<html>
    <head>
      <base href="https://bugs.webkit.org/" />
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Assertion failure (m_eventListeners.contains(std::make_pair(&amp;connection, storageMapID))) in StorageArea::removeListener after closing a Safari tab"
   href="https://bugs.webkit.org/show_bug.cgi?id=146098">146098</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>Assertion failure (m_eventListeners.contains(std::make_pair(&amp;connection, storageMapID))) in StorageArea::removeListener after closing a Safari tab
          </td>
        </tr>

        <tr>
          <th>Classification</th>
          <td>Unclassified
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>WebKit
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>528+ (Nightly build)
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>Unspecified
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>Unspecified
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>Normal
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>P2
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>WebKit2
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>webkit-unassigned&#64;lists.webkit.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>mitz&#64;webkit.org
          </td>
        </tr>

        <tr>
          <th>CC</th>
          <td>andersca&#64;apple.com, beidson&#64;apple.com
          </td>
        </tr></table>
      <p>
        <div>
        <pre>After closing a Safari tab, the assertion in StorageArea::removeListener failed with this backtrace:

#0    0x000000010280f3ba in WTFCrash at Source/WTF/wtf/Assertions.cpp:321
#1    0x0000000104b39c77 in WebKit::StorageManager::StorageArea::removeListener(IPC::Connection&amp;, unsigned long long) at Source/WebKit2/UIProcess/Storage/StorageManager.cpp:202
#2    0x0000000104b53ce2 in WebKit::StorageManager::processDidCloseConnection(WebKit::WebProcessProxy&amp;, IPC::Connection&amp;)::$_4::operator()() const at Source/WebKit2/UIProcess/Storage/StorageManager.cpp:547
#3    0x0000000104b53b9c in decltype(std::__1::forward&lt;WebKit::StorageManager::processDidCloseConnection(WebKit::WebProcessProxy&amp;, IPC::Connection&amp;)::$_4&amp;&gt;(fp)(std::__1::forward&lt;&gt;(fp0))) std::__1::__invoke&lt;WebKit::StorageManager::processDidCloseConnection(WebKit::WebProcessProxy&amp;, IPC::Connection&amp;)::$_4&amp;&gt;(WebKit::StorageManager::processDidCloseConnection(WebKit::WebProcessProxy&amp;, IPC::Connection&amp;)::$_4&amp;&amp;&amp;) [inlined] at /Applications/Xcode.app/Contents/Developer/Toolchains/OSX10.10.xctoolchain/usr/bin/../include/c++/v1/__functional_base:413
#4    0x0000000104b53b8b in std::__1::__function::__func&lt;WebKit::StorageManager::processDidCloseConnection(WebKit::WebProcessProxy&amp;, IPC::Connection&amp;)::$_4, std::__1::allocator&lt;WebKit::StorageManager::processDidCloseConnection(WebKit::WebProcessProxy&amp;, IPC::Connection&amp;)::$_4&gt;, void ()&gt;::operator()() at /Applications/Xcode.app/Contents/Developer/Toolchains/OSX10.10.xctoolchain/usr/bin/../include/c++/v1/functional:1370
#5    0x000000010231de0a in std::__1::function&lt;void ()&gt;::operator()() const at /Applications/Xcode.app/Contents/Developer/Toolchains/OSX10.10.xctoolchain/usr/bin/../include/c++/v1/functional:1755
#6    0x000000010282b229 in ___ZN3WTF9WorkQueue8dispatchENSt3__18functionIFvvEEE_block_invoke at Source/WTF/wtf/cocoa/WorkQueueCocoa.cpp:35

&amp;connection was 0x000000011570ba40, m_eventListeners contained a single pair:

  first = {
    m_ptr = 0x000000011570ba40
  }
  second = 3

however, storageMapID was 4, not 3.</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>