187823 2018-07-19 15:02:58 -0700 Null pointer dereference under WebPage::autofillLoginCredentials() 2018-07-19 21:54:08 -0700 1 1 1 Unclassified WebKit WebKit2 WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 cdumez cdumez aestes beidson commit-queue ddkilzer rniwa webkit-bug-importer youennf oldest_to_newest 1443528 0 cdumez 2018-07-19 15:02:58 -0700 Null pointer dereference under WebPage::autofillLoginCredentials(): Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Subtype: KERN_INVALID_ADDRESS at 0x0000000000000014 VM Region Info: 0x14 is not in any region. Bytes before following region: 4372545516 REGION TYPE START - END [ VSIZE] PRT/MAX SHRMOD REGION DETAIL UNUSED SPACE AT START ---> __TEXT 00000001049fc000-0000000104a00000 [ 16K] r-x/r-x SM=COW ...it.WebContent Termination Signal: Segmentation fault: 11 Termination Reason: Namespace SIGNAL, Code 0xb Terminating Process: exc handler [319] Triggered by Thread: 0 Thread 0 name: Dispatch queue: com.apple.main-thread Thread 0 Crashed ↩: 0 WebKit 0x000000020a860a4c WebKit::WebPage::autofillLoginCredentials(WTF::String const&, WTF::String const&) + 28 (HTMLElement.h:159) 1 WebKit 0x000000020a867710 WebKit::WebPage::didReceiveWebPageMessage(IPC::Connection&, IPC::Decoder&) + 6832 (HandleMessage.h:41) 2 WebKit 0x000000020a867710 WebKit::WebPage::didReceiveWebPageMessage(IPC::Connection&, IPC::Decoder&) + 6832 (HandleMessage.h:41) 3 WebKit 0x000000020a68f5bc IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&, IPC::Decoder&) + 120 (MessageReceiverMap.cpp:0) 4 WebKit 0x000000020a8e39e8 WebKit::WebProcess::didReceiveMessage(IPC::Connection&, IPC::Decoder&) + 36 (WebProcess.cpp:642) 5 WebKit 0x000000020a651d6c IPC::Connection::dispatchMessage(std::__1::unique_ptr<IPC::Decoder, std::__1::default_delete<IPC::Decoder> >) + 176 (Connection.cpp:940) 6 WebKit 0x000000020a654ea0 IPC::Connection::dispatchOneIncomingMessage() + 232 (Connection.cpp:1036) 7 JavaScriptCore 0x00000002020664a8 WTF::RunLoop::performWork() + 276 (Function.h:56) 8 JavaScriptCore 0x0000000202066770 WTF::RunLoop::performWork(void*) + 36 (RunLoopCF.cpp:38) 9 CoreFoundation 0x00000001fa3493cc __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 24 (CFRunLoop.c:1980) 10 CoreFoundation 0x00000001fa34934c __CFRunLoopDoSource0 + 88 (CFRunLoop.c:2015) 11 CoreFoundation 0x00000001fa348c2c __CFRunLoopDoSources0 + 176 (CFRunLoop.c:2051) 12 CoreFoundation 0x00000001fa343ad0 __CFRunLoopRun + 1044 (CFRunLoop.c:2922) 13 CoreFoundation 0x00000001fa343398 CFRunLoopRunSpecific + 436 (CFRunLoop.c:3247) 14 Foundation 0x00000001fad34a84 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 300 (NSRunLoop.m:367) 15 Foundation 0x00000001fad7081c -[NSRunLoop(NSRunLoop) run] + 88 (NSRunLoop.m:389) 16 libxpc.dylib 0x00000001fa014040 _xpc_objc_main + 532 (main.m:170) 17 libxpc.dylib 0x00000001fa016a80 xpc_main + 184 (init.c:1471) 18 com.apple.WebKit.WebContent 0x00000001049ff59c main + 380 (XPCServiceMain.mm:160) 19 libdyld.dylib 0x00000001f9e02f34 start + 4 1443529 1 cdumez 2018-07-19 15:03:17 -0700 <rdar://problem/37152195> 1443530 2 345388 cdumez 2018-07-19 15:04:15 -0700 Created attachment 345388 Patch 1443666 3 345388 ddkilzer 2018-07-19 20:27:57 -0700 Comment on attachment 345388 Patch r=me 1443682 4 345388 commit-queue 2018-07-19 21:54:06 -0700 Comment on attachment 345388 Patch Clearing flags on attachment: 345388 Committed r234023: <https://trac.webkit.org/changeset/234023> 1443683 5 commit-queue 2018-07-19 21:54:08 -0700 All reviewed patches have been landed. Closing bug. 345388 2018-07-19 15:04:15 -0700 2018-07-19 21:54:06 -0700 Patch bug-187823-20180719150414.patch text/plain 1663 cdumez U3VidmVyc2lvbiBSZXZpc2lvbjogMjMzOTg0CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L0No YW5nZUxvZyBiL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCmluZGV4IGZiMGFhNjQ0YTRhNTBmMTY5 NWRjMGI2MjFlOGE0YjMyZjJhMDM5YzAuLjY5MjlhNGU1NTE4ZmRjYWM5MWEyYTg2ZGQ5NzYxNjcw MGQ0NTFlYjkgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCisrKyBiL1NvdXJj ZS9XZWJLaXQvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTYgQEAKKzIwMTgtMDctMTkgIENocmlzIER1 bWV6ICA8Y2R1bWV6QGFwcGxlLmNvbT4KKworICAgICAgICBOdWxsIHBvaW50ZXIgZGVyZWZlcmVu Y2UgdW5kZXIgV2ViUGFnZTo6YXV0b2ZpbGxMb2dpbkNyZWRlbnRpYWxzKCkKKyAgICAgICAgaHR0 cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTE4NzgyMworICAgICAgICA8cmRh cjovL3Byb2JsZW0vMzcxNTIxOTU+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BT ISkuCisKKyAgICAgICAgRGVhbCB3aXRoIG1fYXNzaXN0ZWROb2RlIGJlaW5nIG51bGwgdW5kZXIg V2ViUGFnZTo6YXV0b2ZpbGxMb2dpbkNyZWRlbnRpYWxzKCkuCisKKyAgICAgICAgKiBXZWJQcm9j ZXNzL1dlYlBhZ2UvaW9zL1dlYlBhZ2VJT1MubW06CisgICAgICAgIChXZWJLaXQ6OldlYlBhZ2U6 OmF1dG9maWxsTG9naW5DcmVkZW50aWFscyk6CisKIDIwMTgtMDctMTkgIFlvdWVubiBGYWJsZXQg IDx5b3Vlbm5AYXBwbGUuY29tPgogCiAgICAgICAgIEVuc3VyZSBleHBlcmltZW50YWxQbHVnSW5T YW5kYm94UHJvZmlsZXNFbmFibGVkIGlzIHNldCBvbiBQbHVnaW5Qcm9jZXNzCmRpZmYgLS1naXQg YS9Tb3VyY2UvV2ViS2l0L1dlYlByb2Nlc3MvV2ViUGFnZS9pb3MvV2ViUGFnZUlPUy5tbSBiL1Nv dXJjZS9XZWJLaXQvV2ViUHJvY2Vzcy9XZWJQYWdlL2lvcy9XZWJQYWdlSU9TLm1tCmluZGV4IDQ5 ZGJmNDkwMWYwZGYwM2U4MGQ4ZDhiMjc5NmNkNmU5NzAyYjYzNDguLjhkYWE5Y2MxNWUxNzM1MDJm NmZhYWU3Yjc1NjY5MjRlODg1YjNlOWQgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQvV2ViUHJv Y2Vzcy9XZWJQYWdlL2lvcy9XZWJQYWdlSU9TLm1tCisrKyBiL1NvdXJjZS9XZWJLaXQvV2ViUHJv Y2Vzcy9XZWJQYWdlL2lvcy9XZWJQYWdlSU9TLm1tCkBAIC0yNDY1LDcgKzI0NjUsNyBAQCB2b2lk IFdlYlBhZ2U6OmdldEFzc2lzdGVkTm9kZUluZm9ybWF0aW9uKEFzc2lzdGVkTm9kZUluZm9ybWF0 aW9uJiBpbmZvcm1hdGlvbikKIAogdm9pZCBXZWJQYWdlOjphdXRvZmlsbExvZ2luQ3JlZGVudGlh bHMoY29uc3QgU3RyaW5nJiB1c2VybmFtZSwgY29uc3QgU3RyaW5nJiBwYXNzd29yZCkKIHsKLSAg ICBpZiAoaXM8SFRNTElucHV0RWxlbWVudD4oKm1fYXNzaXN0ZWROb2RlKSkgeworICAgIGlmIChp czxIVE1MSW5wdXRFbGVtZW50PihtX2Fzc2lzdGVkTm9kZS5nZXQoKSkpIHsKICAgICAgICAgaWYg KGF1dG8gYXV0b2ZpbGxFbGVtZW50cyA9IEF1dG9maWxsRWxlbWVudHM6OmNvbXB1dGVBdXRvZmls bEVsZW1lbnRzKGRvd25jYXN0PEhUTUxJbnB1dEVsZW1lbnQ+KCptX2Fzc2lzdGVkTm9kZSkpKQog ICAgICAgICAgICAgYXV0b2ZpbGxFbGVtZW50cy0+YXV0b2ZpbGwodXNlcm5hbWUsIHBhc3N3b3Jk KTsKICAgICB9Cg==