[Webkit-unassigned] [Bug 154889] New: [GTK] Plugin process crash in WebKit::releaseNPObject

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=154889

            Bug ID: 154889
           Summary: [GTK] Plugin process crash in WebKit::releaseNPObject
    Classification: Unclassified
           Product: WebKit
           Version: Other
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit Gtk
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mcatanzaro at igalia.com
                CC: bugs-noreply at webkitgtk.org

Another crash with the GNOME Shell browser plugin, again version 3.18.3. Again, full backtrace is downstream.

Description of problem:
i've launched epiphany from gnome tweak tool's gnome's extensions' website link then browsed it for a while then closed tab and exited

Version-Release number of selected component:
webkitgtk4-2.10.4-1.fc23

Additional info:
reporter:       libreport-2.6.3
backtrace_rating: 4
cmdline:        /usr/libexec/webkit2gtk-4.0/WebKitPluginProcess 32 /usr/lib64/mozilla/plugins/libgnome-shell-browser-plugin.so
crash_function: WebKit::releaseNPObject
executable:     /usr/libexec/webkit2gtk-4.0/WebKitPluginProcess
global_pid:     9090
kernel:         4.2.6-301.fc23.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 WebKit::releaseNPObject at /usr/src/debug/webkitgtk-2.10.4/Source/WebKit2/WebProcess/Plugins/Netscape/NPRuntimeUtilities.cpp:124
 #1 NPP_Destroy at browser-plugin.c:1020
 #2 WebKit::NetscapePlugin::destroy at /usr/src/debug/webkitgtk-2.10.4/Source/WebKit2/WebProcess/Plugins/Netscape/NetscapePlugin.cpp:738
 #3 WebKit::Plugin::destroyPlugin at /usr/src/debug/webkitgtk-2.10.4/Source/WebKit2/WebProcess/Plugins/Plugin.cpp:101
 #4 WebKit::PluginControllerProxy::destroy at /usr/src/debug/webkitgtk-2.10.4/Source/WebKit2/PluginProcess/PluginControllerProxy.cpp:158
 #5 WebKit::WebProcessConnection::destroyPluginControllerProxy at /usr/src/debug/webkitgtk-2.10.4/Source/WebKit2/PluginProcess/WebProcessConnection.cpp:84
 #6 WebKit::WebProcessConnection::didClose at /usr/src/debug/webkitgtk-2.10.4/Source/WebKit2/PluginProcess/WebProcessConnection.cpp:177
 #7 std::function<void ()>::operator()() const at /usr/include/c++/5.1.1/functional:2271
 #8 WTF::RunLoop::performWork at /usr/src/debug/webkitgtk-2.10.4/Source/WTF/wtf/RunLoop.cpp:104
 #9 std::function<void ()>::operator()() const at /usr/include/c++/5.1.1/functional:2271

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160302/f0f44dfc/attachment.html>