[GTK] Crash in CoordinatedBackingStore::paintToTextureMapper

• Component: WebKitGTK
• Status: NEW ---

[Michael Catanzaro]

Created attachment 368267 [details]
Full backtrace

Reporter says:

"""
1. Browse https://montclair.line72.net in epiphany-3.30.2-2
2. Select several routes on the left
3. Let run for 15 minutes

I can reliably reproduce this.

Everything worked fine until I updated webkit2gtk3 last week and now this site reliably crashes epiphany.
"""

That means it's probably a regression from 2.24.1. Sadly there were a lot of coordinated graphics merges and therefore a lot of suspects: r242266, r242199, r242205, r242346, r242364, r242597, r242771, r243475, r243796. Wouldn't be surprising if one of those turns out to be to blame.

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 WTF::RefCountedBase::ref at DerivedSources/ForwardingHeaders/wtf/RefCounted.h:46
 #1 WTF::refIfNotNull<WebCore::BitmapTexture> at DerivedSources/ForwardingHeaders/wtf/RefPtr.h:38
 #2 WTF::RefPtr<WebCore::BitmapTexture, WTF::DumbPtrTraits<WebCore::BitmapTexture> >::RefPtr at DerivedSources/ForwardingHeaders/wtf/RefPtr.h:58
 #3 WebCore::TextureMapperTile::texture at ../Source/WebCore/platform/graphics/texmap/TextureMapperTile.h:34
 #4 WebCore::CoordinatedBackingStore::paintToTextureMapper at ../Source/WebCore/platform/graphics/texmap/coordinated/CoordinatedBackingStore.cpp:115
 #5 WebCore::TextureMapperLayer::paintSelf at ../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:165
 #6 WebCore::TextureMapperLayer::paintSelfAndChildren at ../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:180
 #7 WebCore::TextureMapperLayer::paintSelfAndChildrenWithReplica at ../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:243
 #8 WebCore::TextureMapperLayer::paintRecursive at ../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:443
 #9 WebCore::TextureMapperLayer::paintSelfAndChildren at ../Source/WebCore/platform/graphics/texmap/TextureMapperLayer.cpp:203