Bug 149568 – [GTK] Crash in WebCore::GLContextGLX::defaultFrameBufferSize

• Component: WebKitGTK
• Status: NEW

[Michael Catanzaro]

Full backtrace downstream. Notable:

        msg = 0x55dfb73b3690 "The program 'WebKitWebProcess' received an X Window System error.\nThis probably reflects a bug in the program.\nThe error was 'BadDrawable (invalid Pixmap or Window parameter)'.\n  (Details: serial 581 "...

So the rest of this backtrace is surely irrelevant, but I'll post it anyway....

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 _g_log_abort at gmessages.c:316
 #8 XGetGeometry at GetGeom.c:47
 #9 WebCore::GLContextGLX::defaultFrameBufferSize at /usr/src/debug/webkitgtk-2.9.5/Source/WebCore/platform/graphics/glx/GLContextGLX.cpp:189
 #10 WebKit::LayerTreeHostGtk::compositeLayersToContext at /usr/src/debug/webkitgtk-2.9.5/Source/WebKit2/WebProcess/WebPage/gtk/LayerTreeHostGtk.cpp:285
 #11 WebKit::LayerTreeHostGtk::flushAndRenderLayers at /usr/src/debug/webkitgtk-2.9.5/Source/WebKit2/WebProcess/WebPage/gtk/LayerTreeHostGtk.cpp:318
 #12 WebKit::LayerTreeHostGtk::layerFlushTimerFired at /usr/src/debug/webkitgtk-2.9.5/Source/WebKit2/WebProcess/WebPage/gtk/LayerTreeHostGtk.cpp:237
 #13 std::function<void ()>::operator()() const at /usr/include/c++/5.1.1/functional:2271
 #14 WTF::GMainLoopSource::voidCallback at /usr/src/debug/webkitgtk-2.9.5/Source/WTF/wtf/glib/GMainLoopSource.cpp:365
 #15 WTF::GMainLoopSource::voidSourceCallback at /usr/src/debug/webkitgtk-2.9.5/Source/WTF/wtf/glib/GMainLoopSource.cpp:456
 #20 WTF::RunLoop::run at /usr/src/debug/webkitgtk-2.9.5/Source/WTF/wtf/glib/RunLoopGLib.cpp:67

[Michael Catanzaro]

I can reproduce this 100% with 2.10.4 by dragging a tab containing a YouTube video (does not need to be playing) to another window.

with 2.12.3-1 it seems to be the same, but I cannot reproduce it by will:

(WebKitWebProcess:4593): Gdk-ERROR **: The program 'WebKitWebProcess' received an X Window System error.
This probably reflects a bug in the program.
The error was 'BadDrawable (invalid Pixmap or Window parameter)'.
  (Details: serial 31859 error_code 9 request_code 153 (DRI2) minor_code 7)
  (Note to programmers: normally, X errors are reported asynchronously;
   that is, you will receive the error a while after causing it.
   To debug your program, run it with the GDK_SYNCHRONIZE environment
   variable to change this behavior. You can then get a meaningful
   backtrace from your debugger if you break on the gdk_x_error() function.)

[Michael Catanzaro]

(In reply to comment #1)
> I can reproduce this 100% with 2.10.4 by dragging a tab containing a YouTube
> video (does not need to be playing) to another window.

I think it crashes if you try to drag any tab if AC mode is in use.

[Andres Gomez Garcia]

Created attachment 288569 [details]
BT from gdb

I'm using WebKitGtk+ with my own JHBuild setting:
https://github.com/tanty/jhbuild-epiphany/tree/wkgtk-devel

MiniBrowser from WebKit 2.12.5

The compilation was done with CMake args:

"-DPORT=GTK -DCMAKE_BUILD_TYPE=Debug -DDEVELOPER_MODE=ON -DCMAKE_C_FLAGS_DEBUG=-g1 -DCMAKE_CXX_FLAGS_DEBUG=-g1"

When visiting several pages, eventually, WebKitWebProcess crashes.

This bug is not reproducible in a predictable way.

---

The action that triggered the crash was deattaching a tab from a window to create a new 1 tab window.

[Michael Catanzaro]

*** Bug 150717 has been marked as a duplicate of this bug. ***

[Michael Catanzaro]

I don't think I have any reports of this since 2.12, and the YouTube reproducer does not work anymore in 2.14.1. Also, Andres hasn't complained since 2.10.