[Webkit-unassigned] [Bug 165655] [SOUP] Network process crash in WebKit::CustomProtocolManagerImpl::start

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=165655

Carlos Garcia Campos <cgarcia at igalia.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |cgarcia at igalia.com,
                   |                            |zan at falconsigh.net

--- Comment #1 from Carlos Garcia Campos <cgarcia at igalia.com> ---
This is pretty weird... The crash happens in:

m_customProtocolMap.set(customProtocolID, std::make_unique<WebSoupRequestAsyncData>(task, request));

And the bt says that there's already an entry in the map for the customProtocolID (68). That's not expected to happen, since that value comes from:

uint64_t customProtocolID = generateCustomProtocolID();

So, what happens is that the current value for that customProtocolID is deleted and in ~WebSoupRequestAsyncData() request is non-null but it's not a GObject either, so g_object_remove_weak_pointer fails.

This is probably due to a memory corruption or something. Do you know how to reproduce the crash?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170102/c91da1b6/attachment.html>