[Webkit-unassigned] [Bug 164926] New: [GTK] Memory corruption causes web process crash in WebCore::createStyleContext
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Fri Nov 18 09:10:50 PST 2016
https://bugs.webkit.org/show_bug.cgi?id=164926
Bug ID: 164926
Summary: [GTK] Memory corruption causes web process crash in
WebCore::createStyleContext
Classification: Unclassified
Product: WebKit
Version: WebKit Nightly Build
Hardware: PC
OS: Linux
Status: NEW
Severity: Normal
Priority: P2
Component: WebKit Gtk
Assignee: webkit-unassigned at lists.webkit.org
Reporter: mcatanzaro at igalia.com
CC: bugs-noreply at webkitgtk.org
Memory corruption causes web process crash in WebCore::createStyleContext. Only one report of this ever, with 2.12.4. Unfortunately I have no valgrind memcheck for this.
Truncated backtrace:
Thread no. 1 (10 frames)
#6 g_malloc at gmem.c:94
#7 g_data_set_internal at gdataset.c:464
#8 g_datalist_id_set_data_full at gdataset.c:670
#9 g_object_notify_queue_freeze at gobject.c:242
#10 g_object_init at gobject.c:975
#11 g_type_create_instance at gtype.c:1869
#12 g_object_new_internal at gobject.c:1781
#15 gtk_css_path_node_new at gtkcsspathnode.c:142
#16 gtk_style_context_init at gtkstylecontext.c:355
#17 g_type_create_instance at gtype.c:1875
Full backtrace downstream. Importantly:
#3 0x00007f904cc96c13 in malloc_printerr (ar_ptr=0x3, ptr=<optimized out>, str=0x7f904cda3250 "malloc(): smallbin double linked list corrupted", action=3) at malloc.c:5004
buf = "000056427ea9ba30"
cp = <optimized out>
ar_ptr = 0x3
ptr = <optimized out>
str = 0x7f904cda3250 "malloc(): smallbin double linked list corrupted"
action = 3
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20161118/e2c56f25/attachment-0001.html>
More information about the webkit-unassigned
mailing list