[Webkit-unassigned] [Bug 195563] New: Crash under WebCore::IDBDatabase::connectionToServerLost

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=195563

            Bug ID: 195563
           Summary: Crash under
                    WebCore::IDBDatabase::connectionToServerLost
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: sihui_liu at apple.com

Thread[3] EXC_CRASH (SIGABRT) (0x0000000000000000, 0x0000000000000000)
[  0] 0x00000001c10c60dc libsystem_kernel.dylib`__pthread_kill + 8

     0x00000001c10c60d4:      mov x16, #0x148
     0x00000001c10c60d8:      svc #0x80
 ->  0x00000001c10c60dc:     b.lo 0x230f4              ; <+32>
     0x00000001c10c60e0:      stp x29, x30, [sp, #-0x10]!
     0x00000001c10c60e4:      mov x29, sp
     0x00000001c10c60e8:       bl 0x18a3c              ; cerror_nocancel at errno.c:65
     0x00000001c10c60ec:      mov sp, x29

[  1] 0x00000001c113f093 libsystem_pthread.dylib`pthread_kill$VARIANT$mp + 379 at pthread.c:1492:12
       1488             if (th->wqthread != 0 && th->wqkillset == 0) {
       1489                     return ENOTSUP;
       1490             }
       1491     
    -> 1492             int ret = __pthread_kill(kport, sig);
       1493     
       1494             if (ret == -1) {
       1495                     ret = errno;
       1496             }

Getting symbols for FE41653A-B56F-335A-B66A-F403B3203E61 /usr/lib/system/libsystem_c.dylib... ok
[  2] 0x00000001c101fe83 libsystem_c.dylib`abort + 139 at abort.c:94:8
       90               /* <rdar://problem/8400096> Set the workqueue killable */
       91               __pthread_workqueue_setkill(1);
       92       
       93               (void)pthread_sigmask(SIG_SETMASK, &act.sa_mask, NULL);
    -> 94               (void)pthread_kill(pthread_self(), SIGABRT);
       95       
       96               usleep(TIMEOUT); /* give time for signal to happen */
       97       
       98               /*

Getting symbols for 657809DE-074E-3BA3-8203-1CEB3DFA4966 /usr/lib/libc++abi.dylib... ok
[  3] 0x00000001c06f0787 libc++abi.dylib`::abort_message(const char *, ...) + 131 at abort_message.cpp:75:5
       71           __assert2(__FILE__, __LINE__, __func__, buffer);
       72       #endif // __ANDROID_API__ >= 21
       73       #endif // __BIONIC__
       74       
    -> 75           abort();
       76       }

[  4] 0x00000001c06fda3f libc++abi.dylib`::__cxa_pure_virtual() + 19 at cxa_virtual.cpp:17:3
Getting symbols for B98F989B-7396-3D1C-AC26-730B711928A5 /System/Library/PrivateFrameworks/WebCore.framework/WebCore... ok
[  5] 0x00000001caf0b7b7 WebCore`WebCore::IDBDatabase::connectionToServerLost(WebCore::IDBError const&) [inlined] WebCore::EventTarget::ref() + 15 at EventTarget.h:55:18
[  5] 0x00000001caf0b7a8 WebCore`WebCore::IDBDatabase::connectionToServerLost(WebCore::IDBError const&) [inlined] void WTF::refIfNotNull<WebCore::EventTarget>(WebCore::EventTarget*) + 4 at RefPtr.h:38
[  5] 0x00000001caf0b7a4 WebCore`WebCore::IDBDatabase::connectionToServerLost(WebCore::IDBError const&) [inlined] WTF::RefPtr<WebCore::EventTarget, WTF::DumbPtrTraits<WebCore::EventTarget> >::RefPtr(WebCore::EventTarget*) + 4 at RefPtr.h:57
[  5] 0x00000001caf0b7a0 WebCore`WebCore::IDBDatabase::connectionToServerLost(WebCore::IDBError const&) [inlined] WTF::RefPtr<WebCore::EventTarget, WTF::DumbPtrTraits<WebCore::EventTarget> >::RefPtr(WebCore::EventTarget*) at RefPtr.h:57
[  5] 0x00000001caf0b7a0 WebCore`WebCore::IDBDatabase::connectionToServerLost(WebCore::IDBError const&) + 240 at IDBDatabase.

IDBDatabase::connectionToServerLost a in CrossThreadTask is called after the callee IDBDatabase is freed.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190311/e92d18ba/attachment-0001.html>