Created attachment 261746 [details] Test Run this with debug WebKit: <small> <dd> <audio src="about::foo"></audio> <script src="http:foo"></script> </small> Backtrace: ASSERTION FAILED: m_pipeline ../../Source/WebCore/platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp(375) : bool WebCore::MediaPlayerPrivateGStreamer::changePipelineState(GstState) #0 0x00007fffec64eab6 in WTFCrash () at ../../Source/WTF/wtf/Assertions.cpp:321 #1 0x00007ffff387302e in WebCore::MediaPlayerPrivateGStreamer::changePipelineState (this=0x7fffd58249c0, newState=GST_STATE_PAUSED) at ../../Source/WebCore/platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp:375 #2 0x00007ffff38735c1 in WebCore::MediaPlayerPrivateGStreamer::pause (this=0x7fffd58249c0) at ../../Source/WebCore/platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp:445 #3 0x00007ffff3183b97 in WebCore::MediaPlayer::pause (this=0x7fffd5bb00f8) at ../../Source/WebCore/platform/graphics/MediaPlayer.cpp:476 #4 0x00007ffff2be2a23 in WebCore::HTMLMediaElement::updatePlayState (this=0x7fffd5811000) at ../../Source/WebCore/html/HTMLMediaElement.cpp:4721 #5 0x00007ffff2bdae1e in WebCore::HTMLMediaElement::pauseInternal (this=0x7fffd5811000) at ../../Source/WebCore/html/HTMLMediaElement.cpp:3002 #6 0x00007ffff2bdac97 in WebCore::HTMLMediaElement::pause (this=0x7fffd5811000) at ../../Source/WebCore/html/HTMLMediaElement.cpp:2969 #7 0x00007ffff2bd0fa1 in WebCore::HTMLMediaElement::removedFrom (this=0x7fffd5811000, insertionPoint=...) at ../../Source/WebCore/html/HTMLMediaElement.cpp:752 #8 0x00007ffff28f8bcd in WebCore::notifyNodeRemovedFromDocument (insertionPoint=..., node=...) at ../../Source/WebCore/dom/ContainerNodeAlgorithms.cpp:105 #9 0x00007ffff28f8c84 in WebCore::notifyNodeRemovedFromDocument (insertionPoint=..., node=...) at ../../Source/WebCore/dom/ContainerNodeAlgorithms.cpp:115 #10 0x00007ffff28f9028 in WebCore::notifyChildNodeRemoved (insertionPoint=..., child=...) at ../../Source/WebCore/dom/ContainerNodeAlgorithms.cpp:156 #11 0x00007ffff28ebd92 in WebCore::ContainerNode::notifyChildRemoved (this=0x7fffd5beaa90, child=..., previousSibling=0x7fffd5bf5e60, nextSibling=0x0, source=WebCore::ContainerNode::ChildChangeSourceParser) at ../../Source/WebCore/dom/ContainerNode.cpp:347 #12 0x00007ffff28ed08a in WebCore::ContainerNode::parserRemoveChild (this=0x7fffd5beaa90, oldChild=...) at ../../Source/WebCore/dom/ContainerNode.cpp:611 #13 0x00007ffff2ccb1cf in WebCore::insert (task=...) at ../../Source/WebCore/html/parser/HTMLConstructionSite.cpp:102 #14 0x00007ffff2ccb4e1 in WebCore::executeInsertAlreadyParsedChildTask (task=...) at ../../Source/WebCore/html/parser/HTMLConstructionSite.cpp:136 #15 0x00007ffff2ccb598 in WebCore::executeTask (task=...) at ../../Source/WebCore/html/parser/HTMLConstructionSite.cpp:156 #16 0x00007ffff2ccb918 in WebCore::HTMLConstructionSite::executeQueuedTasks (this=0x7fffd5ad2a40) at ../../Source/WebCore/html/parser/HTMLConstructionSite.cpp:202 #17 0x00007ffff2cff2c7 in WebCore::HTMLTreeBuilder::constructTree (this=0x7fffd5ad2a20, token=...) at ../../Source/WebCore/html/parser/HTMLTreeBuilder.cpp:355 #18 0x00007ffff2cd55d8 in WebCore::HTMLDocumentParser::constructTreeFromHTMLToken (this=0x7fffd5826140, rawToken=...) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:321 #19 0x00007ffff2cd5208 in WebCore::HTMLDocumentParser::pumpTokenizer (this=0x7fffd5826140, mode=WebCore::HTMLDocumentParser::AllowYield) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:276 #20 0x00007ffff2cd4ac7 in WebCore::HTMLDocumentParser::pumpTokenizerIfPossible (this=0x7fffd5826140, mode=WebCore::HTMLDocumentParser::AllowYield) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:166 #21 0x00007ffff2cd60d0 in WebCore::HTMLDocumentParser::resumeParsingAfterScriptExecution (this=0x7fffd5826140) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:496 #22 0x00007ffff2cd639d in WebCore::HTMLDocumentParser::notifyFinished (this=0x7fffd5826140, cachedResource=0x7fffd580f9c0) at ../../Source/WebCore/html/parser/HTMLDocumentParser.cpp:536 #23 0x00007ffff2f10f7d in WebCore::CachedResource::checkNotify (this=0x7fffd580f9c0) at ../../Source/WebCore/loader/cache/CachedResource.cpp:297 #24 0x00007ffff2f11126 in WebCore::CachedResource::error (this=0x7fffd580f9c0, status=WebCore::CachedResource::LoadError) at ../../Source/WebCore/loader/cache/CachedResource.cpp:323 #25 0x00007ffff2ebdb09 in WebCore::SubresourceLoader::didFail (this=0x7fffd5825240, error=...) at ../../Source/WebCore/loader/SubresourceLoader.cpp:400 #26 0x00007ffff2eb82f2 in WebCore::ResourceLoader::didFail (this=0x7fffd5825240, error=...) at ../../Source/WebCore/loader/ResourceLoader.cpp:638 #27 0x00007ffff38e3b29 in WebCore::sendRequestCallback (result=0x8dc8e0, data=0x7fffd5b87d00) at ../../Source/WebCore/platform/network/soup/ResourceHandleSoup.cpp:684 #28 0x00007fffe947d453 in g_task_return_now (task=0x8dc8e0) at gtask.c:1088 #29 0x00007fffe947daee in g_task_return (task=0x8dc8e0, type=<optimized out>) at gtask.c:1146 #30 0x00007fffe60252ac in http_input_stream_ready_cb (source=0x652140, result=0x8dccf0, user_data=0x8dc8e0) at soup-request-http.c:126 #31 0x00007fffe947d453 in g_task_return_now (task=0x8dccf0) at gtask.c:1088 #32 0x00007fffe947daee in g_task_return (task=0x8dccf0, type=<optimized out>) at gtask.c:1146 #33 0x00007fffe6029dba in async_send_request_return_result (item=0xa16730, stream=0x94b890, error=0x0) at soup-session.c:3906 #34 0x00007fffe91b7034 in _g_closure_invoke_va (closure=0x0, closure@entry=0x8503f0, return_value=return_value@entry=0x0, instance=0x0, instance@entry=0xa15b90, args=0x7fffed3654fd <write+45>, args@entry=0x7fffffffce20, n_params=-312260256, param_types=0x1) at gclosure.c:831 #35 0x00007fffe91d0ad7 in g_signal_emit_valist (instance=0xa15b90, signal_id=<optimized out>, detail=0, var_args=var_args@entry=0x7fffffffce20) at gsignal.c:3214 #36 0x00007fffe91d142f in g_signal_emit (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>) at gsignal.c:3361 #37 0x00007fffe602eeb9 in soup_session_process_queue_item (session=0x0, item=0xa16730, should_cleanup=0x0, loop=-315206403) at soup-session.c:2058 #38 0x00007fffe602f7fd in async_run_queue (session=0x652140) at soup-session.c:2106 #39 0x00007fffe602f9b5 in connect_async_complete (object=<optimized out>, result=0x8dcdc0, user_data=0xa16730) at soup-session.c:1812 #40 0x00007fffe947d453 in g_task_return_now (task=0x8dcdc0) at gtask.c:1088 #41 0x00007fffe947daee in g_task_return (task=0x8dcdc0, type=<optimized out>) at gtask.c:1146 #42 0x00007fffe600b0c8 in socket_connect_finished (task=0x8dcdc0, error=0x5dd4b0, sock=<optimized out>) at soup-connection.c:349 #43 0x00007fffe600b1ba in socket_connect_complete (object=<optimized out>, result=0x8df1c0, user_data=0x8dcdc0) at soup-connection.c:374 #44 0x00007fffe947d453 in g_task_return_now (task=0x8df1c0) at gtask.c:1088 #45 0x00007fffe947daee in g_task_return (task=0x8df1c0, type=<optimized out>) at gtask.c:1146 #46 0x00007fffe6032a4f in async_connected (client=0x94b960, result=0x8df0f0, data=0x8df1c0) at soup-socket.c:924 #47 0x00007fffe947d453 in g_task_return_now (task=0x8df0f0) at gtask.c:1088 #48 0x00007fffe947daee in g_task_return (task=0x8df0f0, type=<optimized out>) at gtask.c:1146 #49 0x00007fffe9474505 in g_socket_client_enumerator_callback (object=<optimized out>, result=<optimized out>, user_data=0xb14b70) at gsocketclient.c:1602 #50 0x00007fffe947d453 in g_task_return_now (task=0x8dce90) at gtask.c:1088 #51 0x00007fffe947daee in g_task_return (task=0x8dce90, type=<optimized out>) at gtask.c:1146 #52 0x00007fffe9467b75 in complete_async (task=0x8dce90) at gproxyaddressenumerator.c:319 #53 0x00007fffe947d453 in g_task_return_now (task=0x8df360) at gtask.c:1088 #54 0x00007fffe947daee in g_task_return (task=0x8df360, type=<optimized out>) at gtask.c:1146 #55 0x00007fffe5ffbda5 in got_addresses (addr=<optimized out>, status=<optimized out>, user_data=0x8df360) at soup-address.c:1180 #56 0x00007fffe5ffb111 in complete_resolve_async (res_data=0x4e4140, status=2) at soup-address.c:712 #57 0x00007fffe5ffb945 in lookup_resolved (source=<optimized out>, result=0x8dc9b0, user_data=0x4e4140) at soup-address.c:753 #58 0x00007fffe947d453 in g_task_return_now (task=0x8dc9b0) at gtask.c:1088 #59 0x00007fffe947d489 in complete_in_idle_cb (task=0x8dc9b0) at gtask.c:1102 #60 0x00007fffe8eb7a9d in g_main_dispatch (context=0x492400) at gmain.c:3122 #61 g_main_context_dispatch (context=context@entry=0x492400) at gmain.c:3737 #62 0x00007fffe8eb7e70 in g_main_context_iterate (context=0x492400, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3808 #63 0x00007fffe8eb8192 in g_main_loop_run (loop=0x584b40) at gmain.c:4002 #64 0x00007ffff406313f in WTF::RunLoop::run () at ../../Source/WTF/wtf/glib/RunLoopGLib.cpp:67 #65 0x00007ffff2300a23 in WebKit::ChildProcessMain<WebKit::WebProcess, WebKit::WebProcessMain> (argc=2, argv=0x7fffffffd5b8) at ../../Source/WebKit2/Shared/unix/ChildProcessMain.h:61 #66 0x00007ffff2300880 in WebKit::WebProcessMainUnix (argc=2, argv=0x7fffffffd5b8) at ../../Source/WebKit2/WebProcess/gtk/WebProcessMainGtk.cpp:77 #67 0x00000000004008da in main (argc=2, argv=0x7fffffffd5b8) at ../../Source/WebKit2/WebProcess/EntryPoint/unix/WebProcessMain.cpp:44
I can't reproduce this crash here with my debug build of ToT. Can you check it still happens for you?