[Webkit-unassigned] [Bug 174161] [GTK] Crashes in WebCore::PasteboardHelper::fillSelectionData when source file of drag is unavailable

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Aug 8 02:47:25 PDT 2017


https://bugs.webkit.org/show_bug.cgi?id=174161

Xabier Rodríguez Calvar <calvaris at igalia.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|FIXED                       |---

--- Comment #10 from Xabier Rodríguez Calvar <calvaris at igalia.com> ---
I just confirmed that I am running a version of webkit with this patch included and it still crashes with:

#0  0x00007f219965d43c in WTFCrash () from /home/calvaris/gnome/jhbuild/build/install/lib/libjavascriptcoregtk-4.0.so.18
No symbol table info available.
#1  0x00007f219b1efe24 in WebCore::PasteboardHelper::fillSelectionData(_GtkSelectionData*, unsigned int, WebCore::SelectionData&) () from /home/calvaris/gnome/jhbuild/build/install/lib/libwebkit2gtk-4.0.so.37
No symbol table info available.
#2  0x00007f219a14a598 in WebKit::DragAndDropHandler::dropDataSelection(_GdkDragContext*, _GtkSelectionData*, unsigned int, WebCore::IntPoint&) ()
   from /home/calvaris/gnome/jhbuild/build/install/lib/libwebkit2gtk-4.0.so.37
No symbol table info available.
#3  0x00007f219a14a604 in WebKit::DragAndDropHandler::dragEntered(_GdkDragContext*, _GtkSelectionData*, unsigned int, unsigned int) () from /home/calvaris/gnome/jhbuild/build/install/lib/libwebkit2gtk-4.0.so.37
No symbol table info available.
#4  0x00007f219e165714 in _gtk_marshal_VOID__OBJECT_INT_INT_BOXED_UINT_UINT (closure=0x55dc8e310e40, return_value=<optimized out>, n_param_values=<optimized out>, param_values=0x7fff48e5c3c0, 
    invocation_hint=<optimized out>, marshal_data=<optimized out>) at gtkmarshalers.c:5566
        cc = 0x55dc8e310e40
        data1 = 0x55dc8fc4ae20
        data2 = <optimized out>
        callback = 0x7f219a132b30 <webkitWebViewBaseDragDataReceived(_GtkWidget*, _GdkDragContext*, int, int, _GtkSelectionData*, unsigned int, unsigned int)>
        __func__ = "_gtk_marshal_VOID__OBJECT_INT_INT_BOXED_UINT_UINT"
#5  0x00007f219eb56755 in g_closure_invoke (closure=closure at entry=0x55dc8e310e40, return_value=return_value at entry=0x0, n_param_values=7, param_values=param_values at entry=0x7fff48e5c3c0, 
    invocation_hint=invocation_hint at entry=0x7fff48e5c360) at /home/calvaris/gnome/jhbuild/build/src/glib/gobject/gclosure.c:804
        marshal = <optimized out>
        marshal_data = <optimized out>
        in_marshal = 0
        real_closure = 0x55dc8e310e20
        __func__ = "g_closure_invoke"
#6  0x00007f219eb6952d in signal_emit_unlocked_R (node=node at entry=0x55dc8e310ed0, detail=detail at entry=0, instance=instance at entry=0x55dc8fc4ae20, emission_return=emission_return at entry=0x0, 
    instance_and_params=instance_and_params at entry=0x7fff48e5c3c0) at /home/calvaris/gnome/jhbuild/build/src/glib/gobject/gsignal.c:3673
        accumulator = 0x0
        emission = {next = 0x7fff48e5c8d0, instance = 0x55dc8fc4ae20, ihint = {signal_id = 93, detail = 0, run_type = G_SIGNAL_RUN_LAST}, state = EMISSION_RUN, chain_type = 94405767569696}
        handler_list = <optimized out>
        return_accu = 0x0
        accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, 
              v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        signal_id = 93
        max_sequential_handler_number = 29513
        return_value_altered = 0
#7  0x00007f219eb71f91 in g_signal_emit_valist (instance=instance at entry=0x55dc8fc4ae20, signal_id=signal_id at entry=93, detail=detail at entry=0, var_args=var_args at entry=0x7fff48e5c610)
    at /home/calvaris/gnome/jhbuild/build/src/glib/gobject/gsignal.c:3391
        instance_and_params = 0x7fff48e5c3c0
        signal_return_type = <optimized out>
        param_values = 0x7fff48e5c3d8
        i = <optimized out>
        n_params = <optimized out>
        __func__ = "g_signal_emit_valist"
#8  0x00007f219eb72808 in g_signal_emit_by_name (instance=instance at entry=0x55dc8fc4ae20, detailed_signal=detailed_signal at entry=0x7f219e2f47f0 "drag-data-received")
    at /home/calvaris/gnome/jhbuild/build/src/glib/gobject/gsignal.c:3487
        var_args = {{gp_offset = 48, fp_offset = 48, overflow_arg_area = 0x7fff48e5c730, reg_save_area = 0x7fff48e5c630}}
        detail = 0
        itype = 94405767569696
        __func__ = "g_signal_emit_by_name"
#9  0x00007f219e2cd8dd in gtk_drag_selection_received (widget=0x55dc8e5b7f50, selection_data=0x7fff48e5cc40, time=7055131, data=0x55dc8fc4ae20) at /home/calvaris/gnome/jhbuild/build/src/gtk+-3/gtk/gtkdnd.c:1181
        site = <optimized out>
        context = 0x55dc8e5f6cc0
---Type <return> to continue, or q <return> to quit---
        info = 0x7f208c02ae00
        drop_widget = 0x55dc8fc4ae20
        target = 0x84
#10 0x00007f219eb56755 in g_closure_invoke (closure=0x55dc90457770, return_value=return_value at entry=0x0, n_param_values=3, param_values=param_values at entry=0x7fff48e5c940, 
    invocation_hint=invocation_hint at entry=0x7fff48e5c8e0) at /home/calvaris/gnome/jhbuild/build/src/glib/gobject/gclosure.c:804
        marshal = <optimized out>
        marshal_data = <optimized out>
        in_marshal = 0
        real_closure = 0x55dc90457750
        __func__ = "g_closure_invoke"
#11 0x00007f219eb69132 in signal_emit_unlocked_R (node=node at entry=0x55dc8e30c190, detail=detail at entry=0, instance=instance at entry=0x55dc8e5b7f50, emission_return=emission_return at entry=0x0, 
    instance_and_params=instance_and_params at entry=0x7fff48e5c940) at /home/calvaris/gnome/jhbuild/build/src/glib/gobject/gsignal.c:3635
        tmp = <optimized out>
        handler = 0x55dc902a3180
        accumulator = 0x0
        emission = {next = 0x7fff48e5d010, instance = 0x55dc8e5b7f50, ihint = {signal_id = 81, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 4}
        handler_list = 0x55dc902a3180
        return_accu = 0x0
        accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, 
              v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        signal_id = 81
        max_sequential_handler_number = 29513
        return_value_altered = 0
#12 0x00007f219eb71f91 in g_signal_emit_valist (instance=instance at entry=0x55dc8e5b7f50, signal_id=signal_id at entry=81, detail=detail at entry=0, var_args=var_args at entry=0x7fff48e5cb30)
    at /home/calvaris/gnome/jhbuild/build/src/glib/gobject/gsignal.c:3391
        instance_and_params = 0x7fff48e5c940
        signal_return_type = <optimized out>
        param_values = 0x7fff48e5c958
        i = <optimized out>
        n_params = <optimized out>
        __func__ = "g_signal_emit_valist"
#13 0x00007f219eb72808 in g_signal_emit_by_name (instance=0x55dc8e5b7f50, detailed_signal=detailed_signal at entry=0x7f219e351e24 "selection-received")
    at /home/calvaris/gnome/jhbuild/build/src/glib/gobject/gsignal.c:3487
        var_args = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fff48e5cc40, reg_save_area = 0x7fff48e5cb50}}
        detail = 0
        itype = 94405766740384
        __func__ = "g_signal_emit_by_name"
#14 0x00007f219e1e77d3 in gtk_selection_retrieval_report (info=info at entry=0x7f208c00c380, type=<optimized out>, format=<optimized out>, buffer=<optimized out>, length=<optimized out>, time=time at entry=7055131)
    at /home/calvaris/gnome/jhbuild/build/src/gtk+-3/gtk/gtkselection.c:3031
        data = {selection = 0xbe, target = 0x84, type = 0x0, format = 0, data = 0x0, length = -1, display = 0x55dc8e2e30e0}
#15 0x00007f219e1e9461 in gtk_selection_convert (widget=0x55dc8e5b7f50, selection=0xbe, target=0x84, time_=7055131) at /home/calvaris/gnome/jhbuild/build/src/gtk+-3/gtk/gtkselection.c:1143
        owner_widget = <optimized out>
        owner_widget_ptr = 0x55dc8e5b7770
        selection_data = {selection = 0xbe, target = 0x84, type = 0x0, format = 0, data = 0x0, length = -1, display = 0x55dc8e2e30e0}
        info = 0x7f208c00c380
        tmp_list = <optimized out>
        owner_window = <optimized out>
        display = 0x55dc8e2e30e0
        id = <optimized out>
        __func__ = "gtk_selection_convert"
#16 0x00007f219a14b15a in WebKit::DragAndDropHandler::dragDataSelection(_GdkDragContext*, WebCore::IntPoint const&, unsigned int) () from /home/calvaris/gnome/jhbuild/build/install/lib/libwebkit2gtk-4.0.so.37
---Type <return> to continue, or q <return> to quit---
No symbol table info available.
#17 0x00007f219a14b41f in WebKit::DragAndDropHandler::dragMotion(_GdkDragContext*, WebCore::IntPoint const&, unsigned int) () from /home/calvaris/gnome/jhbuild/build/install/lib/libwebkit2gtk-4.0.so.37
No symbol table info available.
#18 0x00007f219a132bc3 in webkitWebViewBaseDragMotion(_GtkWidget*, _GdkDragContext*, int, int, unsigned int) () from /home/calvaris/gnome/jhbuild/build/install/lib/libwebkit2gtk-4.0.so.37
No symbol table info available.
#19 0x00007f219e160327 in _gtk_marshal_BOOLEAN__OBJECT_INT_INT_UINT (closure=0x55dc8e310580, return_value=0x7fff48e5cfd0, n_param_values=<optimized out>, param_values=0x7fff48e5d080, 
    invocation_hint=<optimized out>, marshal_data=<optimized out>) at gtkmarshalers.c:809
        cc = 0x55dc8e310580
        data1 = 0x55dc8fc4ae20
        data2 = <optimized out>
        callback = 0x7f219a132b80 <webkitWebViewBaseDragMotion(_GtkWidget*, _GdkDragContext*, int, int, unsigned int)>
        v_return = <optimized out>
        __func__ = "_gtk_marshal_BOOLEAN__OBJECT_INT_INT_UINT"
#20 0x00007f219eb56755 in g_closure_invoke (closure=closure at entry=0x55dc8e310580, return_value=return_value at entry=0x7fff48e5cfd0, n_param_values=5, param_values=param_values at entry=0x7fff48e5d080, 
    invocation_hint=invocation_hint at entry=0x7fff48e5d020) at /home/calvaris/gnome/jhbuild/build/src/glib/gobject/gclosure.c:804
        marshal = <optimized out>
        marshal_data = <optimized out>
        in_marshal = 0
        real_closure = 0x55dc8e310560
        __func__ = "g_closure_invoke"
#21 0x00007f219eb6952d in signal_emit_unlocked_R (node=<optimized out>, detail=detail at entry=0, instance=instance at entry=0x55dc8fc4ae20, emission_return=emission_return at entry=0x7fff48e5d1b0, 
    instance_and_params=instance_and_params at entry=0x7fff48e5d080) at /home/calvaris/gnome/jhbuild/build/src/glib/gobject/gsignal.c:3673
        accumulator = 0x55dc8e310990
        emission = {next = 0x0, instance = 0x55dc8fc4ae20, ihint = {signal_id = 90, detail = 0, run_type = G_SIGNAL_RUN_LAST}, state = EMISSION_RUN, chain_type = 94405767569696}
        handler_list = <optimized out>
        return_accu = 0x7fff48e5cfd0
        accu = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, 
              v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        signal_id = 90
        max_sequential_handler_number = 29485
        return_value_altered = 0
#22 0x00007f219eb71a18 in g_signal_emit_valist (instance=instance at entry=0x55dc8fc4ae20, signal_id=signal_id at entry=90, detail=detail at entry=0, var_args=var_args at entry=0x7fff48e5d2a0)
    at /home/calvaris/gnome/jhbuild/build/src/glib/gobject/gsignal.c:3401
        return_value = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, 
              v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        error = 0x0
        rtype = 20
        static_scope = 0
        instance_and_params = 0x7fff48e5d080
        signal_return_type = <optimized out>
        param_values = 0x7fff48e5d098
        i = <optimized out>
        n_params = <optimized out>
        __func__ = "g_signal_emit_valist"
#23 0x00007f219eb72808 in g_signal_emit_by_name (instance=instance at entry=0x55dc8fc4ae20, detailed_signal=detailed_signal at entry=0x7f219e324029 "drag-motion")
    at /home/calvaris/gnome/jhbuild/build/src/glib/gobject/gsignal.c:3487
        var_args = {{gp_offset = 48, fp_offset = 48, overflow_arg_area = 0x7fff48e5d3b0, reg_save_area = 0x7fff48e5d2c0}}
        detail = 0
        itype = 94405767569696
        __func__ = "g_signal_emit_by_name"
#24 0x00007f219e2ce624 in gtk_drag_dest_motion (widget=0x55dc8fc4ae20, context=0x55dc8e5f6cc0, x=469, y=794, time=7055131) at /home/calvaris/gnome/jhbuild/build/src/gtk+-3/gtk/gtkdnd.c:1564
---Type <return> to continue, or q <return> to quit---
        site = 0x55dc8fcc44d0
        action = <optimized out>
        retval = -1640498656
        __func__ = "gtk_drag_dest_motion"
#25 0x00007f219e2cecd0 in gtk_drag_find_widget (callback=0x7f219e2ce500 <gtk_drag_dest_motion>, time=7055131, y=<optimized out>, x=<optimized out>, info=0x7f208c02ae00, context=0x55dc8e5f6cc0, 
    widget=0x55dc8fc4ae20) at /home/calvaris/gnome/jhbuild/build/src/gtk+-3/gtk/gtkdnd.c:1262
        parent = 0x0
        hierarchy = 0x55dc8e469b00
        found = 0
#26 _gtk_drag_dest_handle_event (toplevel=toplevel at entry=0x55dc8e5143a0, event=event at entry=0x55dc8e7255b0) at /home/calvaris/gnome/jhbuild/build/src/gtk+-3/gtk/gtkdnd.c:1083
        window = <optimized out>
        tx = 0
        ty = 27
        info = 0x7f208c02ae00
        context = 0x55dc8e5f6cc0
        __func__ = "_gtk_drag_dest_handle_event"
#27 0x00007f219e15e51c in gtk_main_do_event (event=0x55dc8e7255b0) at /home/calvaris/gnome/jhbuild/build/src/gtk+-3/gtk/gtkmain.c:1919
        event_widget = 0x55dc8e5143a0
        grab_widget = 0x55dc8e5143a0
        topmost_widget = <optimized out>
        window_group = 0x55dc8e3818e0
        rewritten_event = <optimized out>
        device = 0x55dc8e2fb000
        tmp_list = <optimized out>
        __func__ = "gtk_main_do_event"
#28 0x00007f219d0f23b5 in _gdk_event_emit (event=event at entry=0x55dc8e7255b0) at /home/calvaris/gnome/jhbuild/build/src/gtk+-3/gdk/gdkevents.c:73
No locals.
#29 0x00007f219d1224c2 in gdk_event_source_dispatch (source=<optimized out>, callback=<optimized out>, user_data=<optimized out>) at /home/calvaris/gnome/jhbuild/build/src/gtk+-3/gdk/x11/gdkeventsource.c:367
        display = <optimized out>
        event = 0x55dc8e7255b0
#30 0x00007f219e87c797 in g_main_dispatch (context=0x55dc8e300ef0) at /home/calvaris/gnome/jhbuild/build/src/glib/glib/gmain.c:3148
        dispatch = 0x7f219d1224a0 <gdk_event_source_dispatch>
        prev_source = 0x0
        was_in_call = 0
        user_data = 0x0
        callback = 0x0
        cb_funcs = <optimized out>
        cb_data = <optimized out>
        need_destroy = <optimized out>
        source = 0x55dc8e2fa000
        current = 0x55dc8e3e4e80
        i = 0
#31 g_main_context_dispatch (context=context at entry=0x55dc8e300ef0) at /home/calvaris/gnome/jhbuild/build/src/glib/glib/gmain.c:3813
No locals.
#32 0x00007f219e87c9d8 in g_main_context_iterate (context=context at entry=0x55dc8e300ef0, block=block at entry=1, dispatch=dispatch at entry=1, self=<optimized out>)
    at /home/calvaris/gnome/jhbuild/build/src/glib/glib/gmain.c:3886
        max_priority = 0
        timeout = 0
        some_ready = 1
        nfds = 4
        allocated_nfds = 4
---Type <return> to continue, or q <return> to quit---
        fds = <optimized out>
#33 0x00007f219e87ca7c in g_main_context_iteration (context=context at entry=0x55dc8e300ef0, may_block=may_block at entry=1) at /home/calvaris/gnome/jhbuild/build/src/glib/glib/gmain.c:3947
        retval = <optimized out>
#34 0x00007f219ee3ec7d in g_application_run (application=0x55dc8e512160, argc=<optimized out>, argv=0x7fff48e5d7c8) at /home/calvaris/gnome/jhbuild/build/src/glib/gio/gapplication.c:2401
        arguments = 0x55dc8e3b6440
        status = 0
        context = 0x55dc8e300ef0
        acquired_context = <optimized out>
        __func__ = "g_application_run"
#35 0x000055dc8caadb1d in main (argc=<optimized out>, argv=<optimized out>) at ../../../src/epiphany/src/ephy-main.c:432
        option_context = <optimized out>
        option_group = <optimized out>
        error = 0x0
        arbitrary_url = <optimized out>
        ctx = <optimized out>
        startup_flags = <optimized out>
        mode = <optimized out>
        status = <optimized out>
        flags = <optimized out>
        desktop_info = <optimized out>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170808/81021eaf/attachment-0001.html>


More information about the webkit-unassigned mailing list