[Webkit-unassigned] [Bug 55078] New: [GTK] Double free error when double-clicking on webpage

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=55078

           Summary: [GTK] Double free error when double-clicking on
                    webpage
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: WebKit Gtk
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: plaes at plaes.org


Webkit-gtk-1.1.12
Epiphany-2.91.90
Gtk+-3.0.1

64-bit machine

When double-clicking on a web page background or text, epiphany crashes with double free error:

[snip]
raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
abort () at abort.c:92
__libc_message (do_abort=2, fmt=0x7ffff1f09008 "*** glibc detected *** %s: %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:186
malloc_printerr (action=3, str=0x7ffff1f06231 "invalid fastbin entry (free)", ptr=<value optimized out>) at malloc.c:6283
__libc_free (mem=<value optimized out>) at malloc.c:3738
g_bsearch_array_free (type=<value optimized out>) at ../glib/gbsearcharray.h:298
instance_real_class_remove (type=<value optimized out>) at gtype.c:1803
g_type_create_instance (type=<value optimized out>) at gtype.c:1885
g_object_constructor (type=<value optimized out>, n_construct_properties=0, construct_params=0x0) at gobject.c:1615
g_object_newv (object_type=7976688, n_parameters=0, parameters=0x0) at gobject.c:1398
g_object_new (object_type=7976688, first_property_name=0x0) at gobject.c:1308
WebCore::getStyleContext (widgetType=8577808) at Source/WebCore/platform/gtk/RenderThemeGtk3.cpp:86
WebCore::RenderThemeGtk::platformActiveSelectionBackgroundColor (this=<value optimized out>) at Source/WebCore/platform/gtk/RenderThemeGtk3.cpp:861
WebCore::RenderTheme::activeSelectionBackgroundColor (this=0x7fffe5bc5d98) at Source/WebCore/rendering/RenderTheme.cpp:554
[/snip]

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.