[Webkit-unassigned] [Bug 100792] New: Crash in WebProcess at com.apple.WebCore: WebCore::ResourceLoader::start

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=100792

           Summary: Crash in WebProcess at com.apple.WebCore:
                    WebCore::ResourceLoader::start
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit2
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: beidson at apple.com


Crash in WebProcess at com.apple.WebCore: WebCore::ResourceLoader::start

This is due to a null deref in WebResourceLoadScheduler::startResourceLoad.

This is probably because the RemoveLoadIdentifier messages from Web -> NetworkProcess is asynchronous.

The WebProcess is tearing down the page (or parts of it) and therefore cleaning up the ResourceLoaders.  It dispatches the message to the NetworkProcess then immediately removes the loader from it's local pending set.  Before the NetworkProcess can handle that message, it is in the middle of starting resource loads so it dispatches back to the WebProcess to start the load...  but it's already remvoed the record of that Loader.

For now, we should make the ASSERT(resourceLoader) be a null check with early return to mitigate this crash.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.