[Webkit-unassigned] [Bug 278402] Crash in Epiphany when using Google Maps
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Tue Aug 20 11:46:07 PDT 2024
https://bugs.webkit.org/show_bug.cgi?id=278402
Michael Catanzaro <mcatanzaro at redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |mcatanzaro at redhat.com
--- Comment #1 from Michael Catanzaro <mcatanzaro at redhat.com> ---
So AcceleratedBackingStoreDMABuf::frame calls FenceMonitor::addFileDescriptor with renderingFenceFD = 0, which is illegal. And the bogus fd is coming directly from the web process.
This shouldn't result in a UI process crash, though. It should result in a web process kill. We are missing MESSAGE_CHECK() here.
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240820/b76e3088/attachment.htm>
More information about the webkit-unassigned
mailing list