[Webkit-unassigned] [Bug 199621] [WPE][GTK] UI process crash due to NULL dereference in webkitWebViewResourceLoadStarted()

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Jul 16 02:31:30 PDT 2019


https://bugs.webkit.org/show_bug.cgi?id=199621

Carlos Garcia Campos <cgarcia at igalia.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |cgarcia at igalia.com

--- Comment #3 from Carlos Garcia Campos <cgarcia at igalia.com> ---
I can't reproduce it, but I think this can only happen if DidDestroyFrame message is received after injected bundle message is sent, but before it's processed. I'm not sure that's actually possible, because IPC messages should be processed in the order they were sent, though. But if that can happen somehow, then the null check in the UI process would be the right fix.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190716/964b39af/attachment.html>


More information about the webkit-unassigned mailing list