[Webkit-unassigned] [Bug 161605] [GTK] Crash of WebProcess on the last WebView disconnect

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=161605

--- Comment #1 from Milan Crha <mcrha at redhat.com> ---
valgrind output (without detailed debuginfo, because of having issues with it):

==16976== Thread 1:
==16976== Invalid read of size 8
==16976==    at 0x66581C7: WebCore::PlatformDisplay::~PlatformDisplay() (in /build/local/lib/libwebkit2gtk-4.0.so.37.14.4)
==16976==    by 0x6575F68: WebCore::PlatformDisplayX11::~PlatformDisplayX11() (in /build/local/lib/libwebkit2gtk-4.0.so.37.14.4)
==16976==    by 0x764FC07: __run_exit_handlers (in /usr/lib64/libc-2.23.so)
==16976==    by 0x764FC54: exit (in /usr/lib64/libc-2.23.so)
==16976==    by 0x7635727: (below main) (in /usr/lib64/libc-2.23.so)
==16976==  Address 0x31788f70 is 0 bytes inside a block of size 64 free'd
==16976==    at 0x4C2CD5A: free (vg_replace_malloc.c:530)
==16976==    by 0x65539C5: WebCore::GLContext::cleanupActiveContextsAtExit() (in /build/local/lib/libwebkit2gtk-4.0.so.37.14.4)
==16976==    by 0x764FC07: __run_exit_handlers (in /usr/lib64/libc-2.23.so)
==16976==    by 0x764FC54: exit (in /usr/lib64/libc-2.23.so)
==16976==    by 0x7635727: (below main) (in /usr/lib64/libc-2.23.so)
==16976==  Block was alloc'd at
==16976==    at 0x4C2BBAD: malloc (vg_replace_malloc.c:299)
==16976==    by 0xA8EB868: WTF::fastMalloc(unsigned long) (in /build/local/lib/libjavascriptcoregtk-4.0.so.18.4.4)
==16976==    by 0x6563F1D: WebCore::GLContextGLX::createPbufferContext(WebCore::PlatformDisplay&, __GLXcontextRec*) (in /build/local/lib/libwebkit2gtk-4.0.so.37.14.4)
==16976==    by 0x6564272: WebCore::GLContextGLX::createSharingContext(WebCore::PlatformDisplay&) (in /build/local/lib/libwebkit2gtk-4.0.so.37.14.4)
==16976==    by 0x6553ED6: WebCore::GLContext::createSharingContext(WebCore::PlatformDisplay&) (in /build/local/lib/libwebkit2gtk-4.0.so.37.14.4)
==16976==    by 0x6658222: WebCore::PlatformDisplay::sharingGLContext() (in /build/local/lib/libwebkit2gtk-4.0.so.37.14.4)
==16976==    by 0x656418D: WebCore::GLContextGLX::createContext(unsigned long, WebCore::PlatformDisplay&) (in /build/local/lib/libwebkit2gtk-4.0.so.37.14.4)
==16976==    by 0x6553D6F: WebCore::GLContext::createContextForWindow(unsigned long, WebCore::PlatformDisplay*) (in /build/local/lib/libwebkit2gtk-4.0.so.37.14.4)
==16976==    by 0x562DBD5: WebKit::ThreadedCompositor::makeContextCurrent() (in /build/local/lib/libwebkit2gtk-4.0.so.37.14.4)
==16976==    by 0x562DCD4: WebKit::ThreadedCompositor::renderLayerTree() (in /build/local/lib/libwebkit2gtk-4.0.so.37.14.4)
==16976==    by 0x562AB44: WebKit::CompositingRunLoop::updateTimerFired() (in /build/local/lib/libwebkit2gtk-4.0.so.37.14.4)
==16976==    by 0xA92C78C: WTF::RunLoop::TimerBase::TimerBase(WTF::RunLoop&)::{lambda(void*)#1}::_FUN(void*) (in /build/local/lib/libjavascriptcoregtk-4.0.so.18.4.4)
==16976== 
==16976== Jump to the invalid address stated on the next line
==16976==    at 0x0: ???
==16976==    by 0x6575F68: WebCore::PlatformDisplayX11::~PlatformDisplayX11() (in /build/local/lib/libwebkit2gtk-4.0.so.37.14.4)
==16976==    by 0x764FC07: __run_exit_handlers (in /usr/lib64/libc-2.23.so)
==16976==    by 0x764FC54: exit (in /usr/lib64/libc-2.23.so)
==16976==    by 0x7635727: (below main) (in /usr/lib64/libc-2.23.so)
==16976==  Address 0x0 is not stack'd, malloc'd or (recently) free'd

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160906/d4b8be7f/attachment.html>