[Webkit-unassigned] [Bug 199205] New: [WPE][GTK] UI process crash in DrawingAreaProxyCoordinatedGraphics::waitForAndDispatchDidUpdateBackingStoreState

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=199205

            Bug ID: 199205
           Summary: [WPE][GTK] UI process crash in
                    DrawingAreaProxyCoordinatedGraphics::waitForAndDispatc
                    hDidUpdateBackingStoreState
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKitGTK
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mcatanzaro at igalia.com
                CC: bugs-noreply at webkitgtk.org

Created attachment 372864

  --> https://bugs.webkit.org/attachment.cgi?id=372864&action=review

Backtrace

UI process crash with 2.25.2

Program terminated with signal SIGSEGV, Segmentation fault.
#0  std::__uniq_ptr_impl<IPC::Decoder, std::default_delete<IPC::Decoder> >::_M_ptr (this=0x30)
    at /usr/include/c++/8.3.0/bits/unique_ptr.h:356
356           explicit operator bool() const noexcept

Truncated backtrace:

#0  0x00007f1c6aa72a2c in std::__uniq_ptr_impl<IPC::Decoder, std::default_delete<IPC::Decoder> >::_M_ptr() const
    (this=0x30) at /usr/include/c++/8.3.0/bits/unique_ptr.h:356
#1  0x00007f1c6aa72a2c in std::unique_ptr<IPC::Decoder, std::default_delete<IPC::Decoder> >::get() const (this=0x30)
    at /usr/include/c++/8.3.0/bits/unique_ptr.h:343
#2  0x00007f1c6aa72a2c in std::unique_ptr<IPC::Decoder, std::default_delete<IPC::Decoder> >::operator bool() const
    (this=0x30) at /usr/include/c++/8.3.0/bits/unique_ptr.h:357
#3  0x00007f1c6aa72a2c in IPC::Connection::waitForMessage(IPC::StringReference, IPC::StringReference, unsigned long, WTF::Seconds, WTF::OptionSet<IPC::WaitForOption>)
    (this=this at entry=0x7f1c642cfd00, messageReceiverName=..., messageName=..., destinationID=511, timeout=..., 
    timeout at entry=..., waitForOptions=...) at ../Source/WebKit/Platform/IPC/Connection.cpp:520
#4  0x00007f1c6ac3828e in IPC::Connection::waitForAndDispatchImmediately<Messages::DrawingAreaProxy::DidUpdateBackingStoreState>(unsigned long, WTF::Seconds, WTF::OptionSet<IPC::WaitForOption>)
    (waitForOptions=..., timeout=..., destinationID=<optimized out>, this=0x7f1c642cfd00)
    at ../Source/WebKit/Platform/IPC/StringReference.h:53
#5  0x00007f1c6ac3828e in WebKit::DrawingAreaProxyCoordinatedGraphics::waitForAndDispatchDidUpdateBackingStoreState()
    (this=0x55ba269a7330)
    at ../Source/WebKit/UIProcess/CoordinatedGraphics/DrawingAreaProxyCoordinatedGraphics.cpp:344
#6  0x00007f1c6ac3828e in WebKit::DrawingAreaProxyCoordinatedGraphics::waitForAndDispatchDidUpdateBackingStoreState()
    (this=0x55ba269a7330)
    at ../Source/WebKit/UIProcess/CoordinatedGraphics/DrawingAreaProxyCoordinatedGraphics.cpp:321
#7  0x00007f1c6ac38820 in WebKit::DrawingAreaProxyCoordinatedGraphics::paint(_cairo*, WebCore::IntRect const&, WebCore::Region&) (this=this at entry=0x55ba269a7330, context=context at entry=0x55ba24c39800, rect=..., unpaintedRegion=...)
    at ../Source/WebKit/UIProcess/CoordinatedGraphics/DrawingAreaProxyCoordinatedGraphics.cpp:91
#8  0x00007f1c6ac2a285 in webkitWebViewBaseDraw(GtkWidget*, cairo_t*)
    (widget=0x55ba2f03e830 [EphyWebView], cr=0x55ba24c39800)
    at ../Source/WebKit/UIProcess/API/gtk/WebKitWebViewBase.cpp:596
#9  0x00007f1c6e15a214 in gtk_widget_draw_internal
    (clip_to_size=1, cr=0x55ba24c39800, widget=0x55ba2f03e830 [EphyWebView]) at gtkwidget.c:7077
#10 0x00007f1c6e15a214 in gtk_widget_draw_internal
    (widget=widget at entry=0x55ba2f03e830 [EphyWebView], cr=cr at entry=0x55ba24c39800, clip_to_size=clip_to_size at entry=1)
    at gtkwidget.c:7015

Full backtrace attached

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190625/27300572/attachment-0001.html>