[Webkit-unassigned] [Bug 50761] New: [Qt] Crash sometimes in QNetworkReplyHandler::finish()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=50761

           Summary: [Qt] Crash sometimes in QNetworkReplyHandler::finish()
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Keywords: Qt, QtTriaged
          Severity: Normal
          Priority: P3
         Component: Page Loading
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: jocelyn.turcotte at nokia.com


I would see problems where the QNetworkReply would be deleted in the other thread, but a new QNetworkReply would be allocated by the heap at the same address and would break the comparison code path.

Another problem would be that didFinishLoading would eventually call abort on the ResourceHandle, which would call deleteLater on the reply (if in a different thread). Calling deleteLater on oldReply would then cause a crash.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.