[Webkit-unassigned] [Bug 95618] New: [Stable] [GTK] Crash in WebCore::HTMLSelectElement::selectedIndex

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=95618

           Summary: [Stable] [GTK] Crash in
                    WebCore::HTMLSelectElement::selectedIndex
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Critical
          Priority: P2
         Component: WebKit Gtk
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: mrobinson at webkit.org
                CC: msanchez at igalia.com, cgarcia at igalia.com


Just saw this crash with the stable branch (1.9.90). Marking critical since this is a crash in the stable series. I caused this to happen by clicking on my inbox in Yahoo mail.


#0  0x00007ffff629e8f8 in WebCore::HTMLSelectElement::selectedIndex() const ()
   from /home/martin/work/gnome-shell/install/lib/libwebkitgtk-3.0.so.0
#1  0x00007ffff629ea25 in WebCore::HTMLSelectElement::activeSelectionStartListIndex() const ()
   from /home/martin/work/gnome-shell/install/lib/libwebkitgtk-3.0.so.0
#2  0x00007ffff6e5293d in WebCore::AXObjectCache::postPlatformNotification(WebCore::AccessibilityObject*, WebCore::AXObjectCache::AXNotification) () from /home/martin/work/gnome-shell/install/lib/libwebkitgtk-3.0.so.0
#3  0x00007ffff5f1e47c in WebCore::AXObjectCache::notificationPostTimerFired(WebCore::Timer<WebCore::AXObjectCache>*)
    () from /home/martin/work/gnome-shell/install/lib/libwebkitgtk-3.0.so.0
#4  0x00007ffff65e4742 in WebCore::ThreadTimers::sharedTimerFiredInternal() ()
   from /home/martin/work/gnome-shell/install/lib/libwebkitgtk-3.0.so.0
#5  0x00007ffff6e8b842 in WebCore::timeout_cb(void*) ()
   from /home/martin/work/gnome-shell/install/lib/libwebkitgtk-3.0.so.0
#6  0x00007ffff3cbefab in g_timeout_dispatch (source=<optimized out>, callback=<optimized out>, 
    user_data=<optimized out>) at gmain.c:4026
#7  0x00007ffff3cbe3e3 in g_main_dispatch (context=0x6f6d50) at gmain.c:2715
#8  g_main_context_dispatch (context=0x6f6d50) at gmain.c:3219
#9  0x00007ffff3cbe730 in g_main_context_iterate (dispatch=1, block=<optimized out>, context=0x6f6d50, 
    self=<optimized out>) at gmain.c:3290
#10 g_main_context_iterate (context=0x6f6d50, block=<optimized out>, dispatch=1, self=<optimized out>) at gmain.c:3227
#11 0x00007ffff3cbe7f4 in g_main_context_iteration (context=0x6f6d50, may_block=1) at gmain.c:3351
#12 0x00007ffff42888b4 in g_application_run (application=0x7fa070, argc=<optimized out>, argv=0x7fffffffd888)
    at gapplication.c:1607
#13 0x000000000042dd85 in main (argc=1, argv=0x7fffffffd888) at ephy-main.c:493

Adding Mario to the CC since the stack intersects with the accessibility code.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.