RESOLVED FIXED260038
Crash under ReportingScope::unregisterReportingObserver() 
https://bugs.webkit.org/show_bug.cgi?id=260038
Summary Crash under ReportingScope::unregisterReportingObserver()
Chris Dumez
Reported 2023-08-10 13:28:34 PDT
Crash under ReportingScope::unregisterReportingObserver(): ``` 23 WTF::RefCountedBase::ref() const <== 23 WTF::Ref<WebCore::ReportingObserver, WTF::RawPtrTraits<WebCore::ReportingObserver> >::Ref(WTF::Ref<WebCore::ReportingObserver, WTF::RawPtrTraits<WebCore::ReportingObserver> > const&) 23 WTF::Ref<WebCore::ReportingObserver, WTF::RawPtrTraits<WebCore::ReportingObserver> >::Ref(WTF::Ref<WebCore::ReportingObserver, WTF::RawPtrTraits<WebCore::ReportingObserver> > const&) 23 bool WTF::Vector<WTF::Ref<WebCore::ReportingObserver, WTF::RawPtrTraits<WebCore::ReportingObserver> >, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>::removeFirstMatching<WebCore::ReportingScope::unregisterReportingObserver(WebCore::ReportingObserver&)::$_2>(WebCore::ReportingScope::unregisterReportingObserver(WebCore::ReportingObserver&)::$_2 const&, unsigned long) 23 WebCore::ReportingScope::unregisterReportingObserver(WebCore::ReportingObserver&) 23 WebCore::ReportingObserver::disconnect() 23 WebCore::ReportingObserver::~ReportingObserver() 23 WebCore::ReportingObserver::~ReportingObserver() 23 std::__1::default_delete<WebCore::ReportingObserver>::operator()[abi:v160002](WebCore::ReportingObserver*) const 23 WTF::RefCounted<WebCore::ReportingObserver, std::__1::default_delete<WebCore::ReportingObserver> >::deref() const 23 WTF::Ref<WebCore::ReportingObserver, WTF::RawPtrTraits<WebCore::ReportingObserver> >::~Ref() 23 WTF::Ref<WebCore::ReportingObserver, WTF::RawPtrTraits<WebCore::ReportingObserver> >::~Ref() 23 WTF::VectorDestructor<true, WTF::Ref<WebCore::ReportingObserver, WTF::RawPtrTraits<WebCore::ReportingObserver> > >::destruct(WTF::Ref<WebCore::ReportingObserver, WTF::RawPtrTraits<WebCore::ReportingObserver> >*, WTF::Ref<WebCore::ReportingObserver, WTF::RawPtrTraits<WebCore::ReportingObserver> >*) 23 WTF::VectorTypeOperations<WTF::Ref<WebCore::ReportingObserver, WTF::RawPtrTraits<WebCore::ReportingObserver> > >::destruct(WTF::Ref<WebCore::ReportingObserver, WTF::RawPtrTraits<WebCore::ReportingObserver> >*, WTF::Ref<WebCore::ReportingObserver, WTF::RawPtrTraits<WebCore::ReportingObserver> >*) 23 WTF::Vector<WTF::Ref<WebCore::ReportingObserver, WTF::RawPtrTraits<WebCore::ReportingObserver> >, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>::shrink(unsigned long) 23 WTF::Vector<WTF::Ref<WebCore::ReportingObserver, WTF::RawPtrTraits<WebCore::ReportingObserver> >, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>::shrinkCapacity(unsigned long) 23 WTF::Vector<WTF::Ref<WebCore::ReportingObserver, WTF::RawPtrTraits<WebCore::ReportingObserver> >, 0ul, WTF::CrashOnOverflow, 16ul, WTF::FastMalloc>::clear() 23 WebCore::ReportingScope::removeAllObservers() 23 WebCore::Document::removeAllEventListeners() ```
Attachments
Add attachment proposed patch, testcase, etc.
Chris Dumez
Comment 1 2023-08-10 13:28:43 PDT
<rdar://113533957>
Chris Dumez
Comment 2 2023-08-10 13:33:55 PDT
Pull request: https://github.com/WebKit/WebKit/pull/16578
EWS
Comment 3 2023-08-10 16:43:50 PDT
Committed 266791@main (a7dc74b15bbc): <https://commits.webkit.org/266791@main> Reviewed commits have been landed. Closing PR #16578 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.