[Webkit-unassigned] [Bug 249452] New: REGRESSION(257681 at main) [WebDriver] Invalid WebPageProxy references after RefPtr moved into callbacks
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Thu Dec 15 23:05:26 PST 2022
https://bugs.webkit.org/show_bug.cgi?id=249452
Bug ID: 249452
Summary: REGRESSION(257681 at main) [WebDriver] Invalid
WebPageProxy references after RefPtr moved into
callbacks
Product: WebKit
Version: WebKit Nightly Build
Hardware: Unspecified
OS: Unspecified
Status: NEW
Severity: Normal
Priority: P2
Component: WebDriver
Assignee: webkit-unassigned at lists.webkit.org
Reporter: lmoura at igalia.com
CC: bburg at apple.com
257681 at main replaced plain WebPageProxy pointers with RefPtr, but IIUC, it also WTFMove'd some of these RefPtr into lambda captures while they were still used outside leading to invalid references. For example, being passed into a WebProcessProxy& parameter in the exitFullscreenWindowForPage() call inside setWindowFrameOfBrowsingContext() in [1]. When exit... executed, the page parameter received was (nil) after being moved.
As this happened in some WebAutomationSession methods used during the setup of many tests, the failures in the webdriver suite increased from ~23 to ~2008.
First build with failure: https://build.webkit.org/#/builders/37/builds/13372
Patch incoming.
[1] https://github.com/WebKit/WebKit/blob/main/Source/WebKit/UIProcess/Automation/WebAutomationSession.cpp#L417
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20221216/27b20f48/attachment.htm>
More information about the webkit-unassigned
mailing list