[Webkit-unassigned] [Bug 168516] [GTK] UI process crash in WebCore::PasteboardHelper::fillSelectionData

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Dec 11 10:36:37 PST 2017


https://bugs.webkit.org/show_bug.cgi?id=168516

--- Comment #5 from Michael Catanzaro <mcatanzaro at igalia.com> ---
It's not as simple as I'd hoped:

CString String::utf8(ConversionMode mode) const
{
    if (!m_impl) <------------------ crash is right here
        return CString("", 0);

    return m_impl->utf8(mode);
}

this and m_impl are both 0x8, which is not 0. I guess m_impl has somehow become corrupted. Without a reproducer, this will be hard to debug.

info registers
rax            0x0      0
rbx            0x7ffe687b1490   140730651317392
rcx            0x7ffe687b20c0   140730651320512
rdx            0x0      0
rsi            0x8      8  <--- There it is, not sure if that's significant
rdi            0x7ffe687b1490   140730651317392
rbp            0x558ff93b9360   0x558ff93b9360
rsp            0x7ffe687b1420   0x7ffe687b1420
r8             0x558ffa3aa5b0   94076866831792
r9             0x4      4
r10            0x558ff92f5f28   94076849315624
r11            0x558ffa3aa5b0   94076866831792
r12            0x0      0
r13            0x7ffe687b1730   140730651318064
r14            0x7ffe687b16b0   140730651317936
r15            0x7fd7ed0e7c70   140565371845744
rip            0x7fd7ece81d38   0x7fd7ece81d38 <WTF::String::utf8(WTF::ConversionMode) const+8>
eflags         0x10202  [ IF RF ]
cs             0x33     51
ss             0x2b     43
ds             0x0      0
es             0x0      0
fs             0x0      0
gs             0x0      0

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20171211/98183d4c/attachment.html>


More information about the webkit-unassigned mailing list