<html>
<head>
<base href="https://bugs.webkit.org/" />
</head>
<body><span class="vcard"><a class="email" href="mailto:cgarcia@igalia.com" title="Carlos Garcia Campos <cgarcia@igalia.com>"> <span class="fn">Carlos Garcia Campos</span></a>
</span> changed
<a class="bz_bug_link
bz_status_NEW "
title="NEW - [SOUP] Network process crash in WebKit::CustomProtocolManagerImpl::start"
href="https://bugs.webkit.org/show_bug.cgi?id=165655">bug 165655</a>
<br>
<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>What</th>
<th>Removed</th>
<th>Added</th>
</tr>
<tr>
<td style="text-align:right;">CC</td>
<td>
</td>
<td>cgarcia@igalia.com, zan@falconsigh.net
</td>
</tr></table>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - [SOUP] Network process crash in WebKit::CustomProtocolManagerImpl::start"
href="https://bugs.webkit.org/show_bug.cgi?id=165655#c1">Comment # 1</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - [SOUP] Network process crash in WebKit::CustomProtocolManagerImpl::start"
href="https://bugs.webkit.org/show_bug.cgi?id=165655">bug 165655</a>
from <span class="vcard"><a class="email" href="mailto:cgarcia@igalia.com" title="Carlos Garcia Campos <cgarcia@igalia.com>"> <span class="fn">Carlos Garcia Campos</span></a>
</span></b>
<pre>This is pretty weird... The crash happens in:
m_customProtocolMap.set(customProtocolID, std::make_unique<WebSoupRequestAsyncData>(task, request));
And the bt says that there's already an entry in the map for the customProtocolID (68). That's not expected to happen, since that value comes from:
uint64_t customProtocolID = generateCustomProtocolID();
So, what happens is that the current value for that customProtocolID is deleted and in ~WebSoupRequestAsyncData() request is non-null but it's not a GObject either, so g_object_remove_weak_pointer fails.
This is probably due to a memory corruption or something. Do you know how to reproduce the crash?</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>