<html>
    <head>
      <base href="https://bugs.webkit.org/" />
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Modern IDB: Some w3c objectstore tests crash under GuardMalloc"
   href="https://bugs.webkit.org/show_bug.cgi?id=154460">154460</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>Modern IDB: Some w3c objectstore tests crash under GuardMalloc
          </td>
        </tr>

        <tr>
          <th>Classification</th>
          <td>Unclassified
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>WebKit
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>Safari 9
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>Unspecified
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>Unspecified
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>Normal
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>P2
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>WebCore Misc.
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>webkit-unassigned&#64;lists.webkit.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>beidson&#64;apple.com
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Modern IDB: Some w3c objectstore tests crash under GuardMalloc

We've seen this with:
imported/w3c/indexeddb/idbobjectstore_add15.htm
imported/w3c/indexeddb/idbobjectstore_clear3.htm
imported/w3c/indexeddb/idbobjectstore_put15.htm

Example crashing stack:

Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       KERN_INVALID_ADDRESS at 0x000000020fd24e48
Exception Note:        EXC_CORPSE_NOTIFY

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   com.apple.WebCore                 0x000000010dd3a549 WebCore::IDBServer::UniqueIDBDatabase::didFireVersionChangeEvent(WebCore::IDBServer::UniqueIDBDatabaseConnection&amp;, WebCore::IDBResourceIdentifier const&amp;) + 9
1   com.apple.JavaScriptCore          0x00000001086a06c5 WTF::RunLoop::performWork() + 437
2   com.apple.JavaScriptCore          0x00000001086a0a72 WTF::RunLoop::performWork(void*) + 34
3   com.apple.CoreFoundation          0x000000010ba73f11 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
4   com.apple.CoreFoundation          0x000000010ba545d7 __CFRunLoopDoSources0 + 423
5   com.apple.CoreFoundation          0x000000010ba53bbf __CFRunLoopRun + 911
6   com.apple.CoreFoundation          0x000000010ba535c8 CFRunLoopRunSpecific + 296
7   DumpRenderTree                    0x0000000107af5d15 0x107ae3000 + 77077
8   DumpRenderTree                    0x0000000107af52b2 0x107ae3000 + 74418
9   DumpRenderTree                    0x0000000107af691a 0x107ae3000 + 80154
10  libdyld.dylib                     0x000000010ef0a489 start + 1</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>