<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>206352</bug_id>
          
          <creation_ts>2020-01-16 06:00:27 -0800</creation_ts>
          <short_desc>[GTK][WPE] Web process crash when IM tries to delete surrounding text</short_desc>
          <delta_ts>2020-01-16 06:47:48 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKitGTK</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>Gtk</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Carlos Garcia Campos">cgarcia</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>aperez</cc>
    
    <cc>bugs-noreply</cc>
    
    <cc>zan</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1607433</commentid>
    <comment_count>0</comment_count>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2020-01-16 06:00:27 -0800</bug_when>
    <thetext>#0  0x00007f70e04fb0c1 in WebCore::VisibleSelection::VisibleSelection(WebCore::Range const&amp;, WebCore::EAffinity, bool) () from /home/cgarcia/gnome/lib/libWPEWebKit-1.0.so.3
#1  0x00007f70df7e216c in WebKit::WebPage::deleteSurrounding(long, unsigned int) () from /home/cgarcia/gnome/lib/libWPEWebKit-1.0.so.3
#2  0x00007f70df445392 in void IPC::handleMessage&lt;Messages::WebPage::DeleteSurrounding, WebKit::WebPage, void (WebKit::WebPage::*)(long, unsigned int)&gt;(IPC::Decoder&amp;, WebKit::WebPage*, void (WebKit::WebPage::*)(long, unsigned int)) () from /home/cgarcia/gnome/lib/libWPEWebKit-1.0.so.3
#3  0x00007f70df443d3f in WebKit::WebPage::didReceiveWebPageMessage(IPC::Connection&amp;, IPC::Decoder&amp;) () from /home/cgarcia/gnome/lib/libWPEWebKit-1.0.so.3
#4  0x00007f70df52affa in IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&amp;, IPC::Decoder&amp;) () from /home/cgarcia/gnome/lib/libWPEWebKit-1.0.so.3
#5  0x00007f70df7367c7 in WebKit::WebProcess::didReceiveMessage(IPC::Connection&amp;, IPC::Decoder&amp;) () from /home/cgarcia/gnome/lib/libWPEWebKit-1.0.so.3
#6  0x00007f70df5244e8 in IPC::Connection::dispatchMessage(IPC::Decoder&amp;) () from /home/cgarcia/gnome/lib/libWPEWebKit-1.0.so.3
#7  0x00007f70df525b5d in IPC::Connection::dispatchMessage(std::unique_ptr&lt;IPC::Decoder, std::default_delete&lt;IPC::Decoder&gt; &gt;) () from /home/cgarcia/gnome/lib/libWPEWebKit-1.0.so.3
#8  0x00007f70df526313 in IPC::Connection::dispatchOneIncomingMessage() () from /home/cgarcia/gnome/lib/libWPEWebKit-1.0.so.3
#9  0x00007f70e21b85d5 in WTF::RunLoop::performWork() () from /home/cgarcia/gnome/lib/libWPEWebKit-1.0.so.3
#10 0x00007f70e221baf9 in WTF::RunLoop::RunLoop()::{lambda(void*)#1}::_FUN(void*) () from /home/cgarcia/gnome/lib/libWPEWebKit-1.0.so.3
#11 0x00007f70dcc2a9fe in g_main_dispatch (context=0x5651d1253470) at ../glib/gmain.c:3185
#12 g_main_context_dispatch (context=context@entry=0x5651d1253470) at ../glib/gmain.c:3850
#13 0x00007f70dcc2ad80 in g_main_context_iterate (context=0x5651d1253470, block=block@entry=1, dispatch=dispatch@entry=1, self=&lt;optimized out&gt;) at ../glib/gmain.c:3923
#14 0x00007f70dcc2b053 in g_main_loop_run (loop=0x5651d1258710) at ../glib/gmain.c:4117
#15 0x00007f70e221c5c0 in WTF::RunLoop::run() () from /home/cgarcia/gnome/lib/libWPEWebKit-1.0.so.3
#16 0x00007f70df81604f in WebProcessMainUnix () from /home/cgarcia/gnome/lib/libWPEWebKit-1.0.so.3
#17 0x00007f70dd1aebbb in __libc_start_main (main=0x5651d0bf5710 &lt;main&gt;, argc=3, argv=0x7ffd0f602d48, init=&lt;optimized out&gt;, fini=&lt;optimized out&gt;, rtld_fini=&lt;optimized out&gt;, 
    stack_end=0x7ffd0f602d38) at ../csu/libc-start.c:308
#18 0x00005651d0bf578a in _start ()</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1607435</commentid>
    <comment_count>1</comment_count>
      <attachid>387914</attachid>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2020-01-16 06:03:19 -0800</bug_when>
    <thetext>Created attachment 387914
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1607449</commentid>
    <comment_count>2</comment_count>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2020-01-16 06:47:48 -0800</bug_when>
    <thetext>Committed r254677: &lt;https://trac.webkit.org/changeset/254677&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>387914</attachid>
            <date>2020-01-16 06:03:19 -0800</date>
            <delta_ts>2020-01-16 06:22:05 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>wk2-delete-surrounding-crash.diff</filename>
            <type>text/plain</type>
            <size>1640</size>
            <attacher name="Carlos Garcia Campos">cgarcia</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nIGIvU291cmNlL1dlYktpdC9DaGFu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</data>
<flag name="review"
          id="403667"
          type_id="1"
          status="+"
          setter="aperez"
    />
          </attachment>
      

    </bug>

</bugzilla>