Bug 167296 – [GTK] WebProcess from WebKitGtk+ 2.15.3 SIGSEVs in WebCore::GraphicsContext3D::drawArrays(unsigned int, int, int) at Source/WebCore/platform/graphics/opengl/GraphicsContext3DOpenGLCommon.cpp:740

• Component: WebKitGTK
• Status: RESOLVED FIXED

[Andres Gomez Garcia]

Created attachment 299487 [details]
BT from gdb for the WebProcess

I'm using WebKitGtk+ with my own JHBuild setting:
https://github.com/tanty/jhbuild-epiphany/tree/master

Epiphany 3.20.6 and WebKit 2.15.3

I'm running Epiphany with the dconf key:

"process-model" = "shared-secondary-process"

And the env variable:

"export LIBGL_DRI3_DISABLE=1"

The compilation was done with CMake args:

'-DPORT=GTK -DCMAKE_BUILD_TYPE=Release -DENABLE_MINIBROWSER=ON -DCMAKE_C_FLAGS_RELEASE="-O0 -g -DNDEBUG -DG_DEBUG=fatal-criticals -DG_DISABLE_CAST_CHECKS" -DCMAKE_CXX_FLAGS_RELEASE="-O0 -g -DNDEBUG -DG_DEBUG=fatal-criticals -DG_DISABLE_CAST_CHECKS"'

After visiting several pages, eventually, the WebProcess hits a SIGSEV.

This bug is not reproducible in a predictable way.

[Miguel Gomez]

Created attachment 299700 [details]
Patch

[Sergio Villar Senin]

Comment on attachment 299700 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=299700&action=review

> Source/WebCore/platform/graphics/texmap/TextureMapperGL.cpp:691
> +    Platform3DObject vbo = data().getStaticVBO(GraphicsContext3D::ARRAY_BUFFER, sizeof(GC3Dfloat) * 8, unitRect);

I think you can use sizeof(uniRect) instead of the magic number 8.

[Build Bot]

Comment on attachment 299700 [details]
Patch

Attachment 299700 [details] did not pass mac-ews (mac):
Output: http://webkit-queues.webkit.org/results/2947032

New failing tests:
imported/w3c/web-platform-tests/html/browsers/history/the-location-interface/location-protocol-setter-non-broken.html

[Build Bot]

Created attachment 299706 [details]
Archive of layout-test-results from ews101 for mac-elcapitan

The attached test failures were seen while running run-webkit-tests on the mac-ews.
Bot: ews101  Port: mac-elcapitan  Platform: Mac OS X 10.11.6

[WebKit Commit Bot]

Comment on attachment 299700 [details]
Patch

Clearing flags on attachment: 299700

Committed r211204: <http://trac.webkit.org/changeset/211204>

[WebKit Commit Bot]

All reviewed patches have been landed.  Closing bug.

[Michael Catanzaro]

*** Bug 167470 has been marked as a duplicate of this bug. ***