[Webkit-unassigned] [Bug 98099] New: [Gtk] crash when accelerated composition is turned off

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=98099

           Summary: [Gtk] crash when accelerated composition is turned off
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit Gtk
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: arno at renevier.net


Hi,
when a accelerated composition is turned off on a page (for example, because no element require compositing anymore), WebKitGTK often crashes in

#0  0xb68f063f in WebKit::AcceleratedCompositingContext::flushPendingLayerChanges() () from /home/arno/webkit/WebKit.upstream/WebKitBuild/Release/.libs/libwebkitgtk-3.0.so.0
#1  0xb68f06f5 in WebKit::AcceleratedCompositingContext::flushAndRenderLayers() () from /home/arno/webkit/WebKit.upstream/WebKitBuild/Release/.libs/libwebkitgtk-3.0.so.0
#2  0xb68f07e0 in WebKit::AcceleratedCompositingContext::layerFlushTimerFired() () from /home/arno/webkit/WebKit.upstream/WebKitBuild/Release/.libs/libwebkitgtk-3.0.so.0
#3  0xb68f0801 in WebKit::AcceleratedCompositingContext::layerFlushTimerFiredCallback(WebKit::AcceleratedCompositingContext*) ()

flushPendingLayerChanges is reached while m_rootLayer has been cleared, and this results in a crash.

This happens because frame->view()->updateLayoutAndStyleIfNeededRecursive() is called in flushAndRenderLayers, and this may result in root compositing layer being set to null.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.