<html>
<head>
<base href="https://bugs.webkit.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - [Win] Assertions due to unexpected pageCache state"
href="https://bugs.webkit.org/show_bug.cgi?id=140190#c5">Comment # 5</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - [Win] Assertions due to unexpected pageCache state"
href="https://bugs.webkit.org/show_bug.cgi?id=140190">bug 140190</a>
from <span class="vcard"><a class="email" href="mailto:hyungwook.lee@navercorp.com" title="Hyungwook Lee <hyungwook.lee@navercorp.com>"> <span class="fn">Hyungwook Lee</span></a>
</span></b>
<pre>In my investigation, this issue is related to queueLoadHTMLString().
When we call queueLoadHTMLString() in the page, queueLoadHTMLString() leads another page loading within same Page instance.
By this reason, we fall in crash in HistoryController::invalidateCurrentItemCachedPage()
I found that there is only two test case using queueLoadHTMLString()
1) fast/loader/non-deferred-substitute-load.html
2) http/tests/navigation/go-back-to-error-page.html
http/tests/navigation/go-back-to-error-page.html doesn't make crash that using unreachableURL.
Please see <a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED FIXED - REGRESSION: Assertion failure in FrameLoader::continueLoadAfterWillSubmitForm() when navigating back to an unreachable URL"
href="show_bug.cgi?id=52388">https://bugs.webkit.org/show_bug.cgi?id=52388</a>.
Hence here is three options to fix this issue as followed.
1) Disable PageCache in DumpRenderTree
2) Disable PageCache only in non-deferred-substitute-load.html using testRunner.overridePreference("WebKitUsesPageCachePreferenceKey", 0);
3) Put unreachableURL as same as http/tests/navigation/go-back-to-error-page.html
I think we'd better to disable PageCache in DumpRenderTree because I suspect that another port also may be disabled PageCache which didn't make crash in non-deferred-substitute-load.html.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>