[Webkit-unassigned] [Bug 193373] New: When the link preloaded triggers media queries it asserts

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=193373

            Bug ID: 193373
           Summary: When the link preloaded triggers media queries it
                    asserts
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: CSS
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: simon.fraser at apple.com

In a debug Mac build (with Safari), go to yahoo.com and switch to the iPhone user agent. Web process asserts in MediaQueryEvaluator::mediaAttributeMatches():

    ASSERT(document.renderView());

    frame #0: 0x000000044f3ad8c0 JavaScriptCore`::WTFCrash() at Assertions.cpp:255
    frame #1: 0x000000043800e58b WebCore`WTFCrashWithInfo((null)=858, (null)="./css/MediaQueryEvaluator.cpp", (null)="static bool WebCore::MediaQueryEvaluator::mediaAttributeMatches(WebCore::Document &, const WTF::String &)", (null)=1808) at Assertions.h:559
  * frame #2: 0x000000043a148c59 WebCore`WebCore::MediaQueryEvaluator::mediaAttributeMatches(document={ origin = https://www.yahoo.com, url = https://www.yahoo.com/service-worker.js, inMainFrame = 1, pageCacheState = NotInPageCache }, attributeValue={ length = 0, contents = '' }) at MediaQueryEvaluator.cpp:858
    frame #3: 0x000000043ac5873a WebCore`WebCore::LinkLoader::preloadIfNeeded(relAttribute=0x00007ffee8c124a8, href={ https://s.yimg.com/rq/darla/3-6-2/js/g-r-min.js }, document={ origin = https://www.yahoo.com, url = https://www.yahoo.com/service-worker.js, inMainFrame = 1, pageCacheState = NotInPageCache }, as={ length = 6, contents = 'script' }, media={ length = 0, contents = '' }, mimeType={ length = 0, contents = '' }, crossOriginMode={ length = 0, contents = '' }, loader=0x0000000000000000) at LinkLoader.cpp:244
    frame #4: 0x000000043ac3d01d WebCore`WebCore::LinkLoader::loadLinksFromHeader(headerValue={ length = 426, contents = '<https://s.yimg.com/rq/darla/3-6-2/js/g-r-min.js>; rel=preload; as=script, <https://www.yahoo.com/sy/os/fontserver/YahooSans/Regular.woff2>; rel=preload; as=font; type=font/woff2; crossorigin, <https://www.yahoo.com/sy/os/fontserver/YahooSans/Bold.woff2>; rel=preload; as=font; type=font/woff2; crossorigin, <https://www.yahoo.com/sy/os/fontserver/YahooSans/ExtraBold.woff2>; rel=preload; as=font; type=font/woff2; crossorigin' }, baseURL={  }, document={ origin = https://www.yahoo.com, url = https://www.yahoo.com/service-worker.js, inMainFrame = 1, pageCacheState = NotInPageCache }, mediaAttributeCheck=SkipMediaAttributeCheck) at LinkLoader.cpp:111
    frame #5: 0x000000043acc3e21 WebCore`WebCore::SubresourceLoader::didReceiveResponse(this=0x00000004576da100, response=0x00007ffee8c12b80, policyCompletionHandler=0x00007ffee8c12a00)>&&) at SubresourceLoader.cpp:386
    frame #6: 0x0000000107e570cd WebKit`WebKit::WebResourceLoader::didReceiveResponse(this=0x0000000456994a00, response=0x00007ffee8c12b80, needsContinueDidReceiveResponseMessage=false) at WebResourceLoader.cpp:142
    frame #7: 0x00000001081f4138 WebKit`void IPC::callMemberFunctionImpl<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebCore::ResourceResponse const&, bool), std::__1::tuple<WebCore::ResourceResponse, bool>, 0ul, 1ul>(object=0x0000000456994a00, function=c0 6c e5 07 01 00 00 00 00 00 00 00 00 00 00 00, args=size=2, (null)=std::__1::index_sequence<0UL, 1UL> @ 0x00007ffee8c12ac8)(WebCore::ResourceResponse const&, bool), std::__1::tuple<WebCore::ResourceResponse, bool>&&, std::__1::integer_sequence<unsigned long, 0ul, 1ul>) at HandleMessage.h:41
    frame #8: 0x00000001081f3dc0 WebKit`void IPC::callMemberFunction<WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebCore::ResourceResponse const&, bool), std::__1::tuple<WebCore::ResourceResponse, bool>, std::__1::integer_sequence<unsigned long, 0ul, 1ul> >(args=size=2, object=0x0000000456994a00, function=c0 6c e5 07 01 00 00 00 00 00 00 00 00 00 00 00)(WebCore::ResourceResponse const&, bool)) at HandleMessage.h:47
    frame #9: 0x00000001081f3100 WebKit`void IPC::handleMessage<Messages::WebResourceLoader::DidReceiveResponse, WebKit::WebResourceLoader, void (WebKit::WebResourceLoader::*)(WebCore::ResourceResponse const&, bool)>(decoder=0x000000045bb6b2a0, object=0x0000000456994a00, function=c0 6c e5 07 01 00 00 00 00 00 00 00 00 00 00 00)(WebCore::ResourceResponse const&, bool)) at HandleMessage.h:133

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190112/49b64c7b/attachment-0001.html>