[Webkit-unassigned] [Bug 149309] New: Null dereference loading Blink layout test http/tests/misc/detach-during-notifyDone.html

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=149309

            Bug ID: 149309
           Summary: Null dereference loading Blink layout test
                    http/tests/misc/detach-during-notifyDone.html
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Keywords: BlinkMergeCandidate, HasReduction, NeedsRadar
          Severity: Normal
          Priority: P2
         Component: Page Loading
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: jhoneycutt at apple.com
                CC: webkit-bug-importer at group.apple.com

Created attachment 261447
  --> https://bugs.webkit.org/attachment.cgi?id=261447&action=review
crashing test

Null dereference loading Blink layout test http/tests/misc/detach-during-notifyDone.html.

Stack trace:

Crashed Thread:        0  Dispatch queue: com.apple.main-thread

Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       KERN_INVALID_ADDRESS at 0x0000000000000a70
Exception Note:        EXC_CORPSE_NOTIFY

VM Regions Near 0xa70:
--> 
    __TEXT                 00000001042b3000-00000001042b5000 [    8K] r-x/rwx SM=COW  /Users/USER/*/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.WebContent.Development.xpc/Contents/MacOS/com.apple.WebKit.WebContent.Development

Application Specific Information:
CRASHING TEST: temp-tests/http/tests/misc/detach-during-notifyDone.html

Global Trace Buffer (reverse chronological seconds):
55.805806    AppleJPEG                     0x00007fff8a01b11c [0x7fef4f80b200] Decoding completed without errors
55.805806    AppleJPEG                     0x00007fff8a0190fc [0x7fef4f80b200] Options: 128x128 [FFFFFFFF,FFFFFFFF] 00025060
55.805806    AppleJPEG                     0x00007fff8a018fae [0x7fef4f80b200] Decoding: C0 0x00800080 0x0010354A 0x11111100 0x00000000 38616
55.805806    AppleJPEG                     0x00007fff8a01805e [0x7fef4f80b200] Created session
55.805806    AppleJPEG                     0x00007fff8a018a11 [0x7fef4f80b200] Releasing session
55.808161    AppleJPEG                     0x00007fff8a01805e [0x7fef4f80b200] Created session
56.180187    CFNetwork                     0x00007fff88d43b97 Explicitly setting CF cookie storage singleton
56.180561    CFNetwork                     0x00007fff88d8f211 Explicitly setting cookie storage singleton

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebKit                  0x000000010a884144 WebKit::WebFrameLoaderClient::dispatchDidFinishLoad() + 102 (WebDocumentLoader.h:40)
1   com.apple.WebCore                 0x000000010c3d0ad2 WebCore::FrameLoader::checkLoadCompleteForThisFrame() + 594 (FrameLoader.cpp:2286)
2   com.apple.WebCore                 0x000000010c3c73b6 WebCore::FrameLoader::checkLoadComplete() + 438 (FrameLoader.cpp:2465)
3   com.apple.WebCore                 0x000000010c25da80 WebCore::DocumentLoader::finishedLoading(double) + 416 (DocumentLoader.cpp:439)
4   com.apple.WebCore                 0x000000010c08e179 WebCore::CachedResource::checkNotify() + 153 (CachedResourceClientWalker.h:51)
5   com.apple.WebCore                 0x000000010c08a433 WebCore::CachedRawResource::finishLoading(WebCore::SharedBuffer*) + 227 (CachedRawResource.cpp:104)
6   com.apple.WebCore                 0x000000010ce05501 WebCore::SubresourceLoader::didFinishLoading(double) + 1153 (ResourceLoader.h:154)
7   com.apple.WebKit                  0x000000010a94b98d WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&, IPC::MessageDecoder&) + 561 (HandleMessage.h:16)
8   com.apple.WebKit                  0x000000010a7251f1 IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::MessageDecoder, std::__1::default_delete<IPC::MessageDecoder> >) + 127 (memory:2636)
9   com.apple.WebKit                  0x000000010a727b4a IPC::Connection::dispatchOneMessage() + 126 (memory:2656)
10  com.apple.JavaScriptCore          0x000000010bb69985 WTF::RunLoop::performWork() + 437 (functional:1742)
11  com.apple.JavaScriptCore          0x000000010bb69d32 WTF::RunLoop::performWork(void*) + 34 (RunLoopCF.cpp:39)
12  com.apple.CoreFoundation          0x00007fff949e2c01 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
13  com.apple.CoreFoundation          0x00007fff949d4b1c __CFRunLoopDoSources0 + 556
14  com.apple.CoreFoundation          0x00007fff949d403f __CFRunLoopRun + 927
15  com.apple.CoreFoundation          0x00007fff949d3a38 CFRunLoopRunSpecific + 296
16  com.apple.HIToolbox               0x00007fff88e673bd RunCurrentEventLoopInMode + 235
17  com.apple.HIToolbox               0x00007fff88e67153 ReceiveNextEventCommon + 432
18  com.apple.HIToolbox               0x00007fff88e66f93 _BlockUntilNextEventMatchingListInModeWithFilter + 71
19  com.apple.AppKit                  0x00007fff870b81e7 _DPSNextEvent + 1076
20  com.apple.AppKit                  0x00007fff8748490d -[NSApplication _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 454
21  com.apple.AppKit                  0x00007fff870ae0b8 -[NSApplication run] + 682
22  com.apple.AppKit                  0x00007fff87030396 NSApplicationMain + 1176
23  libxpc.dylib                      0x00007fff8c70ff70 _xpc_objc_main + 793
24  libxpc.dylib                      0x00007fff8c7116bf xpc_main + 494
25  com.apple.WebKit.WebContent.Development    0x00000001042b4424 main + 409 (XPCServiceMain.Development.mm:187)
26  libdyld.dylib                     0x00007fff93aa15ad start + 1

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150917/608e6775/attachment.html>