Bug 164931 - [GTK] Crash in WebCore::AccessibilityRenderObject::remoteSVGRootElement
Summary: [GTK] Crash in WebCore::AccessibilityRenderObject::remoteSVGRootElement
Status: RESOLVED WONTFIX
Alias: None
Product: WebKit
Classification: Unclassified
Component: Accessibility (show other bugs)
Version: WebKit Nightly Build
Hardware: PC Linux
: P2 Normal
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2016-11-18 09:43 PST by Michael Catanzaro
Modified: 2019-01-28 11:53 PST (History)
4 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Catanzaro 2016-11-18 09:43:47 PST 
Web process crash in WebCore::AccessibilityRenderObject::remoteSVGRootElement:

Truncated backtrace:
Thread no. 0 (10 frames)
 #0 WebCore::AccessibilityRenderObject::remoteSVGRootElement(WebCore::AccessibilityRenderObject::CreationChoice) const at /usr/src/debug/webkitgtk-2.13.1/Source/WebCore/rendering/RenderImage.h:138
 #4 WebCore::AccessibilityRenderObject::detachRemoteSVGRoot() at /usr/src/debug/webkitgtk-2.13.1/Source/WebCore/accessibility/AccessibilityRenderObject.cpp:2976
 #5 WebCore::AccessibilityRenderObject::detach(WebCore::AccessibilityDetachmentType, WebCore::AXObjectCache*) at /usr/src/debug/webkitgtk-2.13.1/Source/WebCore/accessibility/AccessibilityRenderObject.cpp:147
 #6 WebCore::AXObjectCache::~AXObjectCache() at /usr/src/debug/webkitgtk-2.13.1/Source/WebCore/accessibility/AXObjectCache.cpp:193
 #7 WebCore::Document::clearAXObjectCache() at /usr/include/c++/6.1.1/bits/unique_ptr.h:76
 #11 WebCore::Document::destroyRenderTree() at /usr/src/debug/webkitgtk-2.13.1/Source/WebCore/dom/Document.cpp:2287
 #12 WebCore::Document::prepareForDestruction() at /usr/src/debug/webkitgtk-2.13.1/Source/WebCore/dom/Document.cpp:2341
 #13 WebCore::Frame::setView(WTF::RefPtr<WebCore::FrameView>&&) at /usr/src/debug/webkitgtk-2.13.1/Source/WebCore/page/Frame.cpp:249
 #14 WebCore::Frame::createView(WebCore::IntSize const&, WebCore::Color const&, bool, WebCore::IntSize const&, WebCore::IntRect const&, bool, WebCore::ScrollbarMode, bool, WebCore::ScrollbarMode, bool) at /usr/src/debug/webkitgtk-2.13.1/Source/WebCore/page/Frame.cpp:864
 #15 WebKit::WebFrameLoaderClient::transitionToCommittedForNewPage() at /usr/src/debug/webkitgtk-2.13.1/Source/WebKit2/WebProcess/WebCoreSupport/WebFrameLoaderClient.cpp:1327

Full backtrace available in the downstream bug.
Comment 1 Radar WebKit Bug Importer 2016-11-18 09:44:01 PST 
<rdar://problem/29333417>
Comment 2 Joanmarie Diggs 2019-01-28 11:01:23 PST 
Is this one still reproducible. It sounds familiar to me and I thought it got fixed.
Comment 3 Michael Catanzaro 2019-01-28 11:53:28 PST 
A quick search for more recent bugs doesn't turn up anything. Probably obsolete -> closing.