DownloadDecideDestinationCrash.cpp 3.3 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182
  1. /*
  2. * Copyright (C) 2011 Apple Inc. All rights reserved.
  3. *
  4. * Redistribution and use in source and binary forms, with or without
  5. * modification, are permitted provided that the following conditions
  6. * are met:
  7. * 1. Redistributions of source code must retain the above copyright
  8. * notice, this list of conditions and the following disclaimer.
  9. * 2. Redistributions in binary form must reproduce the above copyright
  10. * notice, this list of conditions and the following disclaimer in the
  11. * documentation and/or other materials provided with the distribution.
  12. *
  13. * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
  14. * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
  15. * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  16. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
  17. * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  18. * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  19. * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  20. * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
  21. * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  22. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
  23. * THE POSSIBILITY OF SUCH DAMAGE.
  24. */
  25. #include "config.h"
  26. #include "PlatformUtilities.h"
  27. #include "PlatformWebView.h"
  28. #include <WebKit2/WKDownload.h>
  29. namespace TestWebKitAPI {
  30. static bool didDecideDestination;
  31. static void decidePolicyForNavigationAction(WKPageRef, WKFrameRef, WKFrameNavigationType, WKEventModifiers, WKEventMouseButton, WKURLRequestRef, WKFramePolicyListenerRef listener, WKTypeRef, const void*)
  32. {
  33. WKFramePolicyListenerDownload(listener);
  34. }
  35. static WKStringRef decideDestinationWithSuggestedFilename(WKContextRef, WKDownloadRef download, WKStringRef, bool*, const void*)
  36. {
  37. didDecideDestination = true;
  38. WKDownloadCancel(download);
  39. return Util::toWK("does not matter").leakRef();
  40. }
  41. static void setContextDownloadClient(WKContextRef context)
  42. {
  43. WKContextDownloadClient client;
  44. memset(&client, 0, sizeof(client));
  45. client.decideDestinationWithSuggestedFilename = decideDestinationWithSuggestedFilename;
  46. WKContextSetDownloadClient(context, &client);
  47. }
  48. static void setPagePolicyClient(WKPageRef page)
  49. {
  50. WKPagePolicyClient policyClient;
  51. memset(&policyClient, 0, sizeof(policyClient));
  52. policyClient.decidePolicyForNavigationAction = decidePolicyForNavigationAction;
  53. WKPageSetPagePolicyClient(page, &policyClient);
  54. }
  55. TEST(WebKit2, DownloadDecideDestinationCrash)
  56. {
  57. WKRetainPtr<WKContextRef> context = adoptWK(WKContextCreate());
  58. setContextDownloadClient(context.get());
  59. PlatformWebView webView(context.get());
  60. setPagePolicyClient(webView.page());
  61. // The length of this filename was specially chosen to trigger the crash conditions in
  62. // <http://webkit.org/b/61142>. Specifically, it causes ArgumentDecoder::m_bufferPos and m_bufferEnd
  63. // to be equal after the DecideDestinationWithSuggestedFilename message has been handled.
  64. WKPageLoadURL(webView.page(), adoptWK(Util::createURLForResource("18-characters", "html")).get());
  65. Util::run(&didDecideDestination);
  66. }
  67. } // namespace TestWebKitAPI