Bug 220059 – [GTK] Crash in WebKit::DropTarget::dataReceived

• Component: WebKitGTK
• Status: RESOLVED DUPLICATE

[Michael Catanzaro]

This occurred with 2.30.4. I don't know how to reproduce. Sequel to bug #217482, I guess.

(gdb) bt full
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
        set = 
            {__val = {0, 0, 94112730600752, 16, 94113028588976, 94112731547360, 94112731547424, 140443808240811, 94113028657168, 12884903328, 12884901958, 19, 94112731547136, 49152, 281474977367057, 0}}
        pid = <optimized out>
        tid = <optimized out>
#1  0x00007fbbf9657855 in __GI_abort () at abort.c:79
        save_stage = 1
        act = 
          {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0 <repeats 16 times>}}, sa_flags = 0, sa_restorer = 0x0}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2  0x00007fbbf476d24d in  () at DerivedSources/ForwardingHeaders/wtf/Assertions.h:713
#3  0x00007fbbf6546d69 in WebKit::DropTarget::dataReceived(WebCore::IntPoint&&, _GtkSelectionData*, unsigned int, unsigned int) (this=0x7fbb1435c288, position=..., data=<optimized out>, info=<optimized out>, time=9410207)
    at DerivedSources/ForwardingHeaders/wtf/Optional.h:374
        length = -1
        uriListData = <optimized out>
#4  0x00007fbbf654711c in operator()
    (userData=0x7fbb1435c288, time=9410207, info=<optimized out>, data=<optimized out>, y=<optimized out>, x=<optimized out>, context=<optimized out>, __closure=0x0) at DerivedSources/ForwardingHeaders/WebCore/IntPoint.h:67
        drop = 
            @0x7fbb1435c288: {m_webView = 0x5598542dd620 [EphyWebView], m_drop = {m_ptr = 0x559853d0b010 [GdkWaylandDragContext]}, m_position = {<WTF::constexpr_Optional_base<WebCore::IntPoint>> = {init_ = true, storage_ = {dummy_ = 50 '2', value_ = {m_x = 50, m_y = 545}}}, <No data fields>}, m_dataRequestCount = 1, m_selectionData = {<WTF::Optional_base<WebCore::SelectionData>> = {init_ = true, storage_ = {dummy_ = 0 '\000', value_ = {m_text = {static MaxLength = 2147483647, m_impl = {static isRefPtr = <optimized out>, m_ptr = 0x0}}, m_markup = {static MaxLength = 2147483647, m_impl = {static isRefPtr = <optimized out>, m_ptr = 0x0}}, m_url = {m_string = {static MaxLength = 2147483647, m_impl = {static isRefPtr = <optimized out>, m_ptr = 0x0}}, m_isValid = 0, m_protocolIsInHTTPFamily = 0, m_cannotBeABaseURL = 0, m_portLength = 0, static maxPortLength = 7, static maxSchemeLength = 67108863, m_schemeEnd = 0, m_userStart = 0, m_userEnd = 0, m_passwordEnd = 0, m_hostEnd = 0, m_pathAfterLastSlash = 0, m_pathEnd = 0, m_queryEnd = 0}, m_uriList = {static MaxLength = 2147483647, m_impl = {static isRefPtr = <optimized out>, m_ptr = 0x0}}, m_filenames = {<WTF::VectorBuffer<WTF::String, 0, WTF::FastMalloc>> = {<WTF::VectorBufferBase<WTF::String, WTF::FastMalloc>> = {m_buffer = 0x0, m_capacity = 0, m_size = 0}, <No data fields>}, <No data fields>}, m_image = {static isRefPtr = <optimized out>, m_ptr = 0x0}, m_canSmartReplace = false, m_customData = {static isRefPtr = <optimized out>, m_ptr = 0x0}}}}, <No data fields>}, m_operation = {<WTF::constexpr_Optional_base<WebCore::DragOperation>> = {init_ = false, storage_ = {dummy_ = 0 '\000', value_ = (unknown: 0)}}, <No data fields>}, m_leaveTimer = {<WTF::RunLoop::TimerBase> = {_vptr.TimerBase = 0x7fbbf8d7fc98 <vtable for WTF::RunLoop::Timer<WebKit::DropTarget>+16>, m_runLoop = {static isRef = <optimized out>, m_ptr = 0x7fbbee2f8000}, m_source = {m_ptr = 0x559854c94d70}, m_isRepeating = false, m_interval = {m_value = 0}}, m_function = (void (WebKit::DropTarget::*)(class WebKit::DropTarget * const)) 0x7fbbf6546540 <WebKit::DropTarget::leaveTimerFired()>, m_object = 0x7fbb1435c288}}
#5  _FUN(GtkWidget*, GdkDragContext*, gint, gint, GtkSelectionData*, guint, guint, gpointer) ()
    at ../Source/WebKit/UIProcess/API/gtk/DropTargetGtk3.cpp:85
#6  0x00007fbbf9da3704 in _gtk_marshal_VOID__OBJECT_INT_INT_BOXED_UINT_UINTv
    (closure=closure@entry=0x5598542e01f0, return_value=return_value@entry=0x0, instance=instance@entry=0x5598542dd620, args=args@entry=0x7fff357fbbc8, marshal_data=marshal_data@entry=0x0, n_params=n_params@entry=6, param_types=0x559853cc18c0) at gtk/gtkmarshalers.c:5999
        data1 = 0x5598542dd620
        data2 = <optimized out>
        callback = 0x7fbbf65470c0 <_FUN(GtkWidget*, GdkDragContext*, gint, gint, GtkSelectionData*, guint, guint, gpointer)>
        arg0 = 0x559853d0b010
        arg1 = 0
        arg2 = -110696523
        arg3 = 0x7fff357fc150
        arg4 = 897559968
        arg5 = 897559968
        args_copy = {{gp_offset = 48, fp_offset = 48, overflow_arg_area = 0x7fff357fbd10, reg_save_area = 0x7fff357fbc10}}
#7  0x00007fbbf9ac3139 in _g_closure_invoke_va (closure=closure@entry=0x5598542e01f0, return_value=return_value@entry=0x0, instance=instance@entry=0x5598542dd620, args=args@entry=0x7fff357fbbc8, n_params=6, param_types=0x559853cc18c0) at ../gobject/gclosure.c:873
        marshal = 0x7fbbf9da35b0 <_gtk_marshal_VOID__OBJECT_INT_INT_BOXED_UINT_UINTv>
        marshal_data = 0x0
        in_marshal = 0
        real_closure = 0x5598542e01d0
        __func__ = "_g_closure_invoke_va"
#8  0x00007fbbf9adbf4f in g_signal_emit_valist (instance=instance@entry=0x5598542dd620, signal_id=signal_id@entry=107, detail=detail@entry=0, var_args=var_args@entry=0x7fff357fbbc8) at ../gobject/gsignal.c:3404
        return_accu = <optimized out>
        accu = {g_type = 0x0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        accumulator = 0x0
        emission = {next = 0x7fff357fbec0, instance = 0x5598542dd620, ihint = {signal_id = 107, detail = 0, run_type = G_SIGNAL_RUN_LAST}, state = EMISSION_RUN, chain_type = 0x559853d178c0 [EphyWebView/WebKitWebView/WebKitWebViewBase/GtkContainer/GtkWidget/GInitiallyUnowned]}
        signal_id = 107
        instance_type = <optimized out>
        emission_return = {g_type = 0x0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        rtype = 0x4 [void]
        static_scope = 0
        fastpath_handler = <optimized out>
        closure = <optimized out>
        run_type = <optimized out>
        hlist = <optimized out>
        l = <optimized out>
        fastpath = 1
        instance_and_params = <optimized out>
        signal_return_type = <optimized out>
        param_values = <optimized out>
        node = <optimized out>
        i = <optimized out>
        n_params = <optimized out>
        __func__ = "g_signal_emit_valist"
#9  0x00007fbbf9adc35f in g_signal_emit_by_name (instance=instance@entry=0x5598542dd620, detailed_signal=detailed_signal@entry=0x7fbbfa177215 "drag-data-received") at ../gobject/gsignal.c:3591
        var_args = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7fff357fbd00, reg_save_area = 0x7fff357fbc10}}
        detail = 0
        signal_id = 107
        itype = 0x559853d178c0 [EphyWebView/WebKitWebView/WebKitWebViewBase/GtkContainer/GtkWidget/GInitiallyUnowned]
        __func__ = "g_signal_emit_by_name"
#10 0x00007fbbfa0cda3b in gtk_drag_selection_received (widget=0x559853cc4a70 [GtkWindow], selection_data=0x7fff357fc150, time=9410207, data=0x5598542dd620) at ../gtk/gtkdnd.c:1180
        site = <optimized out>
        context = 0x559853d0b010 [GdkWaylandDragContext]
        info = 0x7fbaac041e60
        drop_widget = 0x5598542dd620 [EphyWebView]
        target = 0x4a
#11 0x00007fbbf9da0e9b in _gtk_marshal_VOID__BOXED_UINTv (closure=closure@entry=0x559867099690, return_value=return_value@entry=0x0, instance=instance@entry=0x559853cc4a70, args=args@entry=0x7fff357fbfc8, marshal_data=marshal_data@entry=0x0, n_params=n_params@entry=2, param_types=0x559853cfe740) at gtk/gtkmarshalers.c:3608
        data1 = 0x559853cc4a70
        data2 = <optimized out>
        callback = 0x7fbbfa0cd8e0 <gtk_drag_selection_received>
        arg0 = 0x7fff357fc150
        arg1 = 0
        args_copy = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fff357fc100, reg_save_area = 0x7fff357fc010}}
#12 0x00007fbbf9ac3139 in _g_closure_invoke_va (closure=closure@entry=0x559867099690, return_value=return_value@entry=0x0, instance=instance@entry=0x559853cc4a70, args=args@entry=0x7fff357fbfc8, n_params=2, param_types=0x559853cfe740) at ../gobject/gclosure.c:873
        marshal = 0x7fbbf9da0df0 <_gtk_marshal_VOID__BOXED_UINTv>
        marshal_data = 0x0
        in_marshal = 0
        real_closure = 0x559867099670
        __func__ = "_g_closure_invoke_va"
#13 0x00007fbbf9adbf4f in g_signal_emit_valist (instance=instance@entry=0x559853cc4a70, signal_id=signal_id@entry=95, detail=detail@entry=0, var_args=var_args@entry=0x7fff357fbfc8) at ../gobject/gsignal.c:3404
        return_accu = <optimized out>
        accu = {g_type = 0x0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        accumulator = 0x0
        emission = {next = 0x7fff357fc440, instance = 0x559853cc4a70, ihint = {signal_id = 95, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 0x559853d1ded0 [GtkWindow/GtkBin/GtkContainer/GtkWidget/GInitiallyUnowned]}
        signal_id = 95
        instance_type = <optimized out>
        emission_return = {g_type = 0x0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        rtype = 0x4 [void]
        static_scope = 0
        fastpath_handler = <optimized out>
        closure = <optimized out>
        run_type = <optimized out>
        hlist = <optimized out>
        l = <optimized out>
        fastpath = 1
        instance_and_params = <optimized out>
        signal_return_type = <optimized out>
        param_values = <optimized out>
        node = <optimized out>
        i = <optimized out>
        n_params = <optimized out>
        __func__ = "g_signal_emit_valist"
#14 0x00007fbbf9adc35f in g_signal_emit_by_name (instance=0x559853cc4a70, detailed_signal=detailed_signal@entry=0x7fbbfa1b855a "selection-received") at ../gobject/gsignal.c:3591
        var_args = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7fff357fc100, reg_save_area = 0x7fff357fc010}}
        detail = 0
        signal_id = 95
        itype = 0x559853d1ded0 [GtkWindow/GtkBin/GtkContainer/GtkWidget/GInitiallyUnowned]
        __func__ = "g_signal_emit_by_name"
#15 0x00007fbbf9fb4b6c in gtk_selection_retrieval_report (time=9410207, length=<optimized out>, buffer=<optimized out>, format=<optimized out>, type=<optimized out>, info=0x7fbaac0668d0) at ../gtk/gtkselection.c:3079
        data = {selection = 0x46, target = 0x4a, type = 0x0, format = 0, data = 0x0, length = -1, display = 0x559853c9a0e0 [GdkWaylandDisplay]}
        owner_widget = <optimized out>
        owner_widget_ptr = 0x559853cc54f0
        selection_data = {selection = 0x46, target = 0x4a, type = 0x0, format = 0, data = 0x0, length = -1, display = 0x559853c9a0e0 [GdkWaylandDisplay]}
        info = 0x7fbaac0668d0
        tmp_list = <optimized out>
        owner_window = <optimized out>
        display = 0x559853c9a0e0 [GdkWaylandDisplay]
        id = <optimized out>
        __func__ = "gtk_selection_convert"
#16 gtk_selection_convert (widget=0x559853cc4a70 [GtkWindow], selection=0x46, target=0x4a, time_=time_@entry=9410207) at ../gtk/gtkselection.c:1172
        owner_widget = <optimized out>
        owner_widget_ptr = 0x559853cc54f0
        selection_data = {selection = 0x46, target = 0x4a, type = 0x0, format = 0, data = 0x0, length = -1, display = 0x559853c9a0e0 [GdkWaylandDisplay]}
        info = 0x7fbaac0668d0
        tmp_list = <optimized out>
        owner_window = <optimized out>
        display = 0x559853c9a0e0 [GdkWaylandDisplay]
        id = <optimized out>
        __func__ = "gtk_selection_convert"
#17 0x00007fbbfa0cd4f6 in gtk_drag_get_data (widget=<optimized out>, context=<optimized out>, target=<optimized out>, time_=time_@entry=9410207) at ../gtk/gtkdnd.c:900
        selection_widget = <optimized out>
        __func__ = "gtk_drag_get_data"
#18 0x00007fbbf654797f in WebKit::DropTarget::accept(_GdkDragContext*, WTF::Optional<WebCore::IntPoint>, unsigned int) (this=0x7fbb1435c288, drop=<optimized out>, position=..., time=9410207) at DerivedSources/ForwardingHeaders/wtf/glib/GRefPtr.h:105
        atom = <optimized out>
        __for_range = @0x7fff357fc250: {<WTF::VectorBuffer<_GdkAtom*, 4, WTF::FastMalloc>> = {<WTF::VectorBufferBase<_GdkAtom*, WTF::FastMalloc>> = {m_buffer = 0x7fff357fc260, m_capacity = 4, m_size = 2}, m_inlineBuffer = {{__data = "O\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "J\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\240\205\304T\230U\000", __align = {<No data fields>}}, {__data = "2\000\000\000\000\000\000", __align = {<No data fields>}}}}, <No data fields>}
        __for_begin = 0x7fff357fc268
        __for_end = 0x7fff357fc270
        list = <optimized out>
        supportedTargets = {0x7fbbf82ea105 "text/plain;charset=utf-8", 0x7fbbf82e7304 "text/html", 0x7fbbf82ea0ac "_NETSCAPE_URL", 0x7fbbf82ea098 "text/uri-list", 0x7fbbf8371be8 "application/vnd.webkitgtk.smartpaste", 0x7fbbf8371bb8 "org.webkitgtk.WebKit.custom-pasteboard-data"}
        targets = {<WTF::VectorBuffer<_GdkAtom*, 4, WTF::FastMalloc>> = {<WTF::VectorBufferBase<_GdkAtom*, WTF::FastMalloc>> = {m_buffer = 0x7fff357fc260, m_capacity = 4, m_size = 2}, m_inlineBuffer = {{__data = "O\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "J\000\000\000\000\000\000", __align = {<No data fields>}}, {__data = "\240\205\304T\230U\000", __align = {<No data fields>}}, {__data = "2\000\000\000\000\000\000", __align = {<No data fields>}}}}, <No data fields>}
#19 0x00007fbbf6547bae in operator() (__closure=0x0, userData=<optimized out>, time=<optimized out>, y=<optimized out>, x=<optimized out>, context=<optimized out>) at DerivedSources/ForwardingHeaders/wtf/Optional.h:305
        drop = <optimized out>
#20 _FUN(GtkWidget*, GdkDragContext*, gint, gint, guint, gpointer) () at ../Source/WebKit/UIProcess/API/gtk/DropTargetGtk3.cpp:59
#21 0x00007fbbf9d9cf46 in _gtk_marshal_BOOLEAN__OBJECT_INT_INT_UINTv (closure=closure@entry=0x5598542e0100, return_value=return_value@entry=0x7fff357fc470, instance=instance@entry=0x5598542dd620, args=args@entry=0x7fff357fc548, marshal_data=marshal_data@entry=0x0, n_params=n_params@entry=4, param_types=0x559853cf5cd0) at gtk/gtkmarshalers.c:885
        data1 = 0x5598542dd620
        data2 = <optimized out>
        callback = 0x7fbbf6547b70 <_FUN(GtkWidget*, GdkDragContext*, gint, gint, guint, gpointer)>
        v_return = <optimized out>
        arg0 = 0x559853d0b010
        arg1 = 8
        arg2 = 582
        arg3 = 0
        args_copy = {{gp_offset = 48, fp_offset = 48, overflow_arg_area = 0x7fff357fc680, reg_save_area = 0x7fff357fc590}}
        __func__ = "_gtk_marshal_BOOLEAN__OBJECT_INT_INT_UINTv"
#22 0x00007fbbf9ac3139 in _g_closure_invoke_va (closure=closure@entry=0x5598542e0100, return_value=return_value@entry=0x7fff357fc470, instance=instance@entry=0x5598542dd620, args=args@entry=0x7fff357fc548, n_params=4, param_types=0x559853cf5cd0) at ../gobject/gclosure.c:873
        marshal = 0x7fbbf9d9ce70 <_gtk_marshal_BOOLEAN__OBJECT_INT_INT_UINTv>
        marshal_data = 0x0
        in_marshal = 0
        real_closure = 0x5598542e00e0
        __func__ = "_g_closure_invoke_va"
#23 0x00007fbbf9adb299 in g_signal_emit_valist (instance=instance@entry=0x5598542dd620, signal_id=signal_id@entry=104, detail=detail@entry=0, var_args=var_args@entry=0x7fff357fc548) at ../gobject/gsignal.c:3404
        return_accu = <optimized out>
        accu = {g_type = 0x14 [gboolean], data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        accumulator = 0x559853d05c10
        emission = {next = 0x0, instance = 0x5598542dd620, ihint = {signal_id = 104, detail = 0, run_type = G_SIGNAL_RUN_LAST}, state = EMISSION_RUN, chain_type = 0x559853d178c0 [EphyWebView/WebKitWebView/WebKitWebViewBase/GtkContainer/GtkWidget/GInitiallyUnowned]}
        signal_id = 104
        instance_type = <optimized out>
        emission_return = {g_type = 0x14 [gboolean], data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        rtype = 0x14 [gboolean]
        static_scope = 0
        fastpath_handler = <optimized out>
        closure = <optimized out>
        run_type = <optimized out>
        hlist = <optimized out>
        l = <optimized out>
        fastpath = 1
        instance_and_params = <optimized out>
        signal_return_type = <optimized out>
        param_values = <optimized out>
        node = <optimized out>
        i = <optimized out>
        n_params = <optimized out>
        __func__ = "g_signal_emit_valist"
#24 0x00007fbbf9adc35f in g_signal_emit_by_name (instance=instance@entry=0x5598542dd620, detailed_signal=detailed_signal@entry=0x7fbbfa18c382 "drag-motion") at ../gobject/gsignal.c:3591
        var_args = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7fff357fc680, reg_save_area = 0x7fff357fc590}}
        detail = 0
        signal_id = 104
        itype = 0x559853d178c0 [EphyWebView/WebKitWebView/WebKitWebViewBase/GtkContainer/GtkWidget/GInitiallyUnowned]
        __func__ = "g_signal_emit_by_name"
#25 0x00007fbbfa0ce94a in gtk_drag_dest_motion (widget=widget@entry=0x5598542dd620 [EphyWebView], context=context@entry=0x559853d0b010 [GdkWaylandDragContext], x=50, y=545, time=time@entry=9410207) at ../gtk/gtkdnd.c:1572
        site = 0x5598542c3630
        action = <optimized out>
        retval = -98681674
        __func__ = "gtk_drag_dest_motion"
#26 0x00007fbbfa0ceee6 in gtk_drag_find_widget (callback=0x7fbbfa0ce7e0 <gtk_drag_dest_motion>, time=9410207, y=<optimized out>, x=<optimized out>, info=0x7fbaac041e60, context=0x559853d0b010 [GdkWaylandDragContext], widget=0x5598542dd620 [EphyWebView]) at ../gtk/gtkdnd.c:1270
        parent = 0x0
        hierarchy = 0x55985eef98c0 = {0x5598540aa390, 0x5598540ba130, 0x559853cb3270, 0x55985475b2e0, 0x559853ca47c0, 0x55985426da40, 0x559854c7c860, 0x5598542dd620}
        found = 0
        window = <optimized out>
        tx = 0
        ty = 0
        found = <optimized out>
        info = 0x7fbaac041e60
        context = 0x559853d0b010 [GdkWaylandDragContext]
        __func__ = "_gtk_drag_dest_handle_event"
#27 _gtk_drag_dest_handle_event (toplevel=toplevel@entry=0x5598540aa390 [EphyWindow], event=event@entry=0x7fbacc02c0d0) at ../gtk/gtkdnd.c:1091
        window = <optimized out>
        tx = 0
        ty = 0
        found = <optimized out>
        info = 0x7fbaac041e60
        context = 0x559853d0b010 [GdkWaylandDragContext]
        __func__ = "_gtk_drag_dest_handle_event"
#28 0x00007fbbf9f1b4cb in gtk_main_do_event (event=0x7fbacc02c0d0) at ../gtk/gtkmain.c:1938
        grab_widget = <optimized out>
        window_group = 0x5598540a5ce0 [GtkWindowGroup]
        rewritten_event = <optimized out>
        device = 0x559853d0b0c0 [GdkWaylandDevice]
        tmp_list = <optimized out>
        event_widget = 0x5598540aa390 [EphyWindow]
        topmost_widget = <optimized out>
        __func__ = "gtk_main_do_event"
        __func__ = "gtk_main_do_event"
#29 gtk_main_do_event (event=<optimized out>) at ../gtk/gtkmain.c:1690
        __func__ = "gtk_main_do_event"
#30 0x00007fbbf93f2349 in _gdk_event_emit (event=event@entry=0x7fbacc02c0d0) at ../gdk/gdkevents.c:73
#31 0x00007fbbf94272f6 in gdk_event_source_dispatch (base=<optimized out>, callback=<optimized out>, data=<optimized out>) at ../gdk/wayland/gdkeventsource.c:124
        source = <optimized out>
        display = <optimized out>
        event = 0x7fbacc02c0d0
#32 0x00007fbbf99cc3fb in g_main_dispatch (context=0x559853caedb0) at ../glib/gmain.c:3325
        dispatch = 0x7fbbf94272d0 <gdk_event_source_dispatch>
        prev_source = 0x0
        begin_time_nsec = 0
        was_in_call = 0
        user_data = 0x0
        callback = 0x0
        cb_funcs = <optimized out>
        cb_data = <optimized out>
        need_destroy = <optimized out>
        source = 0x559853cc0cc0
        current = 0x559853cb7fa0
        i = 0
        __func__ = "g_main_dispatch"
#33 g_main_context_dispatch (context=0x559853caedb0) at ../glib/gmain.c:4043
#34 0x00007fbbf99cc6a8 in g_main_context_iterate (context=context@entry=0x559853caedb0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../glib/gmain.c:4119
        max_priority = 0
        timeout = 0
        some_ready = 1
        nfds = <optimized out>
        allocated_nfds = <optimized out>
        fds = 0x55985ee78f50
#35 0x00007fbbf99cc773 in g_main_context_iteration (context=context@entry=0x559853caedb0, may_block=may_block@entry=1) at ../glib/gmain.c:4184
        retval = <optimized out>
#36 0x00007fbbf9bf4cfd in g_application_run (application=0x559853f5e290 [EphyShell], argc=897567060, argv=<optimized out>) at ../gio/gapplication.c:2559
        arguments = 0x559853dc3d00
        status = 0
        context = 0x559853caedb0
        acquired_context = <optimized out>
        __func__ = "g_application_run"
#37 0x00005598528700bc in main (argc=<optimized out>, argv=<optimized out>) at ../src/ephy-main.c:431
        option_context = <optimized out>
        option_group = <optimized out>
        error = 0x0
        user_time = 0
        arbitrary_url = <optimized out>
        ctx = <optimized out>
        mode = <optimized out>
        status = <optimized out>
        flags = <optimized out>
        desktop_info = <optimized out>

[Michael Catanzaro]

Newer backtrace, with a reproducer, in bug #226811.

*** This bug has been marked as a duplicate of bug 226811 ***