[Webkit-unassigned] [Bug 278402] Crash in Epiphany when using Google Maps

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Aug 20 11:46:07 PDT 2024


https://bugs.webkit.org/show_bug.cgi?id=278402

Michael Catanzaro <mcatanzaro at redhat.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mcatanzaro at redhat.com

--- Comment #1 from Michael Catanzaro <mcatanzaro at redhat.com> ---
So AcceleratedBackingStoreDMABuf::frame calls FenceMonitor::addFileDescriptor with renderingFenceFD = 0, which is illegal. And the bogus fd is coming directly from the web process.

This shouldn't result in a UI process crash, though. It should result in a web process kill. We are missing MESSAGE_CHECK() here.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240820/b76e3088/attachment.htm>


More information about the webkit-unassigned mailing list