[Webkit-unassigned] [Bug 21837] New: critical error in Gtk FrameLoaderClient::frameLoaderDestroyed()

Thu Oct 23 13:22:13 PDT 2008

https://bugs.webkit.org/show_bug.cgi?id=21837

           Summary: critical error in Gtk
                    FrameLoaderClient::frameLoaderDestroyed()
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Mac OS X 10.5
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: WebKit Gtk
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: jonathon.jongsma at collabora.co.uk

We're unreffing the m_frame object but never taking a ref on it.  Backtrace for
the critical warning is as follows:

#0  0xb7f797f2 in _dl_sysinfo_int80 () from /lib/ld-linux.so.2
#1  0xb5731085 in raise () from /lib/tls/i686/cmov/libc.so.6
#2  0xb5732a01 in abort () from /lib/tls/i686/cmov/libc.so.6
#3  0xb58970ea in IA__g_logv (log_domain=0xb59414cb "GLib-GObject", 
    log_level=G_LOG_LEVEL_CRITICAL, 
    format=0xb58cc8e8 "%s: assertion `%s' failed", 
    args1=0xbfa60adc "*-\224µP
\224µ@¼ø·l÷\t\b0s\211µx¦\224µ\230£!\b(\v¦¿\032¸\221µË\024\224µ&-\224µP \224µ")
    at /build/buildd/glib2.0-2.16.6/glib/gmessages.c:497
#4  0xb5897129 in IA__g_log (log_domain=0xb59414cb "GLib-GObject", 
    log_level=G_LOG_LEVEL_CRITICAL, 
    format=0xb58cc8e8 "%s: assertion `%s' failed")
    at /build/buildd/glib2.0-2.16.6/glib/gmessages.c:517
#5  0xb589738b in IA__g_return_if_fail_warning (
    log_domain=0xb59414cb "GLib-GObject", 
    pretty_function=0xb5942d2a "g_object_unref", 
    expression=0xb5942050 "object->ref_count > 0")
    at /build/buildd/glib2.0-2.16.6/glib/gmessages.c:532
#6  0xb591b81a in IA__g_object_unref (_object=0x809f768)
    at /build/buildd/glib2.0-2.16.6/gobject/gobject.c:1742
#7  0xb63caf25 in WebKit::FrameLoaderClient::frameLoaderDestroyed (
    this=0x821a398) at WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:235
#8  0xb68dd4c8 in ~FrameLoader (this=0x821a724)
    at WebCore/loader/FrameLoader.cpp:282
#9  0xb699bbc0 in ~FramePrivate (this=0x821a700) at WebCore/page/Frame.cpp:1819
#10 0xb699c7a2 in ~Frame (this=0x821a420) at WebCore/page/Frame.cpp:176
#11 0xb63d343c in webkit_web_frame_finalize (object=0x809f768)
    at ./JavaScriptCore/wtf/RefCounted.h:96
#12 0xb591b8cb in IA__g_object_unref (_object=0x809f768)
    at /build/buildd/glib2.0-2.16.6/gobject/gobject.c:1793
#13 0xb63e0ec1 in webkit_web_view_finalize (object=0x808b150)
    at WebKit/gtk/webkit/webkitwebview.cpp:781
#14 0xb591b8cb in IA__g_object_unref (_object=0x808b150)
    at /build/buildd/glib2.0-2.16.6/gobject/gobject.c:1793
#15 0xb5c5231e in IA__gtk_object_destroy (object=0x808b150)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkobject.c:403
#16 0xb5b4e21f in gtk_bin_forall (container=0x806d710, include_internals=0, 
    callback=0x6, callback_data=0x0)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkbin.c:133
#17 0xb5c8e7b1 in gtk_scrolled_window_forall (container=0x806d710, 
    include_internals=0, callback=0xb5d58980 <IA__gtk_widget_destroy>, 
    callback_data=0x0)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkscrolledwindow.c:1021
#18 0xb5b938a7 in IA__gtk_container_foreach (container=0x806d710, 
    callback=0xb5d58980 <IA__gtk_widget_destroy>, callback_data=0x0)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkcontainer.c:1480
#19 0xb5b941d0 in gtk_container_destroy (object=0x806d710)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkcontainer.c:1020
#20 0xb5c91208 in gtk_scrolled_window_destroy (object=0x806d710)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkscrolledwindow.c:799
#21 0xb5926aef in IA__g_cclosure_marshal_VOID__VOID (closure=0x80713a8, 
    return_value=0x0, n_param_values=1, param_values=0xbfa61164, 
    invocation_hint=0xbfa6106c, marshal_data=0xb5c91160)
    at /build/buildd/glib2.0-2.16.6/gobject/gmarshal.c:77
#22 0xb5918069 in g_type_class_meta_marshal (closure=0x80713a8, 
    return_value=0x0, n_param_values=1, param_values=0xbfa61164, 
    invocation_hint=0xbfa6106c, marshal_data=0x4c)
    at /build/buildd/glib2.0-2.16.6/gobject/gclosure.c:567
#23 0xb591981f in IA__g_closure_invoke (closure=0x80713a8, return_value=0x0, 
    n_param_values=1, param_values=0xbfa61164, invocation_hint=0xbfa6106c)
    at /build/buildd/glib2.0-2.16.6/gobject/gclosure.c:490
#24 0xb592e4c5 in signal_emit_unlocked_R (node=0x80713f0, detail=0, 
    instance=0x806d710, emission_return=0x0, instance_and_params=0xbfa61164)
    at /build/buildd/glib2.0-2.16.6/gobject/gsignal.c:2556
#25 0xb592fc0f in IA__g_signal_emit_valist (instance=0x5908, signal_id=7, 
    detail=0, 
    var_args=0xbfa6139c
"\234\215åµ\234\215åµ\020×\006\bÈ\023¦¿!\207Õµ\020×\006\b\020×\006\b") at
/build/buildd/glib2.0-2.16.6/gobject/gsignal.c:2199
#26 0xb592ff59 in IA__g_signal_emit (instance=0x806d710, signal_id=7, detail=0)
    at /build/buildd/glib2.0-2.16.6/gobject/gsignal.c:2243
#27 0xb5c52611 in gtk_object_dispose (gobject=0x806d710)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkobject.c:418
#28 0xb5d58721 in gtk_widget_dispose (object=0x806d710)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkwidget.c:7854
#29 0xb591bd60 in IA__g_object_run_dispose (object=0x806d710)
    at /build/buildd/glib2.0-2.16.6/gobject/gobject.c:573
#30 0xb5c5231e in IA__gtk_object_destroy (object=0x806d710)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkobject.c:403
#31 0xb5b4e21f in gtk_bin_forall (container=0x808d378, include_internals=0, 
    callback=0x6, callback_data=0x0)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkbin.c:133
#32 0xb5b938a7 in IA__gtk_container_foreach (container=0x808d378, 
    callback=0xb5d58980 <IA__gtk_widget_destroy>, callback_data=0x0)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkcontainer.c:1480
#33 0xb5b941d0 in gtk_container_destroy (object=0x808d378)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkcontainer.c:1020
#34 0xb5d68c11 in gtk_window_destroy (object=0x808d378)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkwindow.c:4190
#35 0xb5926aef in IA__g_cclosure_marshal_VOID__VOID (closure=0x80713a8, 
    return_value=0x0, n_param_values=1, param_values=0xbfa617c4, 
    invocation_hint=0xbfa616cc, marshal_data=0xb5d68b90)
    at /build/buildd/glib2.0-2.16.6/gobject/gmarshal.c:77
#36 0xb5918069 in g_type_class_meta_marshal (closure=0x80713a8, 
    return_value=0x0, n_param_values=1, param_values=0xbfa617c4, 
    invocation_hint=0xbfa616cc, marshal_data=0x4c)
    at /build/buildd/glib2.0-2.16.6/gobject/gclosure.c:567
#37 0xb5919749 in IA__g_closure_invoke (closure=0x80713a8, return_value=0x0, 
    n_param_values=1, param_values=0xbfa617c4, invocation_hint=0xbfa616cc)
    at /build/buildd/glib2.0-2.16.6/gobject/gclosure.c:490
#38 0xb592e4c5 in signal_emit_unlocked_R (node=0x80713f0, detail=0, 
    instance=0x808d378, emission_return=0x0, instance_and_params=0xbfa617c4)
    at /build/buildd/glib2.0-2.16.6/gobject/gsignal.c:2556
#39 0xb592fc0f in IA__g_signal_emit_valist (instance=0x5908, signal_id=7, 
    detail=0, var_args=0xbfa619fc "º|Õµ\234\215åµxÓ\b\b(\032¦¿!\207ÕµxÓ\b\b")
    at /build/buildd/glib2.0-2.16.6/gobject/gsignal.c:2199
#40 0xb592ff59 in IA__g_signal_emit (instance=0x808d378, signal_id=7, detail=0)
    at /build/buildd/glib2.0-2.16.6/gobject/gsignal.c:2243
#41 0xb5c52611 in gtk_object_dispose (gobject=0x808d378)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkobject.c:418
#42 0xb5d58721 in gtk_widget_dispose (object=0x808d378)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkwidget.c:7854
#43 0xb5d658b6 in gtk_window_dispose (object=0x808d378)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkwindow.c:1969
#44 0xb591bd60 in IA__g_object_run_dispose (object=0x808d378)
    at /build/buildd/glib2.0-2.16.6/gobject/gobject.c:573
#45 0xb5c5231e in IA__gtk_object_destroy (object=0x808d378)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkobject.c:403
#46 0xb5c2bfc7 in IA__gtk_main_do_event (event=0x809a2f0)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkmain.c:1492
#47 0xb5aa3a9a in gdk_event_dispatch (source=0x806fd58, callback=0, 
    user_data=0x0) at /build/buildd/gtk+2.0-2.12.9/gdk/x11/gdkevents-x11.c:2351
#48 0xb588dcc6 in IA__g_main_context_dispatch (context=0x806fda0)
    at /build/buildd/glib2.0-2.16.6/glib/gmain.c:2012
#49 0xb5891083 in g_main_context_iterate (context=0x806fda0, block=1, 
    dispatch=1, self=0x807d838)
    at /build/buildd/glib2.0-2.16.6/glib/gmain.c:2645
#50 0xb5891467 in IA__g_main_loop_run (loop=0x8212e10)
    at /build/buildd/glib2.0-2.16.6/glib/gmain.c:2853
#51 0xb5c2c264 in IA__gtk_main ()
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkmain.c:1163
#52 0x08049cfd in main (argc=Cannot access memory at address 0x6
) at WebKitTools/GtkLauncher/main.c:227

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.