<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>154888</bug_id>
          
          <creation_ts>2016-03-01 16:15:05 -0800</creation_ts>
          <short_desc>[GTK] Plugin process crash in WebKit::NetscapePlugin::fromNPP</short_desc>
          <delta_ts>2016-10-28 03:56:33 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKitGTK</component>
          <version>Other</version>
          <rep_platform>PC</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>137425</dup_id>
          <see_also>https://bugzilla.redhat.com/show_bug.cgi?id=1290893</see_also>
    
    <see_also>https://bugzilla.redhat.com/show_bug.cgi?id=1305297</see_also>
    
    <see_also>https://bugs.webkit.org/show_bug.cgi?id=154883</see_also>
    
    <see_also>https://bugs.webkit.org/show_bug.cgi?id=154882</see_also>
    
    <see_also>https://bugzilla.redhat.com/show_bug.cgi?id=1349022</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>154891</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Michael Catanzaro">mcatanzaro</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>bugs-noreply</cc>
    
    <cc>cgarcia</cc>
    
    <cc>mcatanzaro</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1169613</commentid>
    <comment_count>0</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2016-03-01 16:15:05 -0800</bug_when>
    <thetext>Another crash with the GNOME Shell (3.18.3) browser plugin. Full backtrace downstream.

Version-Release number of selected component:
webkitgtk4-2.10.4-1.fc23

Additional info:
reporter:       libreport-2.6.3
backtrace_rating: 4
cmdline:        /usr/libexec/webkit2gtk-4.0/WebKitPluginProcess 27 /usr/lib64/mozilla/plugins/libgnome-shell-browser-plugin.so
crash_function: WebKit::NetscapePlugin::fromNPP
executable:     /usr/libexec/webkit2gtk-4.0/WebKitPluginProcess
global_pid:     3702
kernel:         4.2.6-301.fc23.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 WebKit::NetscapePlugin::fromNPP at /usr/src/debug/webkitgtk-2.10.4/Source/WebKit2/WebProcess/Plugins/Netscape/NetscapePlugin.cpp:120
 #1 WebKit::NPN_InvokeDefault at /usr/src/debug/webkitgtk-2.10.4/Source/WebKit2/WebProcess/Plugins/Netscape/NetscapeBrowserFuncs.cpp:699
 #2 on_shell_appeared at browser-plugin.c:214
 #3 do_call at gdbusnamewatching.c:216
 #4 call_appeared_handler at gdbusnamewatching.c:228
 #5 on_name_owner_changed at gdbusnamewatching.c:315
 #6 emit_signal_instance_in_idle_cb at gdbusconnection.c:3701
 #11 WTF::RunLoop::run at /usr/src/debug/webkitgtk-2.10.4/Source/WTF/wtf/glib/RunLoopGLib.cpp:67
 #12 WebKit::ChildProcessMain&lt;WebKit::PluginProcess, WebKit::PluginProcessMain&gt; at /usr/src/debug/webkitgtk-2.10.4/Source/WebKit2/Shared/unix/ChildProcessMain.h:61
 #14 _start

Another user with a slightly-different backtrace sasy:

&quot;I don&apos;t exactly know what happened, but I was using epiphany running with x11 GDK backend in a gnome+wayland session. I opened several tabs on extensions.gnome.org and tried to install extensions.&quot;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1214177</commentid>
    <comment_count>1</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2016-07-25 07:48:27 -0700</bug_when>
    <thetext>246 reports of this one in Fedora, first report is last December. Yet another likely regression from GNOME Shell browser plugin changes. (&quot;Regression&quot; in the sense that after fixing the old crash, now these new crashes appear.)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1245531</commentid>
    <comment_count>2</comment_count>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2016-10-28 03:56:33 -0700</bug_when>
    <thetext>This is a duplicate of #137425, it&apos;s calling invokeDefault with an invalid npobject in both cases.

*** This bug has been marked as a duplicate of bug 137425 ***</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>