. The reason
we create the second one is because we fail to pass along the
navigationID from the UIProcess to the WebProcess and then back to the
UIProcess. On the IPC back to the UIProcess, the navigationID ends up
being 0 so the UIProcess creates a new Navigation object, thinking that
the load was triggered by the WebContent process.

We now pass along the navigationID, even if the HistoryItem is in the
PageCache and we end up reusing the cached DocumentLoader, instead of
creating a new one. A new updateCachedDocumentLoader() delegate is
added to the FrameLoaderClient, similarly to the pre-existing
createDocumentLoader() but for the case where the DocumentLoader gets
reused.

* loader/EmptyClients.h:
* loader/FrameLoader.cpp:
(WebCore::FrameLoader::loadDifferentDocumentItem):
* loader/FrameLoaderClient.h:

Source/WebKit/mac:

Add empty implementation for new
FrameLoaderClient::updatedCachedDocumentLoader().

* WebCoreSupport/WebFrameLoaderClient.h:

Source/WebKit/win:

Add empty implementation for new
FrameLoaderClient::updatedCachedDocumentLoader().

* WebCoreSupport/WebFrameLoaderClient.h:

Source/WebKit2:

API::Navigation objects were leaked on history navigation to
HistoryItems in PageCache. In such case, we would create 2 Navigation
objects instead of 1 and the first one would be leaked. The reason
we create the second one is because we fail to pass along the
navigationID from the UIProcess to the WebProcess and then back to the
UIProcess. On the IPC back to the UIProcess, the navigationID ends up
being 0 so the UIProcess creates a new Navigation object, thinking that
the load was triggered by the WebContent process.

We now pass along the navigationID, even if the HistoryItem is in the
PageCache and we end up reusing the cached DocumentLoader, instead of
creating a new one. A new updateCachedDocumentLoader() delegate is
added to the FrameLoaderClient, similarly to the pre-existing
createDocumentLoader() but for the case where the DocumentLoader gets
reused.

* WebProcess/WebCoreSupport/WebFrameLoaderClient.cpp:
(WebKit::WebFrameLoaderClient::updateCachedDocumentLoader):
* WebProcess/WebCoreSupport/WebFrameLoaderClient.h:
* WebProcess/WebPage/WebPage.cpp:
(WebKit::WebPage::goForward):
(WebKit::WebPage::goBack):
(WebKit::WebPage::goToBackForwardItem):
(WebKit::WebPage::updateCachedDocumentLoader):
* WebProcess/WebPage/WebPage.h:</pre>

<h3>Modified Paths</h3>
<ul>
<li><a href="#releasesWebKitGTKwebkit28SourceWebCoreChangeLog">releases/WebKitGTK/webkit-2.8/Source/WebCore/ChangeLog</a></li>
<li><a href="#releasesWebKitGTKwebkit28SourceWebCoreloaderEmptyClientsh">releases/WebKitGTK/webkit-2.8/Source/WebCore/loader/EmptyClients.h</a></li>
<li><a href="#releasesWebKitGTKwebkit28SourceWebCoreloaderFrameLoadercpp">releases/WebKitGTK/webkit-2.8/Source/WebCore/loader/FrameLoader.cpp</a></li>
<li><a href="#releasesWebKitGTKwebkit28SourceWebCoreloaderFrameLoaderClienth">releases/WebKitGTK/webkit-2.8/Source/WebCore/loader/FrameLoaderClient.h</a></li>
<li><a href="#releasesWebKitGTKwebkit28SourceWebKitmacChangeLog">releases/WebKitGTK/webkit-2.8/Source/WebKit/mac/ChangeLog</a></li>
<li><a href="#releasesWebKitGTKwebkit28SourceWebKitmacWebCoreSupportWebFrameLoaderClienth">releases/WebKitGTK/webkit-2.8/Source/WebKit/mac/WebCoreSupport/WebFrameLoaderClient.h</a></li>
<li><a href="#releasesWebKitGTKwebkit28SourceWebKitwinChangeLog">releases/WebKitGTK/webkit-2.8/Source/WebKit/win/ChangeLog</a></li>
<li><a href="#releasesWebKitGTKwebkit28SourceWebKitwinWebCoreSupportWebFrameLoaderClienth">releases/WebKitGTK/webkit-2.8/Source/WebKit/win/WebCoreSupport/WebFrameLoaderClient.h</a></li>
<li><a href="#releasesWebKitGTKwebkit28SourceWebKit2ChangeLog">releases/WebKitGTK/webkit-2.8/Source/WebKit2/ChangeLog</a></li>
<li><a href="#releasesWebKitGTKwebkit28SourceWebKit2WebProcessWebCoreSupportWebFrameLoaderClientcpp">releases/WebKitGTK/webkit-2.8/Source/WebKit2/WebProcess/WebCoreSupport/WebFrameLoaderClient.cpp</a></li>
<li><a href="#releasesWebKitGTKwebkit28SourceWebKit2WebProcessWebCoreSupportWebFrameLoaderClienth">releases/WebKitGTK/webkit-2.8/Source/WebKit2/WebProcess/WebCoreSupport/WebFrameLoaderClient.h</a></li>
<li><a href="#releasesWebKitGTKwebkit28SourceWebKit2WebProcessWebPageWebPagecpp">releases/WebKitGTK/webkit-2.8/Source/WebKit2/WebProcess/WebPage/WebPage.cpp</a></li>
<li><a href="#releasesWebKitGTKwebkit28SourceWebKit2WebProcessWebPageWebPageh">releases/WebKitGTK/webkit-2.8/Source/WebKit2/WebProcess/WebPage/WebPage.h</a></li>
</ul>

</div>
<div id="patch">
<h3>Diff</h3>
<a id="releasesWebKitGTKwebkit28SourceWebCoreChangeLog"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.8/Source/WebCore/ChangeLog (186409 => 186410)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.8/Source/WebCore/ChangeLog        2015-07-07 07:21:38 UTC (rev 186409)
+++ releases/WebKitGTK/webkit-2.8/Source/WebCore/ChangeLog        2015-07-07 07:28:18 UTC (rev 186410)
</span><span class="lines">@@ -1,3 +1,31 @@
</span><ins>+2015-06-13  Chris Dumez  &lt;cdumez@apple.com&gt;
+
+        [WK2] API::Navigation objects are leaked on history navigation to HistoryItems in PageCache
+        https://bugs.webkit.org/show_bug.cgi?id=145948
+
+        Reviewed by Darin Adler.
+
+        API::Navigation objects were leaked on history navigation to
+        HistoryItems in PageCache. In such case, we would create 2 Navigation
+        objects instead of 1 and the first one would be leaked. The reason
+        we create the second one is because we fail to pass along the
+        navigationID from the UIProcess to the WebProcess and then back to the
+        UIProcess. On the IPC back to the UIProcess, the navigationID ends up
+        being 0 so the UIProcess creates a new Navigation object, thinking that
+        the load was triggered by the WebContent process.
+
+        We now pass along the navigationID, even if the HistoryItem is in the
+        PageCache and we end up reusing the cached DocumentLoader, instead of
+        creating a new one. A new updateCachedDocumentLoader() delegate is
+        added to the FrameLoaderClient, similarly to the pre-existing
+        createDocumentLoader() but for the case where the DocumentLoader gets
+        reused.
+
+        * loader/EmptyClients.h:
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::loadDifferentDocumentItem):
+        * loader/FrameLoaderClient.h:
+
</ins><span class="cx"> 2015-06-11  Zalan Bujtas  &lt;zalan@apple.com&gt;
</span><span class="cx"> 
</span><span class="cx">         Do not crash when the descendant frame tree is destroyed during layout.
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit28SourceWebCoreloaderEmptyClientsh"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.8/Source/WebCore/loader/EmptyClients.h (186409 => 186410)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.8/Source/WebCore/loader/EmptyClients.h        2015-07-07 07:21:38 UTC (rev 186409)
+++ releases/WebKitGTK/webkit-2.8/Source/WebCore/loader/EmptyClients.h        2015-07-07 07:28:18 UTC (rev 186410)
</span><span class="lines">@@ -348,6 +348,7 @@
</span><span class="cx">     virtual void prepareForDataSourceReplacement() override { }
</span><span class="cx"> 
</span><span class="cx">     virtual PassRefPtr&lt;DocumentLoader&gt; createDocumentLoader(const ResourceRequest&amp;, const SubstituteData&amp;) override;
</span><ins>+    virtual void updateCachedDocumentLoader(DocumentLoader&amp;) override { }
</ins><span class="cx">     virtual void setTitle(const StringWithDirection&amp;, const URL&amp;) override { }
</span><span class="cx"> 
</span><span class="cx">     virtual String userAgent(const URL&amp;) override { return &quot;&quot;; }
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit28SourceWebCoreloaderFrameLoadercpp"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.8/Source/WebCore/loader/FrameLoader.cpp (186409 => 186410)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.8/Source/WebCore/loader/FrameLoader.cpp        2015-07-07 07:21:38 UTC (rev 186409)
+++ releases/WebKitGTK/webkit-2.8/Source/WebCore/loader/FrameLoader.cpp        2015-07-07 07:28:18 UTC (rev 186410)
</span><span class="lines">@@ -3153,6 +3153,7 @@
</span><span class="cx"> 
</span><span class="cx">     if (CachedPage* cachedPage = PageCache::singleton().get(item, m_frame.page())) {
</span><span class="cx">         auto documentLoader = cachedPage-&gt;documentLoader();
</span><ins>+        m_client.updateCachedDocumentLoader(*documentLoader);
</ins><span class="cx">         documentLoader-&gt;setTriggeringAction(NavigationAction(documentLoader-&gt;request(), loadType, false));
</span><span class="cx">         documentLoader-&gt;setLastCheckedRequest(ResourceRequest());
</span><span class="cx">         loadWithDocumentLoader(documentLoader, loadType, 0, AllowNavigationToInvalidURL::Yes);
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit28SourceWebCoreloaderFrameLoaderClienth"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.8/Source/WebCore/loader/FrameLoaderClient.h (186409 => 186410)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.8/Source/WebCore/loader/FrameLoaderClient.h        2015-07-07 07:21:38 UTC (rev 186409)
+++ releases/WebKitGTK/webkit-2.8/Source/WebCore/loader/FrameLoaderClient.h        2015-07-07 07:28:18 UTC (rev 186410)
</span><span class="lines">@@ -246,6 +246,7 @@
</span><span class="cx">         virtual void prepareForDataSourceReplacement() = 0;
</span><span class="cx"> 
</span><span class="cx">         virtual PassRefPtr&lt;DocumentLoader&gt; createDocumentLoader(const ResourceRequest&amp;, const SubstituteData&amp;) = 0;
</span><ins>+        virtual void updateCachedDocumentLoader(DocumentLoader&amp;) = 0;
</ins><span class="cx">         virtual void setTitle(const StringWithDirection&amp;, const URL&amp;) = 0;
</span><span class="cx"> 
</span><span class="cx">         virtual String userAgent(const URL&amp;) = 0;
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit28SourceWebKitmacChangeLog"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.8/Source/WebKit/mac/ChangeLog (186409 => 186410)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.8/Source/WebKit/mac/ChangeLog        2015-07-07 07:21:38 UTC (rev 186409)
+++ releases/WebKitGTK/webkit-2.8/Source/WebKit/mac/ChangeLog        2015-07-07 07:28:18 UTC (rev 186410)
</span><span class="lines">@@ -1,3 +1,15 @@
</span><ins>+2015-06-13  Chris Dumez  &lt;cdumez@apple.com&gt;
+
+        [WK2] API::Navigation objects are leaked on history navigation to HistoryItems in PageCache
+        https://bugs.webkit.org/show_bug.cgi?id=145948
+
+        Reviewed by Darin Adler.
+
+        Add empty implementation for new
+        FrameLoaderClient::updatedCachedDocumentLoader().
+
+        * WebCoreSupport/WebFrameLoaderClient.h:
+
</ins><span class="cx"> 2015-05-19  Brady Eidson  &lt;beidson@apple.com&gt;
</span><span class="cx"> 
</span><span class="cx">         X-Frame-Options headers not respected when loading from application cache.
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit28SourceWebKitmacWebCoreSupportWebFrameLoaderClienth"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.8/Source/WebKit/mac/WebCoreSupport/WebFrameLoaderClient.h (186409 => 186410)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.8/Source/WebKit/mac/WebCoreSupport/WebFrameLoaderClient.h        2015-07-07 07:21:38 UTC (rev 186409)
+++ releases/WebKitGTK/webkit-2.8/Source/WebKit/mac/WebCoreSupport/WebFrameLoaderClient.h        2015-07-07 07:28:18 UTC (rev 186410)
</span><span class="lines">@@ -190,6 +190,7 @@
</span><span class="cx">     virtual void didFinishLoad() override;
</span><span class="cx">     virtual void prepareForDataSourceReplacement() override;
</span><span class="cx">     virtual PassRefPtr&lt;WebCore::DocumentLoader&gt; createDocumentLoader(const WebCore::ResourceRequest&amp;, const WebCore::SubstituteData&amp;) override;
</span><ins>+    virtual void updateCachedDocumentLoader(WebCore::DocumentLoader&amp;) override { }
</ins><span class="cx"> 
</span><span class="cx">     virtual void setTitle(const WebCore::StringWithDirection&amp;, const WebCore::URL&amp;) override;
</span><span class="cx"> 
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit28SourceWebKitwinChangeLog"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.8/Source/WebKit/win/ChangeLog (186409 => 186410)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.8/Source/WebKit/win/ChangeLog        2015-07-07 07:21:38 UTC (rev 186409)
+++ releases/WebKitGTK/webkit-2.8/Source/WebKit/win/ChangeLog        2015-07-07 07:28:18 UTC (rev 186410)
</span><span class="lines">@@ -1,3 +1,15 @@
</span><ins>+2015-06-13  Chris Dumez  &lt;cdumez@apple.com&gt;
+
+        [WK2] API::Navigation objects are leaked on history navigation to HistoryItems in PageCache
+        https://bugs.webkit.org/show_bug.cgi?id=145948
+
+        Reviewed by Darin Adler.
+
+        Add empty implementation for new
+        FrameLoaderClient::updatedCachedDocumentLoader().
+
+        * WebCoreSupport/WebFrameLoaderClient.h:
+
</ins><span class="cx"> 2015-05-19  Brady Eidson  &lt;beidson@apple.com&gt;
</span><span class="cx"> 
</span><span class="cx">         X-Frame-Options headers not respected when loading from application cache.
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit28SourceWebKitwinWebCoreSupportWebFrameLoaderClienth"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.8/Source/WebKit/win/WebCoreSupport/WebFrameLoaderClient.h (186409 => 186410)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.8/Source/WebKit/win/WebCoreSupport/WebFrameLoaderClient.h        2015-07-07 07:21:38 UTC (rev 186409)
+++ releases/WebKitGTK/webkit-2.8/Source/WebKit/win/WebCoreSupport/WebFrameLoaderClient.h        2015-07-07 07:28:18 UTC (rev 186410)
</span><span class="lines">@@ -149,6 +149,8 @@
</span><span class="cx">     virtual WTF::String userAgent(const WebCore::URL&amp;) override;
</span><span class="cx"> 
</span><span class="cx">     virtual PassRefPtr&lt;WebCore::DocumentLoader&gt; createDocumentLoader(const WebCore::ResourceRequest&amp;, const WebCore::SubstituteData&amp;);
</span><ins>+    virtual void updateCachedDocumentLoader(WebCore::DocumentLoader&amp;) override { }
+
</ins><span class="cx">     virtual void setTitle(const WebCore::StringWithDirection&amp;, const WebCore::URL&amp;);
</span><span class="cx"> 
</span><span class="cx">     virtual void savePlatformDataToCachedFrame(WebCore::CachedFrame*) override;
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit28SourceWebKit2ChangeLog"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.8/Source/WebKit2/ChangeLog (186409 => 186410)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.8/Source/WebKit2/ChangeLog        2015-07-07 07:21:38 UTC (rev 186409)
+++ releases/WebKitGTK/webkit-2.8/Source/WebKit2/ChangeLog        2015-07-07 07:28:18 UTC (rev 186410)
</span><span class="lines">@@ -1,3 +1,36 @@
</span><ins>+2015-06-13  Chris Dumez  &lt;cdumez@apple.com&gt;
+
+        [WK2] API::Navigation objects are leaked on history navigation to HistoryItems in PageCache
+        https://bugs.webkit.org/show_bug.cgi?id=145948
+
+        Reviewed by Darin Adler.
+
+        API::Navigation objects were leaked on history navigation to
+        HistoryItems in PageCache. In such case, we would create 2 Navigation
+        objects instead of 1 and the first one would be leaked. The reason
+        we create the second one is because we fail to pass along the
+        navigationID from the UIProcess to the WebProcess and then back to the
+        UIProcess. On the IPC back to the UIProcess, the navigationID ends up
+        being 0 so the UIProcess creates a new Navigation object, thinking that
+        the load was triggered by the WebContent process.
+
+        We now pass along the navigationID, even if the HistoryItem is in the
+        PageCache and we end up reusing the cached DocumentLoader, instead of
+        creating a new one. A new updateCachedDocumentLoader() delegate is
+        added to the FrameLoaderClient, similarly to the pre-existing
+        createDocumentLoader() but for the case where the DocumentLoader gets
+        reused.
+
+        * WebProcess/WebCoreSupport/WebFrameLoaderClient.cpp:
+        (WebKit::WebFrameLoaderClient::updateCachedDocumentLoader):
+        * WebProcess/WebCoreSupport/WebFrameLoaderClient.h:
+        * WebProcess/WebPage/WebPage.cpp:
+        (WebKit::WebPage::goForward):
+        (WebKit::WebPage::goBack):
+        (WebKit::WebPage::goToBackForwardItem):
+        (WebKit::WebPage::updateCachedDocumentLoader):
+        * WebProcess/WebPage/WebPage.h:
+
</ins><span class="cx"> 2015-05-29  Joseph Pecoraro  &lt;pecoraro@apple.com&gt;
</span><span class="cx"> 
</span><span class="cx">         Web Inspector: Crash closing a related tab with Web Inspector open while page is refreshing
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit28SourceWebKit2WebProcessWebCoreSupportWebFrameLoaderClientcpp"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.8/Source/WebKit2/WebProcess/WebCoreSupport/WebFrameLoaderClient.cpp (186409 => 186410)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.8/Source/WebKit2/WebProcess/WebCoreSupport/WebFrameLoaderClient.cpp        2015-07-07 07:21:38 UTC (rev 186409)
+++ releases/WebKitGTK/webkit-2.8/Source/WebKit2/WebProcess/WebCoreSupport/WebFrameLoaderClient.cpp        2015-07-07 07:28:18 UTC (rev 186410)
</span><span class="lines">@@ -1221,6 +1221,11 @@
</span><span class="cx">     return m_frame-&gt;page()-&gt;createDocumentLoader(*m_frame-&gt;coreFrame(), request, substituteData);
</span><span class="cx"> }
</span><span class="cx"> 
</span><ins>+void WebFrameLoaderClient::updateCachedDocumentLoader(WebCore::DocumentLoader&amp; loader)
+{
+    m_frame-&gt;page()-&gt;updateCachedDocumentLoader(static_cast&lt;WebDocumentLoader&amp;&gt;(loader), *m_frame-&gt;coreFrame());
+}
+
</ins><span class="cx"> void WebFrameLoaderClient::setTitle(const StringWithDirection&amp; title, const URL&amp; url)
</span><span class="cx"> {
</span><span class="cx">     WebPage* webPage = m_frame-&gt;page();
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit28SourceWebKit2WebProcessWebCoreSupportWebFrameLoaderClienth"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.8/Source/WebKit2/WebProcess/WebCoreSupport/WebFrameLoaderClient.h (186409 => 186410)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.8/Source/WebKit2/WebProcess/WebCoreSupport/WebFrameLoaderClient.h        2015-07-07 07:21:38 UTC (rev 186409)
+++ releases/WebKitGTK/webkit-2.8/Source/WebKit2/WebProcess/WebCoreSupport/WebFrameLoaderClient.h        2015-07-07 07:28:18 UTC (rev 186410)
</span><span class="lines">@@ -160,6 +160,8 @@
</span><span class="cx">     virtual void prepareForDataSourceReplacement() override;
</span><span class="cx">     
</span><span class="cx">     virtual PassRefPtr&lt;WebCore::DocumentLoader&gt; createDocumentLoader(const WebCore::ResourceRequest&amp;, const WebCore::SubstituteData&amp;) override;
</span><ins>+    virtual void updateCachedDocumentLoader(WebCore::DocumentLoader&amp;) override;
+
</ins><span class="cx">     virtual void setTitle(const WebCore::StringWithDirection&amp;, const WebCore::URL&amp;) override;
</span><span class="cx">     
</span><span class="cx">     virtual String userAgent(const WebCore::URL&amp;) override;
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit28SourceWebKit2WebProcessWebPageWebPagecpp"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.8/Source/WebKit2/WebProcess/WebPage/WebPage.cpp (186409 => 186410)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.8/Source/WebKit2/WebProcess/WebPage/WebPage.cpp        2015-07-07 07:21:38 UTC (rev 186409)
+++ releases/WebKitGTK/webkit-2.8/Source/WebKit2/WebProcess/WebPage/WebPage.cpp        2015-07-07 07:28:18 UTC (rev 186410)
</span><span class="lines">@@ -1214,8 +1214,7 @@
</span><span class="cx">         return;
</span><span class="cx"> 
</span><span class="cx">     ASSERT(!m_pendingNavigationID);
</span><del>-    if (!item-&gt;isInPageCache())
-        m_pendingNavigationID = navigationID;
</del><ins>+    m_pendingNavigationID = navigationID;
</ins><span class="cx"> 
</span><span class="cx">     m_page-&gt;goToItem(*item, FrameLoadType::Forward);
</span><span class="cx"> }
</span><span class="lines">@@ -1230,8 +1229,7 @@
</span><span class="cx">         return;
</span><span class="cx"> 
</span><span class="cx">     ASSERT(!m_pendingNavigationID);
</span><del>-    if (!item-&gt;isInPageCache())
-        m_pendingNavigationID = navigationID;
</del><ins>+    m_pendingNavigationID = navigationID;
</ins><span class="cx"> 
</span><span class="cx">     m_page-&gt;goToItem(*item, FrameLoadType::Back);
</span><span class="cx"> }
</span><span class="lines">@@ -1246,8 +1244,7 @@
</span><span class="cx">         return;
</span><span class="cx"> 
</span><span class="cx">     ASSERT(!m_pendingNavigationID);
</span><del>-    if (!item-&gt;isInPageCache())
-        m_pendingNavigationID = navigationID;
</del><ins>+    m_pendingNavigationID = navigationID;
</ins><span class="cx"> 
</span><span class="cx">     m_page-&gt;goToItem(*item, FrameLoadType::IndexedBackForward);
</span><span class="cx"> }
</span><span class="lines">@@ -4825,6 +4822,14 @@
</span><span class="cx">     return documentLoader.release();
</span><span class="cx"> }
</span><span class="cx"> 
</span><ins>+void WebPage::updateCachedDocumentLoader(WebDocumentLoader&amp; documentLoader, Frame&amp; frame)
+{
+    if (m_pendingNavigationID &amp;&amp; frame.isMainFrame()) {
+        documentLoader.setNavigationID(m_pendingNavigationID);
+        m_pendingNavigationID = 0;
+    }
+}
+
</ins><span class="cx"> void WebPage::getBytecodeProfile(uint64_t callbackID)
</span><span class="cx"> {
</span><span class="cx">     ASSERT(JSDOMWindow::commonVM().m_perBytecodeProfiler);
</span></span></pre></div>
<a id="releasesWebKitGTKwebkit28SourceWebKit2WebProcessWebPageWebPageh"></a>
<div class="modfile"><h4>Modified: releases/WebKitGTK/webkit-2.8/Source/WebKit2/WebProcess/WebPage/WebPage.h (186409 => 186410)</h4>
<pre class="diff"><span>
<span class="info">--- releases/WebKitGTK/webkit-2.8/Source/WebKit2/WebProcess/WebPage/WebPage.h        2015-07-07 07:21:38 UTC (rev 186409)
+++ releases/WebKitGTK/webkit-2.8/Source/WebKit2/WebProcess/WebPage/WebPage.h        2015-07-07 07:28:18 UTC (rev 186410)
</span><span class="lines">@@ -152,6 +152,7 @@
</span><span class="cx"> class WebColorChooser;
</span><span class="cx"> class WebContextMenu;
</span><span class="cx"> class WebContextMenuItemData;
</span><ins>+class WebDocumentLoader;
</ins><span class="cx"> class WebEvent;
</span><span class="cx"> class WebFrame;
</span><span class="cx"> class WebFullScreenManager;
</span><span class="lines">@@ -844,6 +845,7 @@
</span><span class="cx">     void setScrollPinningBehavior(uint32_t /* WebCore::ScrollPinningBehavior */ pinning);
</span><span class="cx"> 
</span><span class="cx">     PassRefPtr&lt;WebCore::DocumentLoader&gt; createDocumentLoader(WebCore::Frame&amp;, const WebCore::ResourceRequest&amp;, const WebCore::SubstituteData&amp;);
</span><ins>+    void updateCachedDocumentLoader(WebDocumentLoader&amp;, WebCore::Frame&amp;);
</ins><span class="cx"> 
</span><span class="cx">     void getBytecodeProfile(uint64_t callbackID);
</span><span class="cx">     
</span></span></pre>
</div>
</div>

</body>
</html>