Bug 165984

Summary: [GTK] WebProcess from WebKitGtk+ 2.15.2 SIGSEGVs in WTF::RefCounted<WebCore::TimingFunction>::deref() const () at Source/WTF/wtf/RefCounted.h:145
Product: WebKit Reporter: Andres Gomez Garcia <agomez>
Component: WebKitGTKAssignee: Nobody <webkit-unassigned>
Status: NEW    
Severity: Normal CC: bugs-noreply
Priority: P2    
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
See Also: https://bugs.webkit.org/show_bug.cgi?id=165656
Attachments:
Description Flags
BT from gdb
none
BT from gdb for the UIProcess none

Andres Gomez Garcia
Reported 2016-12-16 19:07:54 PST
Created attachment 297382 [details] BT from gdb I'm using WebKitGtk+ with my own JHBuild setting: https://github.com/tanty/jhbuild-epiphany/tree/master Epiphany 3.20.3 and WebKit 2.15.2 with the attached patches for bug 164049, bug 165200, bug 165283 and bug 164052, applied. I'm running Epiphany with the dconf key: "process-model" = "shared-secondary-process" And the env variable: "export LIBGL_DRI3_DISABLE=1" The compilation was done with CMake args: '-DENABLE_THREADED_COMPOSITOR=OFF -DUSE_LD_GOLD=OFF -DPORT=GTK -DCMAKE_BUILD_TYPE=Release -DENABLE_MINIBROWSER=ON -DCMAKE_C_FLAGS_RELEASE="-O0 -g1 -DNDEBUG -DG_DEBUG=fatal-criticals -DG_DISABLE_CAST_CHECKS" -DCMAKE_CXX_FLAGS_RELEASE="-O0 -g1 -DNDEBUG -DG_DEBUG=fatal-criticals -DG_DISABLE_CAST_CHECKS"' After visiting several pages, eventually, the WebProcess hits a SIGSEV. This bug is not reproducible in a predictable way. The bug just happened after restoring a fullscreen youtube video to its original size inside a window.
Attachments
BT from gdb (228.15 KB, text/plain)
2016-12-16 19:07 PST, Andres Gomez Garcia 		no flags
Details
BT from gdb for the UIProcess (120.35 KB, text/plain)
2016-12-16 19:12 PST, Andres Gomez Garcia 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Andres Gomez Garcia
Comment 1 2016-12-16 19:12:05 PST
Created attachment 297383 [details] BT from gdb for the UIProcess At the same time, the UIProcess also SIGSEVed with: The program with pid 17971 received an X Window System error. [8/9357] The error was 'BadDamage (invalid Damage parameter)'. (Details: serial 1296483 error_code 151 request_code 143 minor_code 2) 1 0x7ffff211f6c5 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libjavascriptcoregtk-4.0.so.18(WTFCrash+0x1e) [0x7ffff211f6c5] 2 0x7ffff4c31d9e /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x21ced9e) [0x7ffff4c31d9e] 3 0x7ffff4c31a92 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x21cea92) [0x7ffff4c31a92] 4 0x7ffff4c31abe /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x21ceabe) [0x7ffff4c31abe] 5 0x7ffff75d746d /usr/lib/x86_64-linux-gnu/libX11.so.6(_XError+0x11d) [0x7ffff75d746d] 6 0x7ffff75d43a7 /usr/lib/x86_64-linux-gnu/libX11.so.6(+0x423a7) [0x7ffff75d43a7] 7 0x7ffff75d4465 /usr/lib/x86_64-linux-gnu/libX11.so.6(+0x42465) [0x7ffff75d4465] 8 0x7ffff75d5420 /usr/lib/x86_64-linux-gnu/libX11.so.6(_XReply+0x230) [0x7ffff75d5420] 9 0x7ffff75d0cad /usr/lib/x86_64-linux-gnu/libX11.so.6(XSync+0x4d) [0x7ffff75d0cad] 10 0x7ffff3528545 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0xac5545) [0x7ffff3528545] 11 0x7ffff34f4b5f /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0xa91b5f) [0x7ffff34f4b5f] 12 0x7ffff349c56c /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0xa3956c) [0x7ffff349c56c] 13 0x7ffff31578c5 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x6f48c5) [0x7ffff31578c5] 14 0x7ffff349253f /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0xa2f53f) [0x7ffff349253f] 15 0x7ffff3491d72 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0xa2ed72) [0x7ffff3491d72] 16 0x7ffff349482c /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0xa3182c) [0x7ffff349482c] 17 0x7ffff3494848 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0xa31848) [0x7ffff3494848] 18 0x7ffff317adb6 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x717db6) [0x7ffff317adb6] 19 0x7ffff317c639 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x719639) [0x7ffff317c639] 20 0x7ffff31762b5 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x7132b5) [0x7ffff31762b5] 21 0x7ffff3156d80 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x6f3d80) [0x7ffff3156d80] 22 0x7ffff3157217 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x6f4217) [0x7ffff3157217] 23 0x7ffff3156c6a /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x6f3c6a) [0x7ffff3156c6a] 24 0x7ffff31b72bd /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x7542bd) [0x7ffff31b72bd] 25 0x7ffff30518e8 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x5ee8e8) [0x7ffff30518e8] 26 0x7ffff3058a40 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x5f5a40) [0x7ffff3058a40] 27 0x7ffff2129987 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libjavascriptcoregtk-4.0.so.18(_ZNK3WTF8FunctionIFvvEEclEv+0x37) [0x7ff$ f2129987] 28 0x7ffff213a796 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libjavascriptcoregtk-4.0.so.18(_ZN3WTF7RunLoop11performWorkEv+0xce) [0x7 ffff213a796] 29 0x7ffff217ae5e /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libjavascriptcoregtk-4.0.so.18(+0x2488e5e) [0x7ffff217ae5e] 30 0x7ffff217ae82 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libjavascriptcoregtk-4.0.so.18(+0x2488e82) [0x7ffff217ae82] 31 0x7ffff217adfe /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libjavascriptcoregtk-4.0.so.18(+0x2488dfe) [0x7ffff217adfe] Thread 1 "epiphany" received signal SIGSEGV, Segmentation fault. 0x00007ffff211f6ca in WTFCrash () at /home/tanty/no-backup/personal/webkit/epiphany/jhbuild-checkout/webkitgtk-2.15.2/Source/WTF/wtf/Assertions.cpp:323 323 *(int *)(uintptr_t)0xbbadbeef = 0;
Andres Gomez Garcia
Comment 2 2016-12-16 19:13:31 PST
Notice that I had also applied the patch suggested at: https://bugs.webkit.org/show_bug.cgi?id=165656#c18 Therefore, this may be a DUPLICATED of bug 165656
Note You need to log in before you can comment on or make changes to this bug.