[Webkit-unassigned] [Bug 146098] New: Assertion failure (m_eventListeners.contains(std::make_pair(&connection, storageMapID))) in StorageArea::removeListener after closing a Safari tab

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=146098

            Bug ID: 146098
           Summary: Assertion failure
                    (m_eventListeners.contains(std::make_pair(&connection,
                    storageMapID))) in StorageArea::removeListener after
                    closing a Safari tab
    Classification: Unclassified
           Product: WebKit
           Version: 528+ (Nightly build)
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit2
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mitz at webkit.org
                CC: andersca at apple.com, beidson at apple.com

After closing a Safari tab, the assertion in StorageArea::removeListener failed with this backtrace:

#0    0x000000010280f3ba in WTFCrash at Source/WTF/wtf/Assertions.cpp:321
#1    0x0000000104b39c77 in WebKit::StorageManager::StorageArea::removeListener(IPC::Connection&, unsigned long long) at Source/WebKit2/UIProcess/Storage/StorageManager.cpp:202
#2    0x0000000104b53ce2 in WebKit::StorageManager::processDidCloseConnection(WebKit::WebProcessProxy&, IPC::Connection&)::$_4::operator()() const at Source/WebKit2/UIProcess/Storage/StorageManager.cpp:547
#3    0x0000000104b53b9c in decltype(std::__1::forward<WebKit::StorageManager::processDidCloseConnection(WebKit::WebProcessProxy&, IPC::Connection&)::$_4&>(fp)(std::__1::forward<>(fp0))) std::__1::__invoke<WebKit::StorageManager::processDidCloseConnection(WebKit::WebProcessProxy&, IPC::Connection&)::$_4&>(WebKit::StorageManager::processDidCloseConnection(WebKit::WebProcessProxy&, IPC::Connection&)::$_4&&&) [inlined] at /Applications/Xcode.app/Contents/Developer/Toolchains/OSX10.10.xctoolchain/usr/bin/../include/c++/v1/__functional_base:413
#4    0x0000000104b53b8b in std::__1::__function::__func<WebKit::StorageManager::processDidCloseConnection(WebKit::WebProcessProxy&, IPC::Connection&)::$_4, std::__1::allocator<WebKit::StorageManager::processDidCloseConnection(WebKit::WebProcessProxy&, IPC::Connection&)::$_4>, void ()>::operator()() at /Applications/Xcode.app/Contents/Developer/Toolchains/OSX10.10.xctoolchain/usr/bin/../include/c++/v1/functional:1370
#5    0x000000010231de0a in std::__1::function<void ()>::operator()() const at /Applications/Xcode.app/Contents/Developer/Toolchains/OSX10.10.xctoolchain/usr/bin/../include/c++/v1/functional:1755
#6    0x000000010282b229 in ___ZN3WTF9WorkQueue8dispatchENSt3__18functionIFvvEEE_block_invoke at Source/WTF/wtf/cocoa/WorkQueueCocoa.cpp:35

&connection was 0x000000011570ba40, m_eventListeners contained a single pair:

  first = {
    m_ptr = 0x000000011570ba40
  }
  second = 3

however, storageMapID was 4, not 3.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150618/dd3b0480/attachment.html>