[Webkit-unassigned] [Bug 194196] REGRESSION (r239814): Most classes that user Timer have 7 bytes of padding after the Timer

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sat Feb 2 17:41:16 PST 2019


https://bugs.webkit.org/show_bug.cgi?id=194196

Ryosuke Niwa <rniwa at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ddkilzer at webkit.org

--- Comment #2 from Ryosuke Niwa <rniwa at webkit.org> ---
(In reply to Simon Fraser (smfr) from comment #1)
> Can we remove the RELEASE_ASSERT_WITH_SECURITY_IMPLICATION(!m_wasDeleted).
> I'm not sure why we'd have this on Timer and not other classes.

Because we keep getting mysterious timer related crashes that are only explainable by UAF, thread safety, etc... which always ends up being a top crasher.

If we get data suggesting that these crashes are gone in the next iOS / macOS seed, which we may due to my latest ThreadTimerHeapItem refactoring, we can probably make this debug only again.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190203/611fcfef/attachment.html>


More information about the webkit-unassigned mailing list