[Webkit-unassigned] [Bug 209118] New: [GTK] UI process crash when entering compositing mode

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sat Mar 14 16:35:16 PDT 2020


https://bugs.webkit.org/show_bug.cgi?id=209118

            Bug ID: 209118
           Summary: [GTK] UI process crash when entering compositing mode
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKitGTK
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mcatanzaro at gnome.org
                CC: bugs-noreply at webkitgtk.org

With WebKitGTK 2.28.0, libwpe 1.6.0, WPEBackend-fdo 1.6.0, in my rawhide VM, we have a showstopper UI process crash whenever entering AC mode, 100% reproducible. I don't know what to do about it because the crash occurs inside ffi_call():

#0  0x0000000000000000 in  ()
#1  0x00007fe93b9b1af0 in ffi_call_unix64 () at ../src/x86/unix64.S:76
#2  0x00007fe93b9b12ab in ffi_call (cif=cif at entry=0x7ffd94622210, fn=<optimized out>, rvalue=<optimized out>, 
    rvalue at entry=0x0, avalue=avalue at entry=0x7ffd946222e0) at ../src/x86/ffi64.c:525
        classes = {X86_64_INTEGER_CLASS, 32765, 1007101216, 21985}
        stack = <optimized out>
        argp = 0x7ffd946220d0 ""
        arg_types = <optimized out>
        gprcount = 2
        ssecount = <optimized out>
        ngpr = 1
        nsse = 0
        i = <optimized out>
        avn = <optimized out>
        ret_in_memory = <optimized out>
        reg_args = <optimized out>
#3  0x00007fe93a82acd2 in wl_closure_invoke
    (closure=closure at entry=0x55e13c072520, flags=flags at entry=2, target=<optimized out>, 
    target at entry=0x55e13cdb37e0, opcode=opcode at entry=6, data=<optimized out>, data at entry=0x55e13cf30600)
    at src/connection.c:1018
        count = 0
        cif = 
          {abi = FFI_UNIX64, nargs = 2, arg_types = 0x7ffd94622230, rtype = 0x7fe93b9b2180 <ffi_type_void>, bytes = 0, flags = 0}
        ffi_types = 
          {0x7fe93b9b2060 <ffi_type_pointer>, 0x7fe93b9b2060 <ffi_type_pointer>, 0x7fe93b9b20c0 <ffi_type_sint32>, 0x7fe93b9b20c0 <ffi_type_sint32>, 0x7fe93b9b20c0 <ffi_type_sint32>, 0x7fe93b9b20c0 <ffi_type_sint32>, 0x55e13c6300d0, 0x7ffd946222b0, 0x55e13cf30600, 0x55e13cf30cd0, 0x0, 0x55e13c146310, 0x55e13c14bff0, 0x7fe93a82971b <wl_connection_read+235>, 0x55e100000001, 0x55e13cf32ce0, 0x0, 0x7ffd00000000, 0x7ffd946222f0, 0x2, 0x7ffd94622310, 0x0}
        ffi_args = 
          {0x7ffd946221f0, 0x7ffd946221f8, 0x55e13cdb37e0, 0x7fe93a829be3 <wl_closure_init+147>, 0x55e13cd3b108, 0x4a36bd966fb7e700, 0x55e13cf30630, 0x55e13cf30600, 0x55e13cdb37e0, 0x55e13cf30cd0, 0x7fe93be060f0 <wl_surface_requests+144>, 0x7fe93a82a59c <wl_connection_demarshal+156>, 0x55e13c0725f8, 0x55e13cf30cd0, 0x55e13c0725f0, 0x55e13c072520, 0x83c072520, 0x7fe93a82a9ea <wl_closure_lookup_objects+58>, 0x7fe93be060f0 <wl_surface_requests+144>, 0x7fe93a824d80 <log_closure+64>, 0x7fe93be060f0 <wl_surface_requests+144>, 0x3a829ab5}
        implementation = <optimized out>
#4  0x00007fe93a826132 in wl_client_connection_data (fd=<optimized out>, mask=<optimized out>, data=0x55e13cf30600)
    at src/wayland-server.c:432
        client = 0x55e13cf30600
        connection = 0x55e13cf30cd0
        resource = 0x55e13cdb37e0
        object = 0x55e13cdb37e0
        closure = 0x55e13c072520
        message = 0x7fe93be060f0 <wl_surface_requests+144>
        p = {6, 524294}
        resource_flags = <optimized out>
        opcode = 6
        size = <optimized out>
        since = <optimized out>
        len = <optimized out>
#5  0x00007fe93a828bea in wl_event_loop_dispatch (loop=0x55e13c146310, timeout=timeout at entry=0) at src/event-loop.c:1027
        ep = {{events = 1, data = {ptr = 0x55e13ce06f40, fd = 1021341504, u32 = 1021341504, u64 = 94425877344064}}, {events = 32765, data = {ptr = 0x7ffd946224e0, fd = -1805507360, u32 = 2489459936, u64 = 140727092913376}}, {events = 0, data = {ptr = 0x3be067b000000000, fd = 0, u32 = 0, u64 = 4314562448632840192}}, {events = 32745, data = {ptr = 0x7fe93be02f80, fd = 1004547968, u32 = 1004547968, u64 = 140639708655488}}, {events = 0, data = {ptr = 0x3bdff6f300000000, fd = 0, u32 = 0, u64 = 4314438491581710336}}, {events = 32745, data = {ptr = 0x55e13c074180, fd = 1007108480, u32 = 1007108480, u64 = 94425863111040}}, {events = 1874323200, data = {ptr = 0x3c0740104a36bd96, fd = 1245101462, u32 = 1245101462, u64 = 4325496405821406614}}, {events = 21985, data = {ptr = 0x2f, fd = 47, u32 = 47, u64 = 47}}, {events = 0, data = {ptr = 0x3c07418000000000, fd = 0, u32 = 0, u64 = 4325497985124270080}}, {events = 21985, data = {ptr = 0x8, fd = 8, u32 = 8, u64 = 8}}, {events = 1004535980, data = {ptr = 0x3c0725f800007fe9, fd = 32745, u32 = 32745, u64 = 4325467714194800617}}, {events = 21985, data = {ptr = 0x4a36bd966fb7e700, fd = 1874323200, u32 = 1874323200, u64 = 5347670061366109952}}, {events = 1007101424, data = {ptr = 0x3c10cd20000055e1, fd = 21985, u32 = 21985, u64 = 4328184779225716193}}, {events = 21985, data = {ptr = 0x55e13c10d390, fd = 1007735696, u32 = 1007735696, u64 = 94425863738256}}, {events = 2, data = {ptr = 0x7fffffff00000000, fd = 0, u32 = 0, u64 = 9223372032559808512}}, {events = 0, data = {ptr = 0x55e13c08c920, fd = 1007208736, u32 = 1007208736, u64 = 94425863211296}}, {events = 977578768, data = {ptr = 0x3a49a32100007fe9, fd = 32745, u32 = 32745, u64 = 4200067489628979177}}, {events = 32745, data = {ptr = 0x55e13c07a040, fd = 1007132736, u32 = 1007132736, u64 = 94425863135296}}, {events = 1874323200, data = {ptr = 0x3c0740f84a36bd96, fd = 1245101462, u32 = 1245101462, u64 = 4325497402253819286}}, {events = 21985, data = {ptr = 0x55e13c10cd20, fd = 1007734048, u32 = 1007734048, u64 = 94425863736608}}, {events = 1007735696, data = {ptr = 0x6fb7e700000055e1, fd = 21985, u32 = 21985, u64 = 8050156846134089185}}, {events = 1245101462, data = {ptr = 0x7fffffff, fd = 2147483647, u32 = 2147483647, u64 = 2147483647}}, {events = 1007735696, data = {ptr = 0x94773a3a000055e1, fd = 21985, u32 = 21985, u64 = 10698083460624438753}}, {events = 32765, data = {ptr = 0x7ffd94622680, fd = -1805506944, u32 = 2489460352, u64 = 140727092913792}}, {events = 2489460224, data = {ptr = 0x9462267800007ffd, fd = 32765, u32 = 32765, u64 = 10692150762168942589}}, {events = 32765, data = {ptr = 0x7fffffff, fd = 2147483647, u32 = 2147483647, u64 = 2147483647}}, {events = 1089764432, data = {ptr = 0x100007fe9, fd = 32745, u32 = 32745, u64 = 4295000041}}, {events = 0, data = {ptr = 0x7fe9411f9635 <__GI___clock_gettime+37>, fd = 1092589109, u32 = 1092589109, u64 = 140639796696629}}, {events = 1, data = {ptr = 0x3c08c92000000000, fd = 0, u32 = 0, u64 = 4325928581365497856}}, {events = 21985, data = {ptr = 0x0, fd = 0, u32 = 0, u64 = 0}}, {events = 2489460352, data = {ptr = 0x3c1ae48000007ffd, fd = 32765, u32 = 32765, u64 = 4331025230077132797}}, {events = 21985, data = {ptr = 0x1, fd = 1, u32 = 1, u64 = 1}}}
        source = <optimized out>
        i = 0
        count = <optimized out>
        has_timers = <optimized out>
#6  0x00007fe93b51d7b3 in operator() (__closure=0x0, base=0x55e13c14bff0) at /usr/src/debug/wpebackend-fdo-1.6.0-1.fc33.x86_64/src/ws.cpp:120
        eventLoop = <optimized out>
        source = @0x55e13c14bff0: {static s_sourceFuncs = {prepare = 0x7fe93b51d420 <_FUN(GSource*, gint*)>, check = 0x7fe93b51d3c0 <_FUN(GSource*)>, dispatch = 0x7fe93b51d770 <_FUN(GSource*, GSourceFunc, gpointer)>, finalize = 0x0, closure_callback = 0x0, closure_marshal = 0x0}, source = {callback_data = 0x0, callback_funcs = 0x0, source_funcs = 0x7fe93b5262c0 <WS::ServerSource::s_sourceFuncs>, ref_count = 3, context = 0x55e13c08c920, priority = 0, flags = 35, source_id = 13, poll_fds = 0x55e13c1ef830 = {0x55e13c14c050}, prev = 0x55e13c1dc500, next = 0x55e13c5da400, name = 0x55e13c0c5c50 "WPEBackend-fdo::Host", priv = 0x7fe920010060}, pfd = {fd = 17, events = 25, revents = 1}, display = 0x55e13c0ae4c0}
#7  _FUN(GSource*, GSourceFunc, gpointer) () at /usr/src/debug/wpebackend-fdo-1.6.0-1.fc33.x86_64/src/ws.cpp:129
#8  0x00007fe94153276f in g_main_dispatch (context=0x55e13c08c920) at ../glib/gmain.c:3309
        dispatch = <optimized out>
        prev_source = 0x0
        was_in_call = <optimized out>
        user_data = 0x0
        callback = 0x0
        cb_funcs = 0x0
        cb_data = 0x0
        need_destroy = <optimized out>
        source = 0x55e13c14bff0
        current = 0x55e13c08c9e0
        i = 0
        __func__ = "g_main_dispatch"
#9  g_main_context_dispatch (context=0x55e13c08c920) at ../glib/gmain.c:3974
#10 0x00007fe941532af8 in g_main_context_iterate (context=context at entry=0x55e13c08c920, block=block at entry=1, dispatch=dispatch at entry=1, self=<optimized out>) at ../glib/gmain.c:4047
        max_priority = 2147483647
        timeout = 168
        some_ready = 1
        nfds = 6
        allocated_nfds = <optimized out>
        fds = 0x55e13cedc7a0
#11 0x00007fe941532bc3 in g_main_context_iteration (context=context at entry=0x55e13c08c920, may_block=may_block at entry=1) at ../glib/gmain.c:4108
        retval = <optimized out>
#12 0x00007fe94174888d in g_application_run (application=0x55e13c082720 [EphyShell], argc=<optimized out>, argv=<optimized out>) at ../gio/gapplication.c:2559
        arguments = 0x55e13c132c90
        status = 0
        context = 0x55e13c08c920
        acquired_context = <optimized out>
        __func__ = "g_application_run"
#13 0x000055e13b24f064 in main (argc=<optimized out>, argv=<optimized out>) at ../src/ephy-main.c:427
        option_context = <optimized out>
        option_group = <optimized out>
        error = 0x0
        user_time = 0
        arbitrary_url = <optimized out>
        ctx = <optimized out>
        mode = <optimized out>
        status = <optimized out>
        flags = <optimized out>
        desktop_info = <optimized out>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200314/53e41a10/attachment-0001.htm>


More information about the webkit-unassigned mailing list