[Webkit-unassigned] [Bug 130395] New: [GTK] Race condition when the socket event source is cancelled

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=130395

           Summary: [GTK] Race condition when the socket event source is
                    cancelled
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Keywords: Gtk
          Severity: Normal
          Priority: P2
         Component: WebKit2
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: cgarcia at igalia.com
                CC: danw at gnome.org, gns at gnome.org, mrobinson at webkit.org,
                    pnormand at igalia.com, svillar at igalia.com,
                    csaavedra at igalia.com


In some cases when the socket event source is cancelled the socket event source callback is called with the condition of the previous poll instead of 0. This can happen sometimes when the source is cancelled from the socket event source callback. Once the socket event source is cancelled, it's dispatched by glib without polling, so the condition is never reset again and the callback is called again and again with the previous condition. When the condition is G_IO_IN, the source is re-scheduled entering into an infinite loop. We should always check if the source has been cancelled at the beginning of the callback to destroy the source instead of relying on the condition being 0.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.