Bug 145349
| Summary: | [GTK][Stable] Infinite recursion in WebUserContentController destructor | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Michael Catanzaro <mcatanzaro> |
| Component: | WebKit2 | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED WONTFIX | ||
| Severity: | Normal | CC: | cgarcia, mcatanzaro |
| Priority: | P2 | ||
| Version: | 528+ (Nightly build) | ||
| Hardware: | PC | ||
| OS: | Linux | ||
| See Also: |
https://bugzilla.redhat.com/show_bug.cgi?id=1207089 https://bugzilla.redhat.com/show_bug.cgi?id=1236587 |
||
Michael Catanzaro
Moving from downstream:
Truncated backtrace:
Thread no. 1 (10 frames)
#0 WTF::HashTable<WTF::StringImpl*, WTF::StringImpl*, WTF::IdentityExtractor, WTF::StringHash, WTF::HashTraits<WTF::StringImpl*>, WTF::HashTraits<WTF::StringImpl*> >::find<WTF::IdentityHashTranslator<WTF::StringHash>, WTF::StringImpl*> at /usr/src/debug/webkitgtk-2.8.0/Source/WTF/wtf/HashTable.h:948
#1 find at /usr/src/debug/webkitgtk-2.8.0/Source/WTF/wtf/HashTable.h:388
#3 WTF::AtomicString::remove at /usr/src/debug/webkitgtk-2.8.0/Source/WTF/wtf/text/AtomicString.cpp:442
#4 WTF::StringImpl::~StringImpl at /usr/src/debug/webkitgtk-2.8.0/Source/WTF/wtf/text/StringImpl.cpp:113
#5 WTF::StringImpl::destroy at /usr/src/debug/webkitgtk-2.8.0/Source/WTF/wtf/text/StringImpl.cpp:133
#6 deref at /usr/src/debug/webkitgtk-2.8.0/Source/WTF/wtf/RefCounted.h:146
#7 derefIfNotNull<WebCore::UserMessageHandlerDescriptor> at /usr/src/debug/webkitgtk-2.8.0/Source/WTF/wtf/PassRefPtr.h:42
#8 ~RefPtr at /usr/src/debug/webkitgtk-2.8.0/Source/WTF/wtf/RefPtr.h:59
#9 ~WebUserMessageHandlerDescriptorProxy at /usr/src/debug/webkitgtk-2.8.0/Source/WebKit2/WebProcess/UserContent/WebUserContentController.cpp:118
#11 deref at /usr/src/debug/webkitgtk-2.8.0/Source/WTF/wtf/RefCounted.h:146
Full backtrace available in the downstream bug. This can't happen in master anymore, since r181200.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Michael Catanzaro
Obsolete