[Webkit-unassigned] [Bug 172951] New: [GTK] Crashes in WebCore::Node::lastDescendantEv
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Mon Jun 5 20:26:52 PDT 2017
https://bugs.webkit.org/show_bug.cgi?id=172951
Bug ID: 172951
Summary: [GTK] Crashes in WebCore::Node::lastDescendantEv
Product: WebKit
Version: Other
Hardware: PC
OS: Linux
Status: NEW
Severity: Normal
Priority: P2
Component: WebKit Gtk
Assignee: webkit-unassigned at lists.webkit.org
Reporter: mcatanzaro at igalia.com
CC: bugs-noreply at webkitgtk.org
The following tests are crashing on the GTK release bot:
editing/execCommand/crash-replacing-list-by-list.html
editing/inserting/insert-table-in-paragraph-crash.html
Backtrace:
Thread 1 (Thread 0x7fa8b1456f00 (LWP 29270)):
#0 0x00007fa8c4495a40 in _ZNK7WebCore4Node14lastDescendantEv ()
#1 0x00007fa8c4580614 in _ZN7WebCore23ReplaceSelectionCommand7doApplyEv ()
#2 0x00007fa8c45067c6 in _ZN7WebCore20CompositeEditCommand5applyEv ()
#3 0x00007fa8c4545a04 in _ZN7WebCoreL17executeInsertHTMLERNS_5FrameEPNS_5EventENS_19EditorCommandSourceERKN3WTF6StringE ()
#4 0x00007fa8c44348e2 in _ZN7WebCore8Document11execCommandERKN3WTF6StringEbS4_ ()
#5 0x00007fa8c23f8167 in _ZN7WebCore38jsDocumentPrototypeFunctionExecCommandEPN3JSC9ExecStateE () from /home/slave/webkitgtk/gtk-linux-64-release/build/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#6 0x00007fa8693a3028 in ?? ()
#7 0x00007ffd8e6f51f0 in ?? ()
#8 0x00007fa8be8b028f in llint_entry () from /home/slave/webkitgtk/gtk-linux-64-release/build/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
Backtrace stopped: frame did not save the PC
These are caused by either the upgrade to Debian Stretch (217598), or by r217599. I guess probably the former.
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170606/9651fa2a/attachment.html>
More information about the webkit-unassigned
mailing list