[Webkit-unassigned] [Bug 207126] New: [ATK][GTK] assert crash on MiniBrowser

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=207126

            Bug ID: 207126
           Summary: [ATK][GTK] assert crash on MiniBrowser
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Accessibility
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: vjaquez at igalia.com
                CC: webkit-bug-importer at group.apple.com

After a fresh debug compilation and run GTK MiniBrowser I get this assert

Starting MiniBrowser.
ASSERTION FAILED: accessible->priv->object != fallbackObject()
/opt/webkit/WebKit/Source/WebCore/accessibility/atk/WebKitAccessible.cpp(1308) : void webkitAccessibleDetach(WebKitAccessible*)
1   0x7f0fc8fae2f7 /home/ceyusa/wkbuild/Debug/lib/libjavascriptcoregtk-4.0.so.18(WTFCrash+0x9) [0x7f0fc8fae2f7]
2   0x7f0fd65d4c60 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN3WTF15CrashOnOverflow10overflowedEv+0) [0x7f0fd65d4c60]
3   0x7f0fd853c35a /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_Z22webkitAccessibleDetachP17_WebKitAccessible+0xe1) [0x7f0fd853c35a]
4   0x7f0fd85365e2 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore19AccessibilityObject21detachPlatformWrapperENS_27AccessibilityDetachmentTypeE+0xae) [0x7f0fd85365e2]
5   0x7f0fd84b7bbf /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore12AXCoreObject13detachWrapperENS_27AccessibilityDetachmentTypeE+0x2d) [0x7f0fd84b7bbf]
6   0x7f0fd84b7b52 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore12AXCoreObject6detachENS_27AccessibilityDetachmentTypeE+0x20) [0x7f0fd84b7b52]
7   0x7f0fd84a827f /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore13AXObjectCache6removeEj+0x69) [0x7f0fd84a827f]
8   0x7f0fd84a857a /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore13AXObjectCache6removeEPNS_6WidgetE+0x40) [0x7f0fd84a857a]
9   0x7f0fd92d1318 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore9FrameView23removeFromAXObjectCacheEv+0x78) [0x7f0fd92d1318]
10  0x7f0fd92d156c /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore9FrameView16prepareForDetachEv+0x24) [0x7f0fd92d156c]
11  0x7f0fd92cb20a /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore5Frame7setViewEON3WTF6RefPtrINS_9FrameViewENS1_13DumbPtrTraitsIS3_EEEE+0x40) [0x7f0fd92cb20a]
12  0x7f0fd92cd87c /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore5Frame10createViewERKNS_7IntSizeERKN3WTF8OptionalINS_5ColorEEES3_RKNS_7IntRectEbNS_13ScrollbarModeEbSD_b+0xf2) [0x7f0fd92cd87c]
13  0x7f0fd74a63ea /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN6WebKit20WebFrameLoaderClient31transitionToCommittedForNewPageEv+0x2ac) [0x7f0fd74a63ea]
14  0x7f0fd91586a8 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore11FrameLoader21transitionToCommittedEPNS_10CachedPageE+0x4cc) [0x7f0fd91586a8]
15  0x7f0fd91579cd /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore11FrameLoader21commitProvisionalLoadEv+0x4b3) [0x7f0fd91579cd]
16  0x7f0fd91164d7 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore14DocumentLoader13commitIfReadyEv+0x3d) [0x7f0fd91164d7]
17  0x7f0fd9119930 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore14DocumentLoader10commitLoadEPKci+0x4a) [0x7f0fd9119930]
18  0x7f0fd911a733 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore14DocumentLoader12dataReceivedEPKci+0x1d1) [0x7f0fd911a733]
19  0x7f0fd911a558 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore14DocumentLoader12dataReceivedERNS_14CachedResourceEPKci+0x74) [0x7f0fd911a558]
20  0x7f0fd9207932 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore17CachedRawResource28notifyClientsDataWasReceivedEPKcj+0x84) [0x7f0fd9207932]
21  0x7f0fd9207530 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore17CachedRawResource12updateBufferERNS_12SharedBufferE+0x130) [0x7f0fd9207530]
22  0x7f0fd91bcacf /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore17SubresourceLoader22didReceiveDataOrBufferEPKciON3WTF6RefPtrINS_12SharedBufferENS3_13DumbPtrTraitsIS5_EEEExNS_15DataPayloadTypeE+0x22f) [0x7f0fd91bcacf]
23  0x7f0fd91bc823 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN7WebCore17SubresourceLoader14didReceiveDataEPKcjxNS_15DataPayloadTypeE+0x51) [0x7f0fd91bc823]
24  0x7f0fd73b4720 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN6WebKit17WebResourceLoader14didReceiveDataERKN3IPC13DataReferenceEl+0x260) [0x7f0fd73b4720]
25  0x7f0fd698ecb9 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN3IPC22callMemberFunctionImplIN6WebKit17WebResourceLoaderEMS2_FvRKNS_13DataReferenceElESt5tupleIJS3_lEEJLm0ELm1EEEEvPT_T0_OT1_St16integer_sequenceImJXspT2_EEE+0x9c) [0x7f0fd698ecb9]
26  0x7f0fd698e53a /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN3IPC18callMemberFunctionIN6WebKit17WebResourceLoaderEMS2_FvRKNS_13DataReferenceElESt5tupleIJS3_lEESt16integer_sequenceImJLm0ELm1EEEEEvOT1_PT_T0_+0x3b) [0x7f0fd698e53a]
27  0x7f0fd698db60 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN3IPC13handleMessageIN8Messages17WebResourceLoader14DidReceiveDataEN6WebKit17WebResourceLoaderEMS5_FvRKNS_13DataReferenceElEEEvRNS_7DecoderEPT0_T1_+0xc8) [0x7f0fd698db60]
28  0x7f0fd698d11e /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN6WebKit17WebResourceLoader34didReceiveWebResourceLoaderMessageERN3IPC10ConnectionERNS1_7DecoderE+0x256) [0x7f0fd698d11e]
29  0x7f0fd737bab6 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN6WebKit24NetworkProcessConnection17didReceiveMessageERN3IPC10ConnectionERNS1_7DecoderE+0xc4) [0x7f0fd737bab6]
30  0x7f0fd6ca5716 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN3IPC10Connection15dispatchMessageERNS_7DecoderE+0x192) [0x7f0fd6ca5716]
31  0x7f0fd6ca5d69 /home/ceyusa/wkbuild/Debug/lib/libwebkit2gtk-4.0.so.37(_ZN3IPC10Connection15dispatchMessageESt10unique_ptrINS_7DecoderESt14default_deleteIS2_EE+0x213) [0x7f0fd6ca5d69]


To workaround it I just:

@@ -1305,7 +1305,7 @@ AccessibilityObject& webkitAccessibleGetAccessibilityObject(WebKitAccessible* ac
 void webkitAccessibleDetach(WebKitAccessible* accessible)
 {
     ASSERT(WEBKIT_IS_ACCESSIBLE(accessible));
-    ASSERT(accessible->priv->object != fallbackObject());
+    // ASSERT(accessible->priv->object != fallbackObject());

     if (accessible->priv->object->roleValue() == AccessibilityRole::WebArea)
         atk_object_notify_state_change(ATK_OBJECT(accessible), ATK_STATE_DEFUNCT, TRUE);


But actually I don't know what's wrong :(

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200203/37b4bfd6/attachment.htm>