[Webkit-unassigned] [Bug 187284] New: Nullptr crash accessing Document in GenericEventQueue::dispatchOneEvent()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=187284

            Bug ID: 187284
           Summary: Nullptr crash accessing Document in
                    GenericEventQueue::dispatchOneEvent()
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Keywords: InRadar
          Severity: Normal
          Priority: P2
         Component: Media Elements
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: rniwa at webkit.org
                CC: cdumez at apple.com, eric.carlson at apple.com,
                    jeremyj-wk at apple.com, jer.noble at apple.com

e.g.

Thread 0 name:  Dispatch queue: com.apple.main-thread
Thread 0 Crashed:
0   WebCore                             0x000000018aa74988 WebCore::EventTarget::fireEventListeners(WebCore::Event&, WTF::Vector<WTF::RefPtr<WebCore::RegisteredEventListener, WTF::DumbPtrTraits<WebCore::RegisteredEventListener> >, 1ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>) + 76 (Document.h:1933)
1   WebCore                             0x000000018aa74984 WebCore::EventTarget::fireEventListeners(WebCore::Event&, WTF::Vector<WTF::RefPtr<WebCore::RegisteredEventListener, WTF::DumbPtrTraits<WebCore::RegisteredEventListener> >, 1ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>) + 72 (EventTarget.cpp:258)
2   WebCore                             0x000000018aa707ec WebCore::EventTarget::fireEventListeners(WebCore::Event&) + 596 (EventTarget.cpp:231)
3   WebCore                             0x000000018aa74920 WebCore::EventTarget::dispatchEvent(WebCore::Event&) + 116 (EventTarget.cpp:190)
4   WebCore                             0x000000018aa77744 WebCore::GenericEventQueue::dispatchOneEvent() + 168 (GenericEventQueue.cpp:68)
5   WebCore                             0x000000018ae5876c WebCore::TaskDispatcher<WebCore::Timer>::sharedTimerFired() + 208 (Function.h:56)
6   WebCore                             0x0000000189e0c044 WebCore::ThreadTimers::sharedTimerFiredInternal() + 352 (ThreadTimers.cpp:118)
7   WebCore                             0x0000000189e0bed0 WebCore::timerFired(__CFRunLoopTimer*, void*) + 28 (MainThreadSharedTimerCF.cpp:74)
8   CoreFoundation                      0x0000000181c84aa8 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ + 28 (CFRunLoop.c:1832)
9   CoreFoundation                      0x0000000181c8476c __CFRunLoopDoTimer + 864 (CFRunLoop.c:2415)
10  CoreFoundation                      0x0000000181c84010 __CFRunLoopDoTimers + 248 (CFRunLoop.c:2562)
11  CoreFoundation                      0x0000000181c81b60 __CFRunLoopRun + 2168 (CFRunLoop.c:0)
12  CoreFoundation                      0x0000000181ba1da8 CFRunLoopRunSpecific + 552 (CFRunLoop.c:3245)
13  Foundation                          0x000000018261a464 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 304 (NSRunLoop.m:367)
14  Foundation                          0x000000018266c0cc -[NSRunLoop(NSRunLoop) run] + 88 (NSRunLoop.m:389)
15  libxpc.dylib                        0x000000018194db54 _xpc_objc_main + 516 (main.m:167)
16  libxpc.dylib                        0x000000018194fc28 xpc_main + 180 (init.c:1476)
17  com.apple.WebKit.WebContent         0x0000000102ef35ac main + 380 (XPCServiceMain.mm:148)
18  libdyld.dylib                       0x0000000181635fc0 start + 4

<rdar://problem/38184148>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180703/d8024344/attachment-0001.html>