Closed
Bug 1122553
Opened 9 years ago
Closed 9 years ago
BroadcastChannel crashes when a blob is sent to the same page.
Categories
(Core :: DOM: Core & HTML, defect)
Tracking
()
RESOLVED
FIXED
mozilla38
People
(Reporter: baku, Assigned: baku)
Details
Attachments
(1 file, 2 obsolete files)
4.75 KB,
patch
|
Details | Diff | Splinter Review |
The issue is that, when a blob actor is created by the same Manager who owns it, we have a crash. This patch fixes the issue for the BroadcastChannel API, but maybe we want a more generic solution.
Attachment #8550297 -
Flags: review?(bent.mozilla)
Assignee | ||
Comment 1•9 years ago
|
||
Attachment #8550297 -
Attachment is obsolete: true
Attachment #8550297 -
Flags: review?(bent.mozilla)
Attachment #8550549 -
Flags: review?(bent.mozilla)
Comment on attachment 8550549 [details] [diff] [review] crash.patch Review of attachment 8550549 [details] [diff] [review]: ----------------------------------------------------------------- ::: dom/broadcastchannel/BroadcastChannelParent.cpp @@ +81,5 @@ > { > AssertIsOnBackgroundThread(); > > if (aOrigin == mOrigin && aChannel == mChannel) { > // We need to duplicate data only if we have blobs. You should update this comment to explain why you're doing the extra stuff ::: dom/broadcastchannel/BroadcastChannelService.cpp @@ +131,5 @@ > AssertIsOnBackgroundThread(); > MOZ_ASSERT(aParent); > MOZ_ASSERT(mAgents.Contains(aParent)); > > + nsAutoTArray<nsRefPtr<FileImpl>, 1> files; You could probably get away with 10 :) And comment why you're doing this. You could also move this to the PostMessageData struct... @@ +138,5 @@ > + > + for (uint32_t i = 0, len = aData.blobsParent().Length(); i < len; ++i) { > + nsRefPtr<FileImpl> impl = > + static_cast<BlobParent*>(aData.blobsParent()[i])->GetBlobImpl(); > + files.AppendElement(impl); MOZ_ASSERT(impl)
Attachment #8550549 -
Flags: review?(bent.mozilla) → review+
Assignee | ||
Comment 3•9 years ago
|
||
https://treeherder.mozilla.org/#/jobs?repo=try&revision=9f193083a5f3
Attachment #8550549 -
Attachment is obsolete: true
Assignee | ||
Updated•9 years ago
|
Keywords: checkin-needed
Assignee | ||
Comment 4•9 years ago
|
||
https://hg.mozilla.org/integration/mozilla-inbound/rev/55a6b53cd045
Keywords: checkin-needed
Comment 5•9 years ago
|
||
https://hg.mozilla.org/mozilla-central/rev/55a6b53cd045
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla38
Updated•5 years ago
|
Component: DOM → DOM: Core & HTML
You need to log in
before you can comment on or make changes to this bug.
Description
•