[Webkit-unassigned] [Bug 249452] New: REGRESSION(257681 at main) [WebDriver] Invalid WebPageProxy references after RefPtr moved into callbacks

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Dec 15 23:05:26 PST 2022


https://bugs.webkit.org/show_bug.cgi?id=249452

            Bug ID: 249452
           Summary: REGRESSION(257681 at main) [WebDriver] Invalid
                    WebPageProxy references after RefPtr moved into
                    callbacks
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebDriver
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: lmoura at igalia.com
                CC: bburg at apple.com

257681 at main replaced plain WebPageProxy pointers with RefPtr, but IIUC, it also WTFMove'd some of these RefPtr into lambda captures while they were still used outside leading to invalid references. For example, being passed into a WebProcessProxy& parameter in the exitFullscreenWindowForPage() call inside setWindowFrameOfBrowsingContext() in [1]. When exit... executed, the page parameter received was (nil) after being moved.

As this happened in some WebAutomationSession methods used during the setup of many tests, the failures in the webdriver suite increased from ~23 to ~2008.

First build with failure: https://build.webkit.org/#/builders/37/builds/13372

Patch incoming.

[1] https://github.com/WebKit/WebKit/blob/main/Source/WebKit/UIProcess/Automation/WebAutomationSession.cpp#L417

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20221216/27b20f48/attachment.htm>


More information about the webkit-unassigned mailing list