83565 2012-04-10 05:13:49 -0700 Crash when reloading page while it is loading 2022-02-28 03:49:36 -0800 1 1 1 Unclassified WebKit WebKit Qt 528+ (Nightly build) All All RESOLVED WORKSFORME http://stackoverflow.com/questions/10072774/qtwebkit-2-2-segfaults-when-loading-specific-website P1 Normal --- 68616 0 net147 webkit-unassigned ap beidson hausmann japhet webkit.review.bot oldest_to_newest 599166 0 net147 2012-04-10 05:13:49 -0700 The crash is caused by a null pointer dereference in Source/WebCore/loader/ResourceLoader.cpp in the function ResourceLoader::didCancel(). m_documentLoader->cancelPendingSubstituteLoad(this) is called without checking if m_documentLoader is null. 599169 1 136430 net147 2012-04-10 05:16:05 -0700 Created attachment 136430 Stack trace of the crash 599173 2 136432 net147 2012-04-10 05:24:42 -0700 Created attachment 136432 Patch to fix possible null pointer dereference 599176 3 webkit.review.bot 2012-04-10 05:27:10 -0700 Attachment 136432 did not pass style-queue: Failed to run "['Tools/Scripts/check-webkit-style', '--diff-files', u'Source/WebCore/ChangeLog', u'Source/WebCor..." exit_code: 1 Source/WebCore/ChangeLog:3: Line contains tab character. [whitespace/tab] [5] Source/WebCore/ChangeLog:4: Line contains tab character. [whitespace/tab] [5] Total errors found: 2 in 2 files If any of these errors are false positives, please file a bug against check-webkit-style. 599181 4 136433 net147 2012-04-10 05:29:45 -0700 Created attachment 136433 Patch to fix possible null pointer dereference 599224 5 136433 webkit.review.bot 2012-04-10 06:44:50 -0700 Comment on attachment 136433 Patch to fix possible null pointer dereference Rejecting attachment 136433 from review queue. net147@gmail.com does not have reviewer permissions according to http://trac.webkit.org/browser/trunk/Tools/Scripts/webkitpy/common/config/committers.py. - If you do not have reviewer rights please read http://webkit.org/coding/contributing.html for instructions on how to use bugzilla flags. - If you have reviewer rights please correct the error in Tools/Scripts/webkitpy/common/config/committers.py by adding yourself to the file (no review needed). The commit-queue restarts itself every 2 hours. After restart the commit-queue will correctly respect your reviewer rights. 599345 6 136433 japhet 2012-04-10 09:39:40 -0700 Comment on attachment 136433 Patch to fix possible null pointer dereference View in context: https://bugs.webkit.org/attachment.cgi?id=136433&action=review > Source/WebCore/loader/ResourceLoader.cpp:385 > - > - m_documentLoader->cancelPendingSubstituteLoad(this); > + if (m_documentLoader) > + m_documentLoader->cancelPendingSubstituteLoad(this); We don't typically null-check ResourceLoader::m_documentLoader. The preferred technique is to check m_reachedTerminalState, which should catch every case where m_documentLoader is null. It would be great if we had a layout test for this. At the very least, we should figure out where in here we're calling releasedResources(), which nulls m_documentLoader and sets m_reachedTerminalState to true. 599569 7 beidson 2012-04-10 13:28:31 -0700 (In reply to comment #6) > It would be great if we had a layout test for this. At the very least, we should figure out where in here we're calling releasedResources(), which nulls m_documentLoader and sets m_reachedTerminalState to true. Not only would it be great; We need one. The original report is written as if this is easily reproducible, but I've never seen this myself. And yes, I reload pages while they're still loading. A better start to this would be providing actual steps to reproduce the bug, as well as details of what configuration you're using. 599770 8 net147 2012-04-10 16:16:54 -0700 The crash occurs with Qt 4.8.1 which has QtWebKit 2.2.0. Compiler is MinGW GCC 4.4.0. It was reproduced using the code and steps linked by the URL. ResourceLoader::didFinishLoading is calling releaseResources() which nulls m_documentLoader and sets m_reachedTerminalState to true. ResourceLoader::didCancel is called afterwards on the same resource loader which results in the crash. 599784 9 beidson 2012-04-10 16:30:20 -0700 (In reply to comment #8) > The crash occurs with Qt 4.8.1 which has QtWebKit 2.2.0. Compiler is MinGW GCC 4.4.0. It was reproduced using the code and steps linked by the URL. I went to http://stackoverflow.com/questions/10072774/qtwebkit-2-2-segfaults-when-loading-specific-website I saw a link to a URL (http://www.mayaposch.com/index.php) but no further instructions. You mention in this bug report "reload a page while it is loading", but those instructions don't exist at the stackoverflow.com URL. I can observe that this does not reproduce in Safari with a ToT WebKit build or in Chrome. This is likely Qt port specific. > ResourceLoader::didFinishLoading is calling releaseResources() which nulls m_documentLoader and sets m_reachedTerminalState to true. ResourceLoader::didCancel is called afterwards on the same resource loader which results in the crash. Why do the other ports not crash here, then? This change - while seemingly small and obvious on the surface - is in some of the most complicated code in the project whose edge cases are notoriously poorly tested. At the minimum we should try to understand why Qt is hitting this but other platforms aren't. We should also strive to have a reduced test case that remonstrates the crash which will go far towards making an automated regression test. 634716 10 144216 net147 2012-05-26 22:08:40 -0700 Created attachment 144216 Test case for crash 634727 11 144220 net147 2012-05-27 00:38:37 -0700 Created attachment 144220 Test case for crash Added ability to run test case non-interactively by defining INTERACTIVE_TEST to 0. 726630 12 net147 2012-09-24 07:16:11 -0700 The conditions leading to the crash seems to be the following: -QWebView is configured to load icons -A website with a favicon is loaded -A meta http-equiv refresh with 0 delay is contained in the web page - this results in the page load being canceled -The slot on_webView_loadFinished which handles the QWebView::loadFinished signal shows a message box which re-enters the event loop and delays returning control to the sender of the loadFinished signal for some time. During this time, other signals may fire and run in a different order than normally expected because control has not yet returned to the sender of the loadFinished signal. I'm not sure the test case fits into the current layout test framework. Can you run custom Qt GUI code in the test framework and connect to a locally started server serving a favicon and webpage? Some guidance would be appreciated. 849945 13 net147 2013-03-07 04:03:00 -0800 This crash doesn't occur using QtWebKit included with Qt 5. Qt 4 is using a really old version of QtWebKit it seems. 136430 2012-04-10 05:16:05 -0700 2012-04-10 05:16:05 -0700 Stack trace of the crash stacktrace.txt text/plain 7425 net147 MCAgIFdURjo6SGFzaFRhYmxlPFdURjo6UmVmUHRyPFdlYkNvcmU6OlJlc291cmNlTG9hZGVyPiwg c3RkOjpwYWlyPFdURjo6UmVmUHRyPFdlYkNvcmU6OlJlc291cmNlTG9hZGVyPiwgV1RGOjpSZWZQ dHI8V2ViQ29yZTo6U3Vic3RpdHV0ZVJlc291cmNlPiA+LCBXVEY6OlBhaXJGaXJzdEV4dHJhY3Rv cjxzdGQ6OnBhaXI8V1RGOjpSZWZQdHI8V2ViQ29yZTo6UmVzb3VyY2VMb2FkZXI+LCBXVEY6OlJl ZlB0cjxXZWJDb3JlOjpTdWJzdGl0dXRlUmVzb3VyY2U+ID4gPiwgV1RGOjpQdHJIYXNoPFdURjo6 UmVmUHRyPFdlYkNvcmU6OlJlc291cmNlTG9hZGVyPiA+LCBXVEY6OlBhaXJIYXNoVHJhaXRzPFdU Rjo6SGFzaFRyYWl0czxXVEY6OlJlZlB0cjxXZWJDb3JlOjpSZXNvdXJjZUxvYWRlcj4gPiwgV1RG OjpIYXNoVHJhaXRzPFdURjo6UmVmUHRyPFdlYkNvcmU6OlN1YnN0aXR1dGVSZXNvdXJjZT4gPiA+ LCBXVEY6Okhhc2hUcmFpdHM8V1RGOjpSZWZQdHI8V2ViQ29yZTo6UmVzb3VyY2VMb2FkZXI+ID4g Pjo6aXNFbXB0eSgpIGNvbnN0IEQ6XERldlxRdFxTREtcRGVza3RvcFxRdFw0LjguMFxtaW5nd1xi aW5cUXRXZWJLaXRkNC5kbGwgMCAgIDB4YmNkMDM2ZSAgIAoxICAgV1RGOjpIYXNoTWFwPFdURjo6 UmVmUHRyPFdlYkNvcmU6OlJlc291cmNlTG9hZGVyPiwgV1RGOjpSZWZQdHI8V2ViQ29yZTo6U3Vi c3RpdHV0ZVJlc291cmNlPiwgV1RGOjpQdHJIYXNoPFdURjo6UmVmUHRyPFdlYkNvcmU6OlJlc291 cmNlTG9hZGVyPiA+LCBXVEY6Okhhc2hUcmFpdHM8V1RGOjpSZWZQdHI8V2ViQ29yZTo6UmVzb3Vy Y2VMb2FkZXI+ID4sIFdURjo6SGFzaFRyYWl0czxXVEY6OlJlZlB0cjxXZWJDb3JlOjpTdWJzdGl0 dXRlUmVzb3VyY2U+ID4gPjo6aXNFbXB0eSgpIGNvbnN0IEQ6XERldlxRdFxTREtcRGVza3RvcFxR dFw0LjguMFxtaW5nd1xiaW5cUXRXZWJLaXRkNC5kbGwgMCAgIDB4YmNjNzMxNSAgIAoyICAgV2Vi Q29yZTo6RG9jdW1lbnRMb2FkZXI6OmNhbmNlbFBlbmRpbmdTdWJzdGl0dXRlTG9hZChXZWJDb3Jl OjpSZXNvdXJjZUxvYWRlciopICBEOlxEZXZcUXRcU0RLXERlc2t0b3BcUXRcNC44LjBcbWluZ3dc YmluXFF0V2ViS2l0ZDQuZGxsIDAgICAweGIzY2JiOTYgICAKMyAgIFdlYkNvcmU6OlJlc291cmNl TG9hZGVyOjpkaWRDYW5jZWwoV2ViQ29yZTo6UmVzb3VyY2VFcnJvciBjb25zdCYpICAgRDpcRGV2 XFF0XFNES1xEZXNrdG9wXFF0XDQuOC4wXG1pbmd3XGJpblxRdFdlYktpdGQ0LmRsbCAwICAgMHhi NjIyNzdmICAgCjQgICBXZWJDb3JlOjpTdWJyZXNvdXJjZUxvYWRlcjo6ZGlkQ2FuY2VsKFdlYkNv cmU6OlJlc291cmNlRXJyb3IgY29uc3QmKSAgICBEOlxEZXZcUXRcU0RLXERlc2t0b3BcUXRcNC44 LjBcbWluZ3dcYmluXFF0V2ViS2l0ZDQuZGxsIDAgICAweGI3NTg1OWMgICAKNSAgIFdlYkNvcmU6 OlJlc291cmNlTG9hZGVyOjpjYW5jZWwoV2ViQ29yZTo6UmVzb3VyY2VFcnJvciBjb25zdCYpICBE OlxEZXZcUXRcU0RLXERlc2t0b3BcUXRcNC44LjBcbWluZ3dcYmluXFF0V2ViS2l0ZDQuZGxsIDAg ICAweGI2MjI5MDAgICAKNiAgIFdlYkNvcmU6OlJlc291cmNlTG9hZGVyOjpjYW5jZWwoKSAgIEQ6 XERldlxRdFxTREtcRGVza3RvcFxRdFw0LjguMFxtaW5nd1xiaW5cUXRXZWJLaXRkNC5kbGwgMCAg IDB4YjYyMjg1YSAgIAo3ICAgV2ViQ29yZTo6Y2FuY2VsQWxsKFdURjo6SGFzaFNldDxXVEY6OlJl ZlB0cjxXZWJDb3JlOjpSZXNvdXJjZUxvYWRlcj4sIFdURjo6UHRySGFzaDxXVEY6OlJlZlB0cjxX ZWJDb3JlOjpSZXNvdXJjZUxvYWRlcj4gPiwgV1RGOjpIYXNoVHJhaXRzPFdURjo6UmVmUHRyPFdl YkNvcmU6OlJlc291cmNlTG9hZGVyPiA+ID4gY29uc3QmKSBEOlxEZXZcUXRcU0RLXERlc2t0b3Bc UXRcNC44LjBcbWluZ3dcYmluXFF0V2ViS2l0ZDQuZGxsIDAgICAweGIzYzg3MjUgICAKOCAgIFdl YkNvcmU6OkRvY3VtZW50TG9hZGVyOjpzdG9wTG9hZGluZ1N1YnJlc291cmNlcygpICBEOlxEZXZc UXRcU0RLXERlc2t0b3BcUXRcNC44LjBcbWluZ3dcYmluXFF0V2ViS2l0ZDQuZGxsIDAgICAweGIz Y2JmYTQgICAKOSAgIFdlYkNvcmU6OkRvY3VtZW50TG9hZGVyOjpzdG9wTG9hZGluZygpICBEOlxE ZXZcUXRcU0RLXERlc2t0b3BcUXRcNC44LjBcbWluZ3dcYmluXFF0V2ViS2l0ZDQuZGxsIDAgICAw eGIzY2E5ZTAgICAKMTAgIFdlYkNvcmU6OkZyYW1lTG9hZGVyOjpzdG9wQWxsTG9hZGVycyhXZWJD b3JlOjpDbGVhclByb3Zpc2lvbmFsSXRlbVBvbGljeSkgICBEOlxEZXZcUXRcU0RLXERlc2t0b3Bc UXRcNC44LjBcbWluZ3dcYmluXFF0V2ViS2l0ZDQuZGxsIDAgICAweGIyZjM2OTQgICAKMTEgIFdl YkNvcmU6OkZyYW1lTG9hZGVyOjpjb250aW51ZUxvYWRBZnRlck5hdmlnYXRpb25Qb2xpY3koV2Vi Q29yZTo6UmVzb3VyY2VSZXF1ZXN0IGNvbnN0JiwgV1RGOjpQYXNzUmVmUHRyPFdlYkNvcmU6OkZv cm1TdGF0ZT4sIGJvb2wpIEQ6XERldlxRdFxTREtcRGVza3RvcFxRdFw0LjguMFxtaW5nd1xiaW5c UXRXZWJLaXRkNC5kbGwgMCAgIDB4YjJmN2QyOSAgIAoxMiAgV2ViQ29yZTo6RnJhbWVMb2FkZXI6 OmNhbGxDb250aW51ZUxvYWRBZnRlck5hdmlnYXRpb25Qb2xpY3kodm9pZCosIFdlYkNvcmU6OlJl c291cmNlUmVxdWVzdCBjb25zdCYsIFdURjo6UGFzc1JlZlB0cjxXZWJDb3JlOjpGb3JtU3RhdGU+ LCBib29sKSAgRDpcRGV2XFF0XFNES1xEZXNrdG9wXFF0XDQuOC4wXG1pbmd3XGJpblxRdFdlYktp dGQ0LmRsbCAwICAgMHhiMmY3NmExICAgCjEzICBXZWJDb3JlOjpQb2xpY3lDYWxsYmFjazo6Y2Fs bChib29sKSBEOlxEZXZcUXRcU0RLXERlc2t0b3BcUXRcNC44LjBcbWluZ3dcYmluXFF0V2ViS2l0 ZDQuZGxsIDAgICAweGI1NmUwNmMgICAKMTQgIFdlYkNvcmU6OlBvbGljeUNoZWNrZXI6OmNvbnRp bnVlQWZ0ZXJOYXZpZ2F0aW9uUG9saWN5KFdlYkNvcmU6OlBvbGljeUFjdGlvbikgICAgRDpcRGV2 XFF0XFNES1xEZXNrdG9wXFF0XDQuOC4wXG1pbmd3XGJpblxRdFdlYktpdGQ0LmRsbCAwICAgMHhi NTZlZDI2ICAgCjE1ICBXZWJDb3JlOjpGcmFtZUxvYWRlckNsaWVudFF0OjpjYWxsUG9saWN5RnVu Y3Rpb24odm9pZCAoV2ViQ29yZTo6UG9saWN5Q2hlY2tlcjo6KikoV2ViQ29yZTo6UG9saWN5QWN0 aW9uKSwgV2ViQ29yZTo6UG9saWN5QWN0aW9uKSAgICBEOlxEZXZcUXRcU0RLXERlc2t0b3BcUXRc NC44LjBcbWluZ3dcYmluXFF0V2ViS2l0ZDQuZGxsIDAgICAweGIxNDExODggICAKMTYgIFdlYkNv cmU6OkZyYW1lTG9hZGVyQ2xpZW50UXQ6OmRpc3BhdGNoRGVjaWRlUG9saWN5Rm9yTmF2aWdhdGlv bkFjdGlvbih2b2lkIChXZWJDb3JlOjpQb2xpY3lDaGVja2VyOjoqKShXZWJDb3JlOjpQb2xpY3lB Y3Rpb24pLCBXZWJDb3JlOjpOYXZpZ2F0aW9uQWN0aW9uIGNvbnN0JiwgV2ViQ29yZTo6UmVzb3Vy Y2VSZXF1ZXN0IGNvbnN0JiwgV1RGOjpQYXNzUmVmUHRyPFdlYkNvcmU6OkZvcm1TdGF0ZT4pICBE OlxEZXZcUXRcU0RLXERlc2t0b3BcUXRcNC44LjBcbWluZ3dcYmluXFF0V2ViS2l0ZDQuZGxsIDAg ICAweGIxNDY5NTkgICAKMTcgIFdlYkNvcmU6OlBvbGljeUNoZWNrZXI6OmNoZWNrTmF2aWdhdGlv blBvbGljeShXZWJDb3JlOjpSZXNvdXJjZVJlcXVlc3QgY29uc3QmLCBXZWJDb3JlOjpEb2N1bWVu dExvYWRlciosIFdURjo6UGFzc1JlZlB0cjxXZWJDb3JlOjpGb3JtU3RhdGU+LCB2b2lkICgqKSh2 b2lkKiwgV2ViQ29yZTo6UmVzb3VyY2VSZXF1ZXN0IGNvbnN0JiwgV1RGOjpQYXNzUmVmUHRyPFdl YkNvcmU6OkZvcm1TdGF0ZT4sIGJvb2wpLCB2b2lkKikgICBEOlxEZXZcUXRcU0RLXERlc2t0b3Bc UXRcNC44LjBcbWluZ3dcYmluXFF0V2ViS2l0ZDQuZGxsIDAgICAweGI1NmU3ZWYgICAKMTggIFdl YkNvcmU6OkZyYW1lTG9hZGVyOjpsb2FkV2l0aERvY3VtZW50TG9hZGVyKFdlYkNvcmU6OkRvY3Vt ZW50TG9hZGVyKiwgV2ViQ29yZTo6RnJhbWVMb2FkVHlwZSwgV1RGOjpQYXNzUmVmUHRyPFdlYkNv cmU6OkZvcm1TdGF0ZT4pIEQ6XERldlxRdFxTREtcRGVza3RvcFxRdFw0LjguMFxtaW5nd1xiaW5c UXRXZWJLaXRkNC5kbGwgMCAgIDB4YjJmMjVlOSAgIAoxOSAgV2ViQ29yZTo6RnJhbWVMb2FkZXI6 OmxvYWRXaXRoTmF2aWdhdGlvbkFjdGlvbihXZWJDb3JlOjpSZXNvdXJjZVJlcXVlc3QgY29uc3Qm LCBXZWJDb3JlOjpOYXZpZ2F0aW9uQWN0aW9uIGNvbnN0JiwgYm9vbCwgV2ViQ29yZTo6RnJhbWVM b2FkVHlwZSwgV1RGOjpQYXNzUmVmUHRyPFdlYkNvcmU6OkZvcm1TdGF0ZT4pICAgIEQ6XERldlxR dFxTREtcRGVza3RvcFxRdFw0LjguMFxtaW5nd1xiaW5cUXRXZWJLaXRkNC5kbGwgMCAgIDB4YjJm MWZjNSAgIAoyMCAgV2ViQ29yZTo6RnJhbWVMb2FkZXI6OmxvYWRVUkwoV2ViQ29yZTo6S1VSTCBj b25zdCYsIFdURjo6U3RyaW5nIGNvbnN0JiwgV1RGOjpTdHJpbmcgY29uc3QmLCBib29sLCBXZWJD b3JlOjpGcmFtZUxvYWRUeXBlLCBXVEY6OlBhc3NSZWZQdHI8V2ViQ29yZTo6RXZlbnQ+LCBXVEY6 OlBhc3NSZWZQdHI8V2ViQ29yZTo6Rm9ybVN0YXRlPikgRDpcRGV2XFF0XFNES1xEZXNrdG9wXFF0 XDQuOC4wXG1pbmd3XGJpblxRdFdlYktpdGQ0LmRsbCAwICAgMHhiMmYxN2YxICAgCjIxICBXZWJD b3JlOjpGcmFtZUxvYWRlcjo6bG9hZEZyYW1lUmVxdWVzdChXZWJDb3JlOjpGcmFtZUxvYWRSZXF1 ZXN0IGNvbnN0JiwgYm9vbCwgYm9vbCwgV1RGOjpQYXNzUmVmUHRyPFdlYkNvcmU6OkV2ZW50Piwg V1RGOjpQYXNzUmVmUHRyPFdlYkNvcmU6OkZvcm1TdGF0ZT4sIFdlYkNvcmU6OlJlZmVycmVyUG9s aWN5KSBEOlxEZXZcUXRcU0RLXERlc2t0b3BcUXRcNC44LjBcbWluZ3dcYmluXFF0V2ViS2l0ZDQu ZGxsIDAgICAweGIyZjEwODYgICAKMjIgIFdlYkNvcmU6OkZyYW1lTG9hZGVyOjp1cmxTZWxlY3Rl ZChXZWJDb3JlOjpGcmFtZUxvYWRSZXF1ZXN0IGNvbnN0JiwgV1RGOjpQYXNzUmVmUHRyPFdlYkNv cmU6OkV2ZW50PiwgYm9vbCwgYm9vbCwgV2ViQ29yZTo6UmVmZXJyZXJQb2xpY3ksIFdlYkNvcmU6 OlNob3VsZFJlcGxhY2VEb2N1bWVudElmSmF2YVNjcmlwdFVSTCkgICAgRDpcRGV2XFF0XFNES1xE ZXNrdG9wXFF0XDQuOC4wXG1pbmd3XGJpblxRdFdlYktpdGQ0LmRsbCAwICAgMHhiMmVjZTNlICAg CjIzICBXZWJDb3JlOjpGcmFtZUxvYWRlcjo6Y2hhbmdlTG9jYXRpb24oV1RGOjpQYXNzUmVmUHRy PFdlYkNvcmU6OlNlY3VyaXR5T3JpZ2luPiwgV2ViQ29yZTo6S1VSTCBjb25zdCYsIFdURjo6U3Ry aW5nIGNvbnN0JiwgYm9vbCwgYm9vbCwgYm9vbCkgIEQ6XERldlxRdFxTREtcRGVza3RvcFxRdFw0 LjguMFxtaW5nd1xiaW5cUXRXZWJLaXRkNC5kbGwgMCAgIDB4YjJlYzlkZSAgIAoyNCAgV2ViQ29y ZTo6U2NoZWR1bGVkVVJMTmF2aWdhdGlvbjo6ZmlyZShXZWJDb3JlOjpGcmFtZSopICBEOlxEZXZc UXRcU0RLXERlc2t0b3BcUXRcNC44LjBcbWluZ3dcYmluXFF0V2ViS2l0ZDQuZGxsIDAgICAweGJj MzBkZTggICAKMjUgIFdlYkNvcmU6Ok5hdmlnYXRpb25TY2hlZHVsZXI6OnRpbWVyRmlyZWQoV2Vi Q29yZTo6VGltZXI8V2ViQ29yZTo6TmF2aWdhdGlvblNjaGVkdWxlcj4qKSBEOlxEZXZcUXRcU0RL XERlc2t0b3BcUXRcNC44LjBcbWluZ3dcYmluXFF0V2ViS2l0ZDQuZGxsIDAgICAweGIzY2Q1NjUg ICAKMjYgIFdlYkNvcmU6OlRpbWVyPFdlYkNvcmU6Ok5hdmlnYXRpb25TY2hlZHVsZXI+OjpmaXJl ZCgpICAgRDpcRGV2XFF0XFNES1xEZXNrdG9wXFF0XDQuOC4wXG1pbmd3XGJpblxRdFdlYktpdGQ0 LmRsbCAwICAgMHhiYzdhZGIyICAgCjI3ICBXZWJDb3JlOjpUaHJlYWRUaW1lcnM6OnNoYXJlZFRp bWVyRmlyZWRJbnRlcm5hbCgpICAgRDpcRGV2XFF0XFNES1xEZXNrdG9wXFF0XDQuOC4wXG1pbmd3 XGJpblxRdFdlYktpdGQ0LmRsbCAwICAgMHhiNGE4NGU2ICAgCjI4ICBXZWJDb3JlOjpUaHJlYWRU aW1lcnM6OnNoYXJlZFRpbWVyRmlyZWQoKSAgIEQ6XERldlxRdFxTREtcRGVza3RvcFxRdFw0Ljgu MFxtaW5nd1xiaW5cUXRXZWJLaXRkNC5kbGwgMCAgIDB4YjRhODQzMyAgIAoyOSAgV2ViQ29yZTo6 U2hhcmVkVGltZXJRdDo6dGltZXJFdmVudChRVGltZXJFdmVudCopICAgIEQ6XERldlxRdFxTREtc RGVza3RvcFxRdFw0LjguMFxtaW5nd1xiaW5cUXRXZWJLaXRkNC5kbGwgMCAgIDB4YjY4NmE1YSAg IAozMCAgUU9iamVjdDo6ZXZlbnQgIHFvYmplY3QuY3BwIDExNTcgICAgMHg2YTIyNDk5YSAgCjMx ICBRQXBwbGljYXRpb25Qcml2YXRlOjpub3RpZnlfaGVscGVyICBxYXBwbGljYXRpb24uY3BwICAg IDQ1NTAgICAgMHhhNGMwMjAgICAgCjMyICBRQXBwbGljYXRpb246Om5vdGlmeSAgICBxYXBwbGlj YXRpb24uY3BwICAgIDM5MzIgICAgMHhhNDk5NzMgICAgCjMzICBRQ29yZUFwcGxpY2F0aW9uOjpu b3RpZnlJbnRlcm5hbCAgICBxY29yZWFwcGxpY2F0aW9uLmNwcCAgICA4NzYgMHg2YTIxMzI1MiAg CjM0ICBRQ29yZUFwcGxpY2F0aW9uOjpzZW5kRXZlbnQgcWNvcmVhcHBsaWNhdGlvbi5oICAyMzEg MHg2YTI4M2Y1NCAgCjM1ICBRRXZlbnREaXNwYXRjaGVyV2luMzI6OmV2ZW50ICAgIHFldmVudGRp c3BhdGNoZXJfd2luLmNwcCAgICAxMTM1ICAgIDB4NmEyM2FjNjAgIAozNiAgUUFwcGxpY2F0aW9u UHJpdmF0ZTo6bm90aWZ5X2hlbHBlciAgcWFwcGxpY2F0aW9uLmNwcCAgICA0NTUwICAgIDB4YTRj MDIwICAgIAozNyAgUUFwcGxpY2F0aW9uOjpub3RpZnkgICAgcWFwcGxpY2F0aW9uLmNwcCAgICAz OTMyICAgIDB4YTQ5OTczICAgIAozOCAgUUNvcmVBcHBsaWNhdGlvbjo6bm90aWZ5SW50ZXJuYWwg ICAgcWNvcmVhcHBsaWNhdGlvbi5jcHAgICAgODc2IDB4NmEyMTMyNTIgIAozOSAgUUNvcmVBcHBs aWNhdGlvbjo6c2VuZEV2ZW50IHFjb3JlYXBwbGljYXRpb24uaCAgMjMxIDB4NmEyODNmNTQgIAo0 MCAgUUNvcmVBcHBsaWNhdGlvblByaXZhdGU6OnNlbmRQb3N0ZWRFdmVudHMgICBxY29yZWFwcGxp Y2F0aW9uLmNwcCAgICAxNTAwICAgIDB4NmEyMTQxNmQgIAo0MSAgcXRfaW50ZXJuYWxfcHJvYyAg ICBxZXZlbnRkaXNwYXRjaGVyX3dpbi5jcHAgICAgNDk2IDB4NmEyMzhhMmYgIAo0MiAgVVNFUjMy IUlzRGlhbG9nTWVzc2FnZVcgQzpcV2luZG93c1xzeXN3b3c2NFx1c2VyMzIuZGxsICAwICAgMHg3 NWE0NjIzOCAgCjQzICBvcGVyYXRvcisgICAgICAgMCAgIDB4NzExM2FlICAgIAo0NCAgVVNFUjMy IUFsbG93Rm9yZWdyb3VuZEFjdGl2YXRpb24gICAgQzpcV2luZG93c1xzeXN3b3c2NFx1c2VyMzIu ZGxsICAwICAgMHg3NWE0NjhlYSAgCjQ1ICBxdF9mYXN0X3RpbWVyX3Byb2MgIHFldmVudGRpc3Bh dGNoZXJfd2luLmNwcCAgICA0MjggMHg2YTIzODdjOCAgCjQ2ICBVU0VSMzIhR2V0TWVzc2FnZUV4 dHJhSW5mbyAgQzpcV2luZG93c1xzeXN3b3c2NFx1c2VyMzIuZGxsICAwICAgMHg3NWE0N2QzMSAg CjQ3ICA/PyAgICAgIDAK 136432 2012-04-10 05:24:42 -0700 2012-04-10 05:29:17 -0700 Patch to fix possible null pointer dereference 83565.patch text/plain 1214 net147 SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDExMzcwOCkKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDEzIEBACisyMDEyLTA0LTEwICBKb25hdGhh biBMaXUgIDxuZXQxNDdAZ21haWwuY29tPgorCisJRml4IHBvc3NpYmxlIG51bGwgcG9pbnRlciBk ZXJlZmVyZW5jZS4KKwlodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9ODM1 NjUKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICAqIGxv YWRlci9SZXNvdXJjZUxvYWRlci5jcHA6CisgICAgICAgIChXZWJDb3JlOjpSZXNvdXJjZUxvYWRl cjo6Y2FuY2VsKToKKwogMjAxMi0wNC0xMCAgSWx5YSBUaWtob25vdnNreSAgPGxvaXNsb0BjaHJv bWl1bS5vcmc+CiAKICAgICAgICAgV2ViIEluc3BlY3RvcjogdXNlIG1heEpTT2JqZWN0SWQgdGhh dCBpcyBwcm92aWRlZCBieSBiYWNrLWVuZC4KSW5kZXg6IFNvdXJjZS9XZWJDb3JlL2xvYWRlci9S ZXNvdXJjZUxvYWRlci5jcHAKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNlL1dlYkNvcmUvbG9hZGVyL1Jl c291cmNlTG9hZGVyLmNwcAkocmV2aXNpb24gMTEzNzA4KQorKysgU291cmNlL1dlYkNvcmUvbG9h ZGVyL1Jlc291cmNlTG9hZGVyLmNwcAkod29ya2luZyBjb3B5KQpAQCAtMzgxLDggKzM4MSw4IEBA IHZvaWQgUmVzb3VyY2VMb2FkZXI6OmNhbmNlbChjb25zdCBSZXNvdXIKIAogICAgICAgICBpZiAo bV9oYW5kbGUpCiAgICAgICAgICAgICBtX2hhbmRsZS0+Y2xlYXJBdXRoZW50aWNhdGlvbigpOwot Ci0gICAgICAgIG1fZG9jdW1lbnRMb2FkZXItPmNhbmNlbFBlbmRpbmdTdWJzdGl0dXRlTG9hZCh0 aGlzKTsKKyAgICAgICAgaWYgKG1fZG9jdW1lbnRMb2FkZXIpCisgICAgICAgICAgICBtX2RvY3Vt ZW50TG9hZGVyLT5jYW5jZWxQZW5kaW5nU3Vic3RpdHV0ZUxvYWQodGhpcyk7CiAgICAgICAgIGlm IChtX2hhbmRsZSkgewogICAgICAgICAgICAgbV9oYW5kbGUtPmNhbmNlbCgpOwogICAgICAgICAg ICAgbV9oYW5kbGUgPSAwOwo= 136433 2012-04-10 05:29:45 -0700 2022-02-28 03:49:36 -0800 Patch to fix possible null pointer dereference 83565.patch text/plain 1228 net147 SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDExMzcwOCkKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDEzIEBACisyMDEyLTA0LTEwICBKb25hdGhh biBMaXUgIDxuZXQxNDdAZ21haWwuY29tPgorCisgICAgICAgIEZpeCBwb3NzaWJsZSBudWxsIHBv aW50ZXIgZGVyZWZlcmVuY2UuCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3df YnVnLmNnaT9pZD04MzU2NQorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgor CisgICAgICAgICogbG9hZGVyL1Jlc291cmNlTG9hZGVyLmNwcDoKKyAgICAgICAgKFdlYkNvcmU6 OlJlc291cmNlTG9hZGVyOjpjYW5jZWwpOgorCiAyMDEyLTA0LTEwICBJbHlhIFRpa2hvbm92c2t5 ICA8bG9pc2xvQGNocm9taXVtLm9yZz4KIAogICAgICAgICBXZWIgSW5zcGVjdG9yOiB1c2UgbWF4 SlNPYmplY3RJZCB0aGF0IGlzIHByb3ZpZGVkIGJ5IGJhY2stZW5kLgpJbmRleDogU291cmNlL1dl YkNvcmUvbG9hZGVyL1Jlc291cmNlTG9hZGVyLmNwcAo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9sb2FkZXIvUmVzb3VyY2VMb2FkZXIuY3BwCShyZXZpc2lvbiAxMTM3MDgpCisrKyBTb3Vy Y2UvV2ViQ29yZS9sb2FkZXIvUmVzb3VyY2VMb2FkZXIuY3BwCSh3b3JraW5nIGNvcHkpCkBAIC0z ODEsOCArMzgxLDggQEAgdm9pZCBSZXNvdXJjZUxvYWRlcjo6Y2FuY2VsKGNvbnN0IFJlc291cgog CiAgICAgICAgIGlmIChtX2hhbmRsZSkKICAgICAgICAgICAgIG1faGFuZGxlLT5jbGVhckF1dGhl bnRpY2F0aW9uKCk7Ci0KLSAgICAgICAgbV9kb2N1bWVudExvYWRlci0+Y2FuY2VsUGVuZGluZ1N1 YnN0aXR1dGVMb2FkKHRoaXMpOworICAgICAgICBpZiAobV9kb2N1bWVudExvYWRlcikKKyAgICAg ICAgICAgIG1fZG9jdW1lbnRMb2FkZXItPmNhbmNlbFBlbmRpbmdTdWJzdGl0dXRlTG9hZCh0aGlz KTsKICAgICAgICAgaWYgKG1faGFuZGxlKSB7CiAgICAgICAgICAgICBtX2hhbmRsZS0+Y2FuY2Vs KCk7CiAgICAgICAgICAgICBtX2hhbmRsZSA9IDA7Cg== 144216 2012-05-26 22:08:40 -0700 2012-05-27 00:38:37 -0700 Test case for crash main.cpp text/x-c++ 1495 net147 I2luY2x1ZGUgPFFBcHBsaWNhdGlvbj4NCiNpbmNsdWRlIDxRRGVidWc+DQojaW5jbHVkZSA8UUhC b3hMYXlvdXQ+DQojaW5jbHVkZSA8UU1lc3NhZ2VCb3g+DQojaW5jbHVkZSA8UVdlYlNldHRpbmdz Pg0KI2luY2x1ZGUgPFFXZWJWaWV3Pg0KI2luY2x1ZGUgPFFVcmw+DQoNCmNsYXNzIFZpZXdlciA6 IHB1YmxpYyBRV2lkZ2V0IHsNCiAgICBRX09CSkVDVA0KDQpwdWJsaWM6DQogICAgVmlld2VyKFFX aWRnZXQgKnBhcmVudCA9IDApIDogUVdpZGdldChwYXJlbnQpDQogICAgew0KICAgICAgICAvLyBz ZXR0aW5nIGljb24gZGF0YWJhc2UgcGF0aCBbMV0NCiAgICAgICAgUVdlYlNldHRpbmdzOjpnbG9i YWxTZXR0aW5ncygpLT5zZXRJY29uRGF0YWJhc2VQYXRoKHFBcHAtPmFwcGxpY2F0aW9uRGlyUGF0 aCgpKTsNCiAgICAgICAgbV93ZWJWaWV3ID0gbmV3IFFXZWJWaWV3KHRoaXMpOw0KICAgICAgICBt X3dlYlZpZXctPnNldE9iamVjdE5hbWUoIndlYlZpZXciKTsNCiAgICAgICAgUU1ldGFPYmplY3Q6 OmNvbm5lY3RTbG90c0J5TmFtZSh0aGlzKTsNCiAgICAgICAgLy8gbWV0YSByZWZyZXNoIHdpdGgg MCBzZWNvbmQgZGVsYXkgYW5kIGJhc2UgVVJMIHdpdGggZmF2aWNvbi5pY28gWzJdDQogICAgICAg IG1fd2ViVmlldy0+c2V0SHRtbCgiPGh0bWw+PGhlYWQ+PG1ldGEgaHR0cC1lcXVpdj1cIlJlZnJl c2hcIiBjb250ZW50PVwiMDsgdXJsPWFib3V0OmJsYW5rXCI+PC9oZWFkPjwvaHRtbD4iLA0KICAg ICAgICAgICAgICAgICAgICAgICAgICAgUVVybCgiaHR0cDovL3d3dy5nb29nbGUuY29tLyIpKTsN CiAgICAgICAgUUhCb3hMYXlvdXQgKmxheW91dCA9IG5ldyBRSEJveExheW91dCh0aGlzKTsNCiAg ICAgICAgbGF5b3V0LT5hZGRXaWRnZXQobV93ZWJWaWV3KTsNCg0KICAgICAgICAvLyB0aGUgY29t YmluYXRpb24gb2YgWzFdIGFuZCBbMl0gcmVzdWx0cyBpbiBsb2FkRmluaXNoZWQgZXZlbnQgd2l0 aCBvayA9IGZhbHNlDQogICAgfQ0KDQpwcml2YXRlIHNsb3RzOg0KICAgIHZvaWQgb25fd2ViVmll d19sb2FkRmluaXNoZWQoYm9vbCBvaykNCiAgICB7DQogICAgICAgIC8vIGZvciBzb21lIHJlYXNv biwgb2sgPSBmYWxzZSBiZWNhdXNlIG9mIFsxXQ0KICAgICAgICBpZiAoIW9rKSB7DQogICAgICAg ICAgICAvLyBjcmFzaCBhZnRlciBjbGlja2luZyBPSyBpbiBibG9ja2luZyBtb2RhbCBtZXNzYWdl IGJveA0KICAgICAgICAgICAgUU1lc3NhZ2VCb3g6OmNyaXRpY2FsKHRoaXMsIHRyKCJFcnJvciIp LCB0cigiRmFpbGVkIHRvIGxvYWQgVVJMLiIpKTsNCiAgICAgICAgfQ0KICAgIH0NCg0KcHJpdmF0 ZToNCiAgICBRV2ViVmlldyAqbV93ZWJWaWV3Ow0KfTsNCg0KI2luY2x1ZGUgIm1haW4ubW9jIg0K DQppbnQgbWFpbihpbnQgYXJnYywgY2hhciAqYXJndltdKQ0Kew0KICAgIFFBcHBsaWNhdGlvbiBh KGFyZ2MsIGFyZ3YpOw0KICAgIFZpZXdlciB2Ow0KICAgIHYuc2hvdygpOw0KICAgIHJldHVybiBh LmV4ZWMoKTsNCn0NCg== 144220 2012-05-27 00:38:37 -0700 2012-05-27 00:38:37 -0700 Test case for crash main.cpp text/x-c++ 1892 net147 I2luY2x1ZGUgPFFBcHBsaWNhdGlvbj4NCiNpbmNsdWRlIDxRSEJveExheW91dD4NCiNpbmNsdWRl IDxRTWVzc2FnZUJveD4NCiNpbmNsdWRlIDxRVGhyZWFkPg0KI2luY2x1ZGUgPFFUaW1lcj4NCiNp bmNsdWRlIDxRV2ViU2V0dGluZ3M+DQojaW5jbHVkZSA8UVdlYlZpZXc+DQojaW5jbHVkZSA8UVVy bD4NCg0KI2RlZmluZSBJTlRFUkFDVElWRV9URVNUIDENCg0KY2xhc3MgVmlld2VyIDogcHVibGlj IFFXaWRnZXQgew0KICAgIFFfT0JKRUNUDQoNCnB1YmxpYzoNCiAgICBWaWV3ZXIoUVdpZGdldCAq cGFyZW50ID0gMCkgOiBRV2lkZ2V0KHBhcmVudCkNCiAgICB7DQogICAgICAgIC8vIHNldHRpbmcg aWNvbiBkYXRhYmFzZSBwYXRoIFsxXQ0KICAgICAgICBRV2ViU2V0dGluZ3M6Omdsb2JhbFNldHRp bmdzKCktPnNldEljb25EYXRhYmFzZVBhdGgocUFwcC0+YXBwbGljYXRpb25EaXJQYXRoKCkpOw0K ICAgICAgICBtX3dlYlZpZXcgPSBuZXcgUVdlYlZpZXcodGhpcyk7DQogICAgICAgIG1fd2ViVmll dy0+c2V0T2JqZWN0TmFtZSgid2ViVmlldyIpOw0KICAgICAgICBRTWV0YU9iamVjdDo6Y29ubmVj dFNsb3RzQnlOYW1lKHRoaXMpOw0KICAgICAgICAvLyBtZXRhIHJlZnJlc2ggd2l0aCAwIHNlY29u ZCBkZWxheSBhbmQgYmFzZSBVUkwgd2l0aCBmYXZpY29uLmljbyBbMl0NCiAgICAgICAgbV93ZWJW aWV3LT5zZXRIdG1sKCI8aHRtbD48aGVhZD48bWV0YSBodHRwLWVxdWl2PVwiUmVmcmVzaFwiIGNv bnRlbnQ9XCIwOyB1cmw9YWJvdXQ6YmxhbmtcIj48L2hlYWQ+PC9odG1sPiIsDQogICAgICAgICAg ICAgICAgICAgICAgICAgICBRVXJsKCJodHRwOi8vd3d3LndlYmtpdC5vcmcvIikpOw0KICAgICAg ICBRSEJveExheW91dCAqbGF5b3V0ID0gbmV3IFFIQm94TGF5b3V0KHRoaXMpOw0KICAgICAgICBs YXlvdXQtPmFkZFdpZGdldChtX3dlYlZpZXcpOw0KDQogICAgICAgIC8vIHRoZSBjb21iaW5hdGlv biBvZiBbMV0gYW5kIFsyXSByZXN1bHRzIGluIGxvYWRGaW5pc2hlZCBldmVudCB3aXRoIG9rID0g ZmFsc2UNCiAgICB9DQoNCnByaXZhdGUgc2xvdHM6DQogICAgdm9pZCBvbl93ZWJWaWV3X2xvYWRG aW5pc2hlZChib29sIG9rKQ0KICAgIHsNCiAgICAgICAgLy8gZm9yIHNvbWUgcmVhc29uLCBvayA9 IGZhbHNlIGJlY2F1c2Ugb2YgWzFdDQogICAgICAgIGlmICghb2spIHsNCiNpZiBJTlRFUkFDVElW RV9URVNUDQogICAgICAgICAgICAvLyBjcmFzaCBhZnRlciBjbGlja2luZyBPSyBpbiBibG9ja2lu ZyBtb2RhbCBtZXNzYWdlIGJveA0KICAgICAgICAgICAgUU1lc3NhZ2VCb3g6OmNyaXRpY2FsKHRo aXMsIHRyKCJFcnJvciIpLCB0cigiRmFpbGVkIHRvIGxvYWQgVVJMLiIpKTsNCiNlbHNlDQogICAg ICAgICAgICAvLyBibG9jayB3aGlsZSBwcm9jZXNzaW5nIGV2ZW50cyBmb3IgYSBiaXQgdG8gc2lt dWxhdGUgc2hvd2luZyBibG9ja2luZyBtb2RhbCBkaWFsb2cgYW5kIGNsaWNraW5nIE9LDQogICAg ICAgICAgICBRRXZlbnRMb29wIGV2Ow0KICAgICAgICAgICAgUVRpbWVyOjpzaW5nbGVTaG90KDEw MDAsICZldiwgU0xPVChxdWl0KCkpKTsNCiAgICAgICAgICAgIGV2LmV4ZWMoKTsNCiNlbmRpZg0K ICAgICAgICB9DQoNCiNpZiAhSU5URVJBQ1RJVkVfVEVTVA0KICAgICAgICBxQXBwLT5xdWl0KCk7 DQojZW5kaWYNCiAgICB9DQoNCnByaXZhdGU6DQogICAgUVdlYlZpZXcgKm1fd2ViVmlldzsNCn07 DQoNCiNpbmNsdWRlICJtYWluLm1vYyINCg0KaW50IG1haW4oaW50IGFyZ2MsIGNoYXIgKmFyZ3Zb XSkNCnsNCiAgICBRQXBwbGljYXRpb24gYShhcmdjLCBhcmd2KTsNCiAgICBWaWV3ZXIgdjsNCiNp ZiBJTlRFUkFDVElWRV9URVNUDQogICAgdi5zaG93KCk7DQojZW5kaWYNCiAgICByZXR1cm4gYS5l eGVjKCk7DQp9DQo=