<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>97092</bug_id>
          
          <creation_ts>2012-09-19 03:04:03 -0700</creation_ts>
          <short_desc>[GTK] REGRESSION(r128907): it broke several WebKit2 API tests</short_desc>
          <delta_ts>2012-09-19 07:00:33 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKit2</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>PC</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Carlos Garcia Campos">cgarcia</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>alex</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>723421</commentid>
    <comment_count>0</comment_count>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2012-09-19 03:04:03 -0700</bug_when>
    <thetext>The problem is in RedirectedXCompositeWindow implementation. Every WebView creates a RedirectedXCompositeWindow of size 1,1. At the end of the constructor resize and resizeLater function are called:

resize(size);
resizeLater(); // Force update of the usable area.

resize always schedules a resizeLater call because m_usableSize is uninitialized (0, 0) and is always smaller than size (1, 1). The first resizeLater, called right after resize() resets the m_pendingResizeSourceId. If the window is destroyed before the second resizeLater is called (called from the main loop), the destructor won&apos;t remove the source, because it has been reset by the first resizeLater and after the objects is freed, the second resizeLater will be called by the main loop with an already freed RedirectedXCompositeWindow. This happens often in unit tests where web view are created and destroyed quickly. 
Instead of calling resizeLater from the constructor to initialize m_usableSize, we could just initialize it to the given size.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>723423</commentid>
    <comment_count>1</comment_count>
      <attachid>164704</attachid>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2012-09-19 03:07:30 -0700</bug_when>
    <thetext>Created attachment 164704
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>723493</commentid>
    <comment_count>2</comment_count>
      <attachid>164704</attachid>
    <who name="Martin Robinson">mrobinson</who>
    <bug_when>2012-09-19 06:10:40 -0700</bug_when>
    <thetext>Comment on attachment 164704
Patch

Thanks!</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>723534</commentid>
    <comment_count>3</comment_count>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2012-09-19 07:00:33 -0700</bug_when>
    <thetext>Committed r128996: &lt;http://trac.webkit.org/changeset/128996&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>164704</attachid>
            <date>2012-09-19 03:07:30 -0700</date>
            <delta_ts>2012-09-19 06:10:39 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>wk2-ac-crash.diff</filename>
            <type>text/plain</type>
            <size>1905</size>
            <attacher name="Carlos Garcia Campos">cgarcia</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZyBiL1NvdXJjZS9XZWJDb3JlL0No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</data>
<flag name="review"
          id="176549"
          type_id="1"
          status="+"
          setter="mrobinson"
    />
          </attachment>
      

    </bug>

</bugzilla>