<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>192744</bug_id>
          
          <creation_ts>2018-12-15 15:49:49 -0800</creation_ts>
          <short_desc>Fix occasional null-dereference crash in WebPageProxy::didReceiveServerRedirectForProvisionalLoadForFrame</short_desc>
          <delta_ts>2018-12-17 17:33:36 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Alex Christensen">achristensen</reporter>
          <assigned_to name="Alex Christensen">achristensen</assigned_to>
          <cc>cdumez</cc>
    
    <cc>commit-queue</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1488320</commentid>
    <comment_count>0</comment_count>
    <who name="Alex Christensen">achristensen</who>
    <bug_when>2018-12-15 15:49:49 -0800</bug_when>
    <thetext>Fix occasional null-dereference crash in WebPageProxy::didReceiveServerRedirectForProvisionalLoadForFrame</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1488321</commentid>
    <comment_count>1</comment_count>
      <attachid>357408</attachid>
    <who name="Alex Christensen">achristensen</who>
    <bug_when>2018-12-15 15:50:55 -0800</bug_when>
    <thetext>Created attachment 357408
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1488322</commentid>
    <comment_count>2</comment_count>
      <attachid>357408</attachid>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2018-12-15 16:00:24 -0800</bug_when>
    <thetext>Comment on attachment 357408
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=357408&amp;action=review

&gt; Source/WebKit/ChangeLog:5
&gt; +        &lt;rdar://problem/45842668&gt;

I believe I fixed this crash in https://trac.webkit.org/changeset/238565 already, with a test.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1488463</commentid>
    <comment_count>3</comment_count>
      <attachid>357408</attachid>
    <who name="Alex Christensen">achristensen</who>
    <bug_when>2018-12-17 10:36:32 -0800</bug_when>
    <thetext>Comment on attachment 357408
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=357408&amp;action=review

&gt;&gt; Source/WebKit/ChangeLog:5
&gt;&gt; +        &lt;rdar://problem/45842668&gt;
&gt; 
&gt; I believe I fixed this crash in https://trac.webkit.org/changeset/238565 already, with a test.

You did not.  This crash has been seen since then.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1488643</commentid>
    <comment_count>4</comment_count>
      <attachid>357408</attachid>
    <who name="Chris Dumez">cdumez</who>
    <bug_when>2018-12-17 15:56:31 -0800</bug_when>
    <thetext>Comment on attachment 357408
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=357408&amp;action=review

&gt;&gt;&gt; Source/WebKit/ChangeLog:5
&gt;&gt;&gt; +        &lt;rdar://problem/45842668&gt;
&gt;&gt; 
&gt;&gt; I believe I fixed this crash in https://trac.webkit.org/changeset/238565 already, with a test.
&gt; 
&gt; You did not.  This crash has been seen since then.

Crash trace is actually different but yes.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1488684</commentid>
    <comment_count>5</comment_count>
      <attachid>357408</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2018-12-17 17:32:43 -0800</bug_when>
    <thetext>Comment on attachment 357408
Patch

Clearing flags on attachment: 357408

Committed r239305: &lt;https://trac.webkit.org/changeset/239305&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1488685</commentid>
    <comment_count>6</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2018-12-17 17:32:44 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1488686</commentid>
    <comment_count>7</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2018-12-17 17:33:36 -0800</bug_when>
    <thetext>&lt;rdar://problem/46796907&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>357408</attachid>
            <date>2018-12-15 15:50:55 -0800</date>
            <delta_ts>2018-12-17 17:32:43 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-192744-20181215155054.patch</filename>
            <type>text/plain</type>
            <size>1724</size>
            <attacher name="Alex Christensen">achristensen</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09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</data>

          </attachment>
      

    </bug>

</bugzilla>