[Webkit-unassigned] [Bug 154460] New: Modern IDB: Some w3c objectstore tests crash under GuardMalloc

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=154460

            Bug ID: 154460
           Summary: Modern IDB: Some w3c objectstore tests crash under
                    GuardMalloc
    Classification: Unclassified
           Product: WebKit
           Version: Safari 9
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: beidson at apple.com

Modern IDB: Some w3c objectstore tests crash under GuardMalloc

We've seen this with:
imported/w3c/indexeddb/idbobjectstore_add15.htm
imported/w3c/indexeddb/idbobjectstore_clear3.htm
imported/w3c/indexeddb/idbobjectstore_put15.htm

Example crashing stack:

Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       KERN_INVALID_ADDRESS at 0x000000020fd24e48
Exception Note:        EXC_CORPSE_NOTIFY

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore                 0x000000010dd3a549 WebCore::IDBServer::UniqueIDBDatabase::didFireVersionChangeEvent(WebCore::IDBServer::UniqueIDBDatabaseConnection&, WebCore::IDBResourceIdentifier const&) + 9
1   com.apple.JavaScriptCore          0x00000001086a06c5 WTF::RunLoop::performWork() + 437
2   com.apple.JavaScriptCore          0x00000001086a0a72 WTF::RunLoop::performWork(void*) + 34
3   com.apple.CoreFoundation          0x000000010ba73f11 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
4   com.apple.CoreFoundation          0x000000010ba545d7 __CFRunLoopDoSources0 + 423
5   com.apple.CoreFoundation          0x000000010ba53bbf __CFRunLoopRun + 911
6   com.apple.CoreFoundation          0x000000010ba535c8 CFRunLoopRunSpecific + 296
7   DumpRenderTree                    0x0000000107af5d15 0x107ae3000 + 77077
8   DumpRenderTree                    0x0000000107af52b2 0x107ae3000 + 74418
9   DumpRenderTree                    0x0000000107af691a 0x107ae3000 + 80154
10  libdyld.dylib                     0x000000010ef0a489 start + 1

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160219/0a5ed8e8/attachment-0001.html>