[Webkit-unassigned] [Bug 86911] New: IndexedDB: "ASSERTION FAILED: !m_requestFinished" hit in IDBRequest::dispatchEvent

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=86911

           Summary: IndexedDB: "ASSERTION FAILED: !m_requestFinished" hit
                    in IDBRequest::dispatchEvent
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: jsbell at chromium.org


Created an attachment (id=142799)
 --> (https://bugs.webkit.org/attachment.cgi?id=142799&action=review)
Repro case

Seen in DumpRenderTree with attached LayoutTest (which could be dropped into storage/indexeddb for dependencies):

crash log for DumpRenderTree (pid 8867):
STDERR: ASSERTION FAILED: !m_requestFinished
STDERR: ../../third_party/WebKit/Source/WebCore/Modules/indexeddb/IDBRequest.cpp(342) : virtual bool WebCore::IDBRequest::dispatchEvent(WTF::PassRefPtr<WebCore::Event>)

What's probably happening is the transaction is completing, and IDBTransaction::onComplete() calls IDBTransaction::closeOpenCursors() calls IDBCursor::close() calls IDBRequest::finishCursor() which sets m_cursorFinished, which allows m_requestFinished to be set. This may be happening too early.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.