[Webkit-unassigned] [Bug 243924] New: webkit2gtk-5.0 goes into infinite loop when using the mouse wheel

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=243924

            Bug ID: 243924
           Summary: webkit2gtk-5.0 goes into infinite loop when using the
                    mouse wheel
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKitGTK
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: gaetan at fenua.org
                CC: bugs-noreply at webkitgtk.org

On Arch Linux, running webkit2gtk-5.0 version 2.36.6-1, using the mouse wheel to scroll any page makes WebKitWebProcess go into an infinite loop and the UI freeze completely. This is deterministic and happens in the official MiniBrowser and other webkit2gtk-5.0-based browsers.

Moving around the page works just fine (even with smooth scrolling enabled) when using the PageUp/PageDown keys, arrow keys, and when dragging the scroll bar using the mouse buttons. Only using the mouse wheel triggers the infinite loop.

strace indicates that the infinite loop is made of calls like this:

poll([{fd=3, events=POLLIN}, {fd=6, events=POLLIN}], 2, 0) = 1 ([{fd=3, revents=POLLIN}])
write(27, "\1\0\0\0\0\0\0\0", 8)        = 8
futex(0x7f8ae4000b70, FUTEX_WAKE_PRIVATE, 1) = 1
write(27, "\1\0\0\0\0\0\0\0", 8)        = 8
futex(0x7f8ae4000b70, FUTEX_WAKE_PRIVATE, 1) = 1

And gdb gives the backtrace in the middle of the infinite loop as:

#0  0x00007ffff2aef56d in syscall () at /usr/lib/libc.so.6
#1  0x00007ffff3df5e6a in WTF::WorkQueueBase::dispatch(WTF::Function<void ()>&&) () at /usr/lib/libjavascriptcoregtk-5.0.so.0
#2  0x00007ffff71c1fd1 in  () at /usr/lib/libwebkit2gtk-5.0.so.0
#3  0x00007ffff5505616 in  () at /usr/lib/libwebkit2gtk-5.0.so.0
#4  0x00007ffff54d85ba in  () at /usr/lib/libwebkit2gtk-5.0.so.0
#5  0x00007ffff55d4879 in  () at /usr/lib/libwebkit2gtk-5.0.so.0
#6  0x00007ffff2c07d34 in g_signal_emit_valist () at /usr/lib/libgobject-2.0.so.0
#7  0x00007ffff2c07e74 in g_signal_emit () at /usr/lib/libgobject-2.0.so.0
#8  0x00007ffff452f268 in  () at /usr/lib/libgtk-4.so.1
#9  0x00007ffff4535599 in  () at /usr/lib/libgtk-4.so.1
#10 0x00007ffff46c5e7e in  () at /usr/lib/libgtk-4.so.1
#11 0x00007ffff486902e in  () at /usr/lib/libgtk-4.so.1
#12 0x00007ffff45aa66b in  () at /usr/lib/libgtk-4.so.1
#13 0x00007ffff46d229c in  () at /usr/lib/libgtk-4.so.1
#14 0x00007ffff479cb68 in  () at /usr/lib/libgtk-4.so.1
#15 0x00007ffff47ce475 in  () at /usr/lib/libgtk-4.so.1
#16 0x00007ffff2be9fd0 in g_closure_invoke () at /usr/lib/libgobject-2.0.so.0
#17 0x00007ffff2c16798 in  () at /usr/lib/libgobject-2.0.so.0
#18 0x00007ffff2c0762c in g_signal_emit_valist () at /usr/lib/libgobject-2.0.so.0
#19 0x00007ffff2c07e74 in g_signal_emit () at /usr/lib/libgobject-2.0.so.0
#20 0x00007ffff48690b8 in  () at /usr/lib/libgtk-4.so.1
#21 0x00007ffff4816fde in  () at /usr/lib/libgtk-4.so.1
#22 0x00007ffff7ebdc6b in g_main_context_dispatch () at /usr/lib/libglib-2.0.so.0
#23 0x00007ffff7f14001 in  () at /usr/lib/libglib-2.0.so.0
#24 0x00007ffff7ebb392 in g_main_context_iteration () at /usr/lib/libglib-2.0.so.0
#25 0x00007ffff2d0730e in g_application_run () at /usr/lib/libgio-2.0.so.0
#26 0x0000555555561268 in  ()
#27 0x00007ffff2a122d0 in  () at /usr/lib/libc.so.6
#28 0x00007ffff2a1238a in __libc_start_main () at /usr/lib/libc.so.6
#29 0x0000555555561495 in  ()

Any help to further diagnose the issue is welcome.

P.S. I have no reason to suspect this bug is related to the distro build of webkit2gtk-5.0 but here is the recipe for it anyhow: https://github.com/archlinux/svntogit-packages/blob/packages/webkit2gtk-5.0/trunk/PKGBUILD

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220814/7840f14f/attachment.htm>