Bug 165984 – [GTK] WebProcess from WebKitGtk+ 2.15.2 SIGSEGVs in WTF::RefCounted<WebCore::TimingFunction>::deref() const () at Source/WTF/wtf/RefCounted.h:145

• Status: NEW
• Component: WebKitGTK

[Andres Gomez Garcia]

Created attachment 297382 [details]
BT from gdb

I'm using WebKitGtk+ with my own JHBuild setting:
https://github.com/tanty/jhbuild-epiphany/tree/master

Epiphany 3.20.3 and WebKit 2.15.2 with the attached patches for bug 164049, bug 165200, bug 165283 and bug 164052, applied.

I'm running Epiphany with the dconf key:

"process-model" = "shared-secondary-process"

And the env variable:

"export LIBGL_DRI3_DISABLE=1"

The compilation was done with CMake args:

'-DENABLE_THREADED_COMPOSITOR=OFF -DUSE_LD_GOLD=OFF -DPORT=GTK -DCMAKE_BUILD_TYPE=Release -DENABLE_MINIBROWSER=ON -DCMAKE_C_FLAGS_RELEASE="-O0 -g1 -DNDEBUG -DG_DEBUG=fatal-criticals -DG_DISABLE_CAST_CHECKS" -DCMAKE_CXX_FLAGS_RELEASE="-O0 -g1 -DNDEBUG -DG_DEBUG=fatal-criticals -DG_DISABLE_CAST_CHECKS"'

After visiting several pages, eventually, the WebProcess hits a SIGSEV.

This bug is not reproducible in a predictable way.

The bug just happened after restoring a fullscreen youtube video to its original size inside a window.

[Andres Gomez Garcia]

Created attachment 297383 [details]
BT from gdb for the UIProcess

At the same time, the UIProcess also SIGSEVed with:

The program with pid 17971 received an X Window System error.                                                                                 [8/9357]
The error was 'BadDamage (invalid Damage parameter)'.
  (Details: serial 1296483 error_code 151 request_code 143 minor_code 2)
1   0x7ffff211f6c5 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libjavascriptcoregtk-4.0.so.18(WTFCrash+0x1e) [0x7ffff211f6c5]
2   0x7ffff4c31d9e /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x21ced9e) [0x7ffff4c31d9e]
3   0x7ffff4c31a92 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x21cea92) [0x7ffff4c31a92]
4   0x7ffff4c31abe /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x21ceabe) [0x7ffff4c31abe]
5   0x7ffff75d746d /usr/lib/x86_64-linux-gnu/libX11.so.6(_XError+0x11d) [0x7ffff75d746d]
6   0x7ffff75d43a7 /usr/lib/x86_64-linux-gnu/libX11.so.6(+0x423a7) [0x7ffff75d43a7]
7   0x7ffff75d4465 /usr/lib/x86_64-linux-gnu/libX11.so.6(+0x42465) [0x7ffff75d4465]
8   0x7ffff75d5420 /usr/lib/x86_64-linux-gnu/libX11.so.6(_XReply+0x230) [0x7ffff75d5420]
9   0x7ffff75d0cad /usr/lib/x86_64-linux-gnu/libX11.so.6(XSync+0x4d) [0x7ffff75d0cad]
10  0x7ffff3528545 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0xac5545) [0x7ffff3528545]
11  0x7ffff34f4b5f /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0xa91b5f) [0x7ffff34f4b5f]
12  0x7ffff349c56c /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0xa3956c) [0x7ffff349c56c]
13  0x7ffff31578c5 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x6f48c5) [0x7ffff31578c5]
14  0x7ffff349253f /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0xa2f53f) [0x7ffff349253f]
15  0x7ffff3491d72 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0xa2ed72) [0x7ffff3491d72]
16  0x7ffff349482c /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0xa3182c) [0x7ffff349482c]
17  0x7ffff3494848 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0xa31848) [0x7ffff3494848]
18  0x7ffff317adb6 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x717db6) [0x7ffff317adb6]
19  0x7ffff317c639 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x719639) [0x7ffff317c639]
20  0x7ffff31762b5 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x7132b5) [0x7ffff31762b5]
21  0x7ffff3156d80 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x6f3d80) [0x7ffff3156d80]
22  0x7ffff3157217 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x6f4217) [0x7ffff3157217]
23  0x7ffff3156c6a /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x6f3c6a) [0x7ffff3156c6a]
24  0x7ffff31b72bd /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x7542bd) [0x7ffff31b72bd]
25  0x7ffff30518e8 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x5ee8e8) [0x7ffff30518e8]
26  0x7ffff3058a40 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libwebkit2gtk-4.0.so.37(+0x5f5a40) [0x7ffff3058a40]
27  0x7ffff2129987 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libjavascriptcoregtk-4.0.so.18(_ZNK3WTF8FunctionIFvvEEclEv+0x37) [0x7ff$
f2129987]
28  0x7ffff213a796 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libjavascriptcoregtk-4.0.so.18(_ZN3WTF7RunLoop11performWorkEv+0xce) [0x7
ffff213a796]
29  0x7ffff217ae5e /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libjavascriptcoregtk-4.0.so.18(+0x2488e5e) [0x7ffff217ae5e]
30  0x7ffff217ae82 /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libjavascriptcoregtk-4.0.so.18(+0x2488e82) [0x7ffff217ae82]
31  0x7ffff217adfe /home/tanty/no-backup/personal/webkit/epiphany/install/lib/libjavascriptcoregtk-4.0.so.18(+0x2488dfe) [0x7ffff217adfe]

Thread 1 "epiphany" received signal SIGSEGV, Segmentation fault.
0x00007ffff211f6ca in WTFCrash () at /home/tanty/no-backup/personal/webkit/epiphany/jhbuild-checkout/webkitgtk-2.15.2/Source/WTF/wtf/Assertions.cpp:323
323         *(int *)(uintptr_t)0xbbadbeef = 0;

[Andres Gomez Garcia]

Notice that I had also applied the patch suggested at:
https://bugs.webkit.org/show_bug.cgi?id=165656#c18

Therefore, this may be a DUPLICATED of bug 165656