<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>187819</bug_id>
          
          <creation_ts>2018-07-19 14:27:11 -0700</creation_ts>
          <short_desc>Crash under WebCore::DocumentWriter::addData()</short_desc>
          <delta_ts>2018-07-20 19:33:42 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Page Loading</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Chris Dumez">cdumez</reporter>
          <assigned_to name="Chris Dumez">cdumez</assigned_to>
          <cc>beidson</cc>
    
    <cc>commit-queue</cc>
    
    <cc>dbates</cc>
    
    <cc>ews-watchlist</cc>
    
    <cc>japhet</cc>
    
    <cc>koivisto</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>youennf</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1443506</commentid>
    <comment_count>0</comment_count>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2018-07-19 14:27:11 -0700</bug_when>
    <thetext>Crash under WebCore::DocumentWriter::addData():
Thread 0 name:  Dispatch queue: com.apple.main-thread
Thread 0 Crashed ↩:
0   WebCore                       	0x00000001aa074724 WebCore::DocumentWriter::addData(char const*, unsigned long) + 56 (DocumentWriter.cpp:250)
1   WebCore                       	0x00000001aa0620f0 WebCore::DocumentLoader::commitData(char const*, unsigned long) + 2580 (DocumentLoader.cpp:1075)
2   WebKit                        	0x00000001b02039fc WebKit::WebFrameLoaderClient::committedLoad(WebCore::DocumentLoader*, char const*, int) + 60 (WebFrameLoaderClient.cpp:1021)
3   WebCore                       	0x00000001aa0653e0 WebCore::DocumentLoader::commitLoad(char const*, int) + 172 (DocumentLoader.cpp:967)
4   WebCore                       	0x00000001aa0e1958 WebCore::CachedRawResource::notifyClientsDataWasReceived(char const*, unsigned int) + 344 (CachedRawResource.cpp:136)
5   WebCore                       	0x00000001aa0e1680 WebCore::CachedRawResource::updateBuffer(WebCore::SharedBuffer&amp;) + 208 (CachedRawResource.cpp:73)
6   WebCore                       	0x00000001aa0b72cc WebCore::SubresourceLoader::didReceiveDataOrBuffer(char const*, int, WTF::RefPtr&lt;WebCore::SharedBuffer, WTF::DumbPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;&amp;&amp;, long long, WebCore::DataPayloadType) + 396 (SubresourceLoader.cpp:455)
7   WebCore                       	0x00000001aa0b73b8 WebCore::SubresourceLoader::didReceiveBuffer(WTF::Ref&lt;WebCore::SharedBuffer, WTF::DumbPtrTraits&lt;WebCore::SharedBuffer&gt; &gt;&amp;&amp;, long long, WebCore::DataPayloadType) + 100 (SubresourceLoader.cpp:435)
8   WebKit                        	0x00000001b0315cec WebKit::WebResourceLoader::didReceiveResource(WebKit::ShareableResource::Handle const&amp;) + 276 (WebResourceLoader.cpp:214)
9   WebKit                        	0x00000001b0316524 WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&amp;, IPC::Decoder&amp;) + 456 (HandleMessage.h:41)
10  WebKit                        	0x00000001b00fb594 WebKit::NetworkProcessConnection::didReceiveMessage(IPC::Connection&amp;, IPC::Decoder&amp;) + 520 (NetworkProcessConnection.cpp:72)
11  WebKit                        	0x00000001b0061188 IPC::Connection::dispatchMessage(std::__1::unique_ptr&lt;IPC::Decoder, std::__1::default_delete&lt;IPC::Decoder&gt; &gt;) + 164 (Connection.cpp:929)
12  WebKit                        	0x00000001b00618c4 IPC::Connection::dispatchIncomingMessages() + 748 (Connection.cpp:1044)
13  JavaScriptCore                	0x00000001a7a96cb0 WTF::RunLoop::performWork() + 276 (Function.h:56)
14  JavaScriptCore                	0x00000001a7a96f78 WTF::RunLoop::performWork(void*) + 36 (RunLoopCF.cpp:38)
15  CoreFoundation                	0x000000019fda6e7c __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 24 (CFRunLoop.c:1980)
16  CoreFoundation                	0x000000019fda6dfc __CFRunLoopDoSource0 + 88 (CFRunLoop.c:2015)
17  CoreFoundation                	0x000000019fda66dc __CFRunLoopDoSources0 + 176 (CFRunLoop.c:2051)
18  CoreFoundation                	0x000000019fda1580 __CFRunLoopRun + 1044 (CFRunLoop.c:2922)
19  CoreFoundation                	0x000000019fda0e48 CFRunLoopRunSpecific + 436 (CFRunLoop.c:3247)
20  Foundation                    	0x00000001a078ee54 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 300 (NSRunLoop.m:367)
21  Foundation                    	0x00000001a07cb7c8 -[NSRunLoop(NSRunLoop) run] + 88 (NSRunLoop.m:389)
22  libxpc.dylib                  	0x000000019fa72084 _xpc_objc_main + 532 (main.m:170)
23  libxpc.dylib                  	0x000000019fa74ac4 xpc_main + 184 (init.c:1471)
24  com.apple.WebKit.WebContent   	0x0000000100c5759c main + 380 (XPCServiceMain.mm:160)
25  libdyld.dylib                 	0x000000019f85f0c4 start + 4</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1443507</commentid>
    <comment_count>1</comment_count>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2018-07-19 14:27:26 -0700</bug_when>
    <thetext>&lt;rdar://problem/41328743&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1443508</commentid>
    <comment_count>2</comment_count>
      <attachid>345382</attachid>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2018-07-19 14:34:21 -0700</bug_when>
    <thetext>Created attachment 345382
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1443579</commentid>
    <comment_count>3</comment_count>
      <attachid>345382</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2018-07-19 16:19:39 -0700</bug_when>
    <thetext>Comment on attachment 345382
Patch

Clearing flags on attachment: 345382

Committed r234013: &lt;https://trac.webkit.org/changeset/234013&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1443580</commentid>
    <comment_count>4</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2018-07-19 16:19:40 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1444001</commentid>
    <comment_count>5</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2018-07-20 19:33:42 -0700</bug_when>
    <thetext>No test?</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>345382</attachid>
            <date>2018-07-19 14:34:21 -0700</date>
            <delta_ts>2018-07-19 16:19:39 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-187819-20180719143421.patch</filename>
            <type>text/plain</type>
            <size>2733</size>
            <attacher name="Chris Dumez">cdumez</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjMzOTg0CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
      

    </bug>

</bugzilla>