[Webkit-unassigned] [Bug 176299] WebCore::DocumentLoader m_subresourceLoaders infinite loop

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Oct 27 20:27:16 PDT 2017


https://bugs.webkit.org/show_bug.cgi?id=176299

mali <ak4868 at 163.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|WORKSFORME                  |---

--- Comment #8 from mali <ak4868 at 163.com> ---
We can use a simple demo in the iOS 11 system to reproduce the problem three times, the conditions of reproduction is 1. Network environment is very poor 2. the web page have a lost of Subresource, and make sure we have always using the UIWebView API from the main thread, when the problem occurs, X10 register value is 0x0000000000000000, X13 register value is 0xffffffffffffffffff,in the following assembly code, If the value of the X10 register and the X13 register value are different will enter the infinite loop

0x18d02c9e0 <+136>: cbz    x13, 0x18d02ca2c          ; <+212>
0x18d02c9e4 <+140>: cmp    w12, #0x0                 ; =0x0 
0x18d02c9e8 <+144>: csel   w12, w15, w12, eq
0x18d02c9ec <+148>: add    w11, w12, w11
0x18d02c9f0 <+152>: and    w11, w11, w9
0x18d02c9f4 <+156>: add    x14, x8, w11, uxtw #4
0x18d02c9f8 <+160>: ldr    x13, [x14]
0x18d02c9fc <+164>: cmp    x13, x10
0x18d02ca00 <+168>: b.ne   0x18d02c9e0               ; <+136>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20171028/42b03887/attachment.html>


More information about the webkit-unassigned mailing list