<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>98287</bug_id>
          
          <creation_ts>2012-10-03 11:51:53 -0700</creation_ts>
          <short_desc>Crash when calling document.open during unload</short_desc>
          <delta_ts>2018-06-28 21:10:45 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>New Bugs</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=98345</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          <dependson>98345</dependson>
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Adam Barth">abarth</reporter>
          <assigned_to name="Adam Barth">abarth</assigned_to>
          <cc>eric</cc>
    
    <cc>fujii</cc>
    
    <cc>japhet</cc>
    
    <cc>ossy</cc>
    
    <cc>simonjam</cc>
    
    <cc>webkit.review.bot</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>733891</commentid>
    <comment_count>0</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2012-10-03 11:51:53 -0700</bug_when>
    <thetext>Crash when calling document.open during unload</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>733893</commentid>
    <comment_count>1</comment_count>
      <attachid>166931</attachid>
    <who name="Adam Barth">abarth</who>
    <bug_when>2012-10-03 11:53:53 -0700</bug_when>
    <thetext>Created attachment 166931
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>733897</commentid>
    <comment_count>2</comment_count>
      <attachid>166931</attachid>
    <who name="Nate Chapin">japhet</who>
    <bug_when>2012-10-03 11:56:44 -0700</bug_when>
    <thetext>Comment on attachment 166931
Patch

Will this crash the current test or the next one without the patch?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>733900</commentid>
    <comment_count>3</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2012-10-03 12:06:59 -0700</bug_when>
    <thetext>&gt; Will this crash the current test or the next one without the patch?

The current one.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>733902</commentid>
    <comment_count>4</comment_count>
      <attachid>166931</attachid>
    <who name="Nate Chapin">japhet</who>
    <bug_when>2012-10-03 12:08:55 -0700</bug_when>
    <thetext>Comment on attachment 166931
Patch

Ok. I just get worried about unload events causing their failures too late.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>733937</commentid>
    <comment_count>5</comment_count>
      <attachid>166931</attachid>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2012-10-03 12:34:21 -0700</bug_when>
    <thetext>Comment on attachment 166931
Patch

Clearing flags on attachment: 166931

Committed r130313: &lt;http://trac.webkit.org/changeset/130313&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>733938</commentid>
    <comment_count>6</comment_count>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2012-10-03 12:34:24 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>734412</commentid>
    <comment_count>7</comment_count>
    <who name="Csaba Osztrogonác">ossy</who>
    <bug_when>2012-10-04 00:07:06 -0700</bug_when>
    <thetext>(In reply to comment #5)
&gt; (From update of attachment 166931 [details])
&gt; Clearing flags on attachment: 166931
&gt; 
&gt; Committed r130313: &lt;http://trac.webkit.org/changeset/130313&gt;

It caused a crash on the Qt WK2 bot - https://bugs.webkit.org/show_bug.cgi?id=98345
Could you check it, please?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>734442</commentid>
    <comment_count>8</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2012-10-04 00:36:41 -0700</bug_when>
    <thetext>Sounds like this test uncovered an existing crash in WebKit2.  There&apos;s no way this patch introduced the crash.  (The patch is just a null check.)</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>166931</attachid>
            <date>2012-10-03 11:53:53 -0700</date>
            <delta_ts>2012-10-03 12:34:21 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-98287-20121003115304.patch</filename>
            <type>text/plain</type>
            <size>3390</size>
            <attacher name="Adam Barth">abarth</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMTMwMzAyCmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViQ29yZS9D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</data>

          </attachment>
      

    </bug>

</bugzilla>