<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>139300</bug_id>
          
          <creation_ts>2014-12-05 09:00:57 -0800</creation_ts>
          <short_desc>[GTK][EFL]Crash in WebCore::IntSize::width</short_desc>
          <delta_ts>2016-03-22 12:39:07 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Plug-ins</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>WORKSFORME</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>116980</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Renata Hodovan">rhodovan.u-szeged</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>bfulgham</cc>
    
    <cc>cdumez</cc>
    
    <cc>mrobinson</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1052735</commentid>
    <comment_count>0</comment_count>
      <attachid>242633</attachid>
    <who name="Renata Hodovan">rhodovan.u-szeged</who>
    <bug_when>2014-12-05 09:00:57 -0800</bug_when>
    <thetext>Created attachment 242633
Test case

Load this test with release or debug WebKit:

&lt;embed height=&quot;753193&quot; width=&quot;751&quot; type=&quot;video/quicktime&quot;&gt;


Note: I only tested it on a GTK build so it could be a port specific issue. It&apos;d be nice if someone could verify it.


Backtrace:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fff98927700 (LWP 15612)]
0x00007ffff2780db4 in WebCore::IntSize::width (this=0x8) at ../../Source/WebCore/platform/graphics/IntSize.h:67
67	    int width() const { return m_width; }
#0  0x00007ffff2780db4 in WebCore::IntSize::width (this=0x8) at ../../Source/WebCore/platform/graphics/IntSize.h:67
#1  0x00007ffff2a7a0b1 in WebKit::ShareableBitmap::numBytesForSize (size=...) at ../../Source/WebKit2/Shared/cairo/ShareableBitmapCairo.cpp:45
#2  0x00007ffff2780686 in WebKit::ShareableBitmap::createShareable (size=..., flags=1) at ../../Source/WebKit2/Shared/ShareableBitmap.cpp:80
#3  0x00007ffff2993386 in WebKit::PluginProxy::geometryDidChange (this=0x814d90) at ../../Source/WebKit2/WebProcess/Plugins/PluginProxy.cpp:274
#4  0x00007ffff29935ca in WebKit::PluginProxy::geometryDidChange (this=0x814d90, pluginSize=..., clipRect=..., pluginToRootViewTransform=...) at ../../Source/WebKit2/WebProcess/Plugins/PluginProxy.cpp:301
#5  0x00007ffff299f693 in WebKit::PluginView::viewGeometryDidChange (this=0x59d6c0) at ../../Source/WebKit2/WebProcess/Plugins/PluginView.cpp:1076
#6  0x00007ffff299daf2 in WebKit::PluginView::didInitializePlugin (this=0x59d6c0) at ../../Source/WebKit2/WebProcess/Plugins/PluginView.cpp:626
#7  0x00007ffff2992c32 in WebKit::PluginProxy::didCreatePluginInternal (this=0x814d90, wantsWheelEvents=false, remoteLayerClientID=0) at ../../Source/WebKit2/WebProcess/Plugins/PluginProxy.cpp:170
#8  0x00007ffff2992b1a in WebKit::PluginProxy::initializeSynchronously (this=0x814d90) at ../../Source/WebKit2/WebProcess/Plugins/PluginProxy.cpp:140
#9  0x00007ffff29927fa in WebKit::PluginProxy::initialize (this=0x814d90, parameters=...) at ../../Source/WebKit2/WebProcess/Plugins/PluginProxy.cpp:112
#10 0x00007ffff298ba58 in WebKit::Plugin::initialize (this=0x814d90, pluginController=0x59d6f8, parameters=...) at ../../Source/WebKit2/WebProcess/Plugins/Plugin.cpp:95
#11 0x00007ffff299d97c in WebKit::PluginView::initializePlugin (this=0x59d6c0) at ../../Source/WebKit2/WebProcess/Plugins/PluginView.cpp:601
#12 0x00007ffff299e3aa in WebKit::PluginView::setParent (this=0x59d6c0, scrollView=0x76c600) at ../../Source/WebKit2/WebProcess/Plugins/PluginView.cpp:821
#13 0x00007ffff376444e in WebCore::ScrollView::addChild (this=0x76c600, prpChild=...) at ../../Source/WebCore/platform/ScrollView.cpp:68
#14 0x00007ffff3b43d33 in WebCore::WidgetHierarchyUpdatesSuspensionScope::moveWidgets (this=0x7fffffffd31f) at ../../Source/WebCore/rendering/RenderWidget.cpp:66
#15 0x00007ffff30467d9 in WebCore::WidgetHierarchyUpdatesSuspensionScope::~WidgetHierarchyUpdatesSuspensionScope (this=0x7fffffffd31f, __in_chrg=&lt;optimized out&gt;) at ../../Source/WebCore/rendering/RenderWidget.h:43
#16 0x00007ffff36a17cf in WebCore::FrameView::updateEmbeddedObjects (this=0x76c600) at ../../Source/WebCore/page/FrameView.cpp:2856
#17 0x00007ffff36a1847 in WebCore::FrameView::updateEmbeddedObjectsTimerFired (this=0x76c600) at ../../Source/WebCore/page/FrameView.cpp:2864
#18 0x00007ffff36b6b6d in std::_Mem_fn&lt;void (WebCore::FrameView::*)()&gt;::operator()&lt;, void&gt;(WebCore::FrameView*) const (this=0x59fbe0, __object=0x76c600) at /usr/include/c++/4.8/functional:601
#19 0x00007ffff36b574c in std::_Bind&lt;std::_Mem_fn&lt;void (WebCore::FrameView::*)()&gt; (WebCore::FrameView*)&gt;::__call&lt;void, , 0ul&gt;(std::tuple&lt;&gt;&amp;&amp;, std::_Index_tuple&lt;0ul&gt;) (this=0x59fbe0, __args=&lt;unknown type in /home/reni/data/REPOS/webkit/WebKitBuild/Debug/lib/libwebkit2gtk-4.0.so.37, CU 0x36cd46fa, DIE 0x36ec41a5&gt;) at /usr/include/c++/4.8/functional:1296
#20 0x00007ffff36b3546 in std::_Bind&lt;std::_Mem_fn&lt;void (WebCore::FrameView::*)()&gt; (WebCore::FrameView*)&gt;::operator()&lt;, void&gt;() (this=0x59fbe0) at /usr/include/c++/4.8/functional:1355
#21 0x00007ffff36b01eb in std::_Function_handler&lt;void (), std::_Bind&lt;std::_Mem_fn&lt;void (WebCore::FrameView::*)()&gt; (WebCore::FrameView*)&gt; &gt;::_M_invoke(std::_Any_data const&amp;) (__functor=...) at /usr/include/c++/4.8/functional:2071
#22 0x00007ffff2727ec6 in std::function&lt;void ()&gt;::operator()() const (this=0x76c850) at /usr/include/c++/4.8/functional:2464
#23 0x00007ffff272583c in WebCore::Timer::fired (this=0x76c818) at ../../Source/WebCore/platform/Timer.h:132
#24 0x00007ffff377954f in WebCore::ThreadTimers::sharedTimerFiredInternal (this=0x76c590) at ../../Source/WebCore/platform/ThreadTimers.cpp:132
#25 0x00007ffff37793fd in WebCore::ThreadTimers::sharedTimerFired () at ../../Source/WebCore/platform/ThreadTimers.cpp:107
#26 0x00007ffff30f05dc in std::_Function_handler&lt;void (), void (*)()&gt;::_M_invoke(std::_Any_data const&amp;) (__functor=...) at /usr/include/c++/4.8/functional:2071
#27 0x00007ffff2727ec6 in std::function&lt;void ()&gt;::operator()() const (this=0x7fffffffd568) at /usr/include/c++/4.8/functional:2464
#28 0x00007fffedc13d90 in WTF::GMainLoopSource::voidCallback (this=0x7ffff7dd4340 &lt;WebCore::gSharedTimer&gt;) at ../../Source/WTF/wtf/gobject/GMainLoopSource.cpp:365
#29 0x00007fffedc14501 in WTF::GMainLoopSource::voidSourceCallback (source=0x7ffff7dd4340 &lt;WebCore::gSharedTimer&gt;) at ../../Source/WTF/wtf/gobject/GMainLoopSource.cpp:456
#30 0x00007fffedc12f0d in WTF::__lambda0::operator() (__closure=0x0, source=0x7401c0, callback=0x7fffedc144de &lt;WTF::GMainLoopSource::voidSourceCallback(WTF::GMainLoopSource*)&gt;, userData=0x7ffff7dd4340 &lt;WebCore::gSharedTimer&gt;) at ../../Source/WTF/wtf/gobject/GMainLoopSource.cpp:248
#31 0x00007fffedc12f7b in WTF::__lambda0::_FUN (source=0x7401c0, callback=0x7fffedc144de &lt;WTF::GMainLoopSource::voidSourceCallback(WTF::GMainLoopSource*)&gt;, userData=0x7ffff7dd4340 &lt;WebCore::gSharedTimer&gt;) at ../../Source/WTF/wtf/gobject/GMainLoopSource.cpp:252
#32 0x00007fffeaa10a1d in g_main_dispatch (context=0x478020) at gmain.c:3064
#33 g_main_context_dispatch (context=context@entry=0x478020) at gmain.c:3663
#34 0x00007fffeaa10d88 in g_main_context_iterate (context=0x478020, block=block@entry=1, dispatch=dispatch@entry=1, self=&lt;optimized out&gt;) at gmain.c:3734
#35 0x00007fffeaa1104a in g_main_loop_run (loop=0x8eb810) at gmain.c:3928
#36 0x00007ffff45df9dc in WTF::RunLoop::run () at ../../Source/WTF/wtf/gtk/RunLoopGtk.cpp:59
#37 0x00007ffff2b44f82 in WebKit::ChildProcessMain&lt;WebKit::WebProcess, WebKit::WebProcessMain&gt; (argc=2, argv=0x7fffffffd978) at ../../Source/WebKit2/Shared/unix/ChildProcessMain.h:61
#38 0x00007ffff2b44de7 in WebKit::WebProcessMainUnix (argc=2, argv=0x7fffffffd978) at ../../Source/WebKit2/WebProcess/gtk/WebProcessMainGtk.cpp:73
#39 0x0000000000400891 in main (argc=2, argv=0x7fffffffd978) at ../../Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp:44</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1120764</commentid>
    <comment_count>1</comment_count>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2015-08-25 16:22:38 -0700</bug_when>
    <thetext>I can&apos;t reproduce this on OS X or Windows.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1177001</commentid>
    <comment_count>2</comment_count>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2016-03-22 09:40:15 -0700</bug_when>
    <thetext>I still cannot reproduce this. I&apos;ll tag this as GTK. If the GTK port cannot reproduce I think we should close this.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1177092</commentid>
    <comment_count>3</comment_count>
    <who name="Renata Hodovan">rhodovan.u-szeged</who>
    <bug_when>2016-03-22 12:39:07 -0700</bug_when>
    <thetext>(In reply to comment #2)
&gt; I still cannot reproduce this. I&apos;ll tag this as GTK. If the GTK port cannot
&gt; reproduce I think we should close this.

You are right. This is an old and invalid issue. I&apos;ve checked it both on EFL, GTK and Mac builds and none of them repro it anymore.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>242633</attachid>
            <date>2014-12-05 09:00:57 -0800</date>
            <delta_ts>2014-12-05 09:00:57 -0800</delta_ts>
            <desc>Test case</desc>
            <filename>crash.html</filename>
            <type>text/html</type>
            <size>58</size>
            <attacher name="Renata Hodovan">rhodovan.u-szeged</attacher>
            
              <data encoding="base64">PGVtYmVkIGhlaWdodD0iNzUzMTkzIiB3aWR0aD0iNzUxIiB0eXBlPSJ2aWRlby9xdWlja3RpbWUi
Pg==
</data>

          </attachment>
      

    </bug>

</bugzilla>