[Webkit-unassigned] [Bug 44690] New: Race condition in WorkQueue destruction (could lead to crashes)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=44690

           Summary: Race condition in WorkQueue destruction (could lead to
                    crashes)
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Mac OS X 10.6
            Status: NEW
          Keywords: NeedsRadar, PlatformOnly
          Severity: Normal
          Priority: P2
         Component: WebKit2
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: aroben at apple.com
                CC: andersca at apple.com, sam at webkit.org


Consider the following sequence of events:

1. WorkQueue::scheduleWork is called, scheduling the work to be asynchronously executed on a dispatch queue
2. The WorkQueue is destroyed
3. The dispatch queue calls WorkItem::executeWorkItem

executeWorkItem will dereference the destroyed WorkQueue. This could lead to crashes.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.