Bug 176305 - Crash in WebCore::RegisteredEventListener::callback
Summary: Crash in WebCore::RegisteredEventListener::callback
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: UI Events (show other bugs)
Version: Other
Hardware: PC Linux
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-09-03 07:36 PDT by Michael Catanzaro
Modified: 2019-02-03 12:16 PST (History)
0 users

See Also:

Attachments
Backtrace (124.24 KB, text/plain)
2017-09-03 07:36 PDT, Michael Catanzaro 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Catanzaro 2017-09-03 07:36:25 PDT 
Created attachment 319778 [details]
Backtrace

WebCore::RegisteredEventListener::callback:

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 WTF::Ref<WebCore::EventListener>::operator WebCore::EventListener& at /usr/src/debug/webkitgtk-2.16.3/Source/WTF/wtf/Ref.h:139
 #1 WebCore::RegisteredEventListener::callback at /usr/src/debug/webkitgtk-2.16.3/Source/WebCore/dom/RegisteredEventListener.h:51
 #2 WebCore::EventListenerIterator::nextListener at /usr/src/debug/webkitgtk-2.16.3/Source/WebCore/dom/EventListenerMap.cpp:270
 #3 WebCore::EventTarget::visitJSEventListeners at /usr/src/debug/webkitgtk-2.16.3/Source/WebCore/dom/EventTarget.cpp:298
 #4 WebCore::JSEventTarget::visitAdditionalChildren at /usr/src/debug/webkitgtk-2.16.3/Source/WebCore/bindings/js/JSEventTargetCustom.cpp:87
 #5 WebCore::JSEventTarget::visitChildren at /usr/src/debug/webkitgtk-2.16.3/x86_64-redhat-linux-gnu/DerivedSources/WebCore/JSEventTarget.cpp:304
 #6 WebCore::JSNode::visitChildren at /usr/src/debug/webkitgtk-2.16.3/x86_64-redhat-linux-gnu/DerivedSources/WebCore/JSNode.cpp:928
 #7 JSC::SlotVisitor::visitChildren at /usr/src/debug/webkitgtk-2.16.3/Source/JavaScriptCore/heap/SlotVisitor.cpp:396
 #8 JSC::SlotVisitor::<lambda(JSC::MarkStackArray&)>::operator() at /usr/src/debug/webkitgtk-2.16.3/Source/JavaScriptCore/heap/SlotVisitor.cpp:495
 #9 JSC::SlotVisitor::forEachMarkStack<JSC::SlotVisitor::drain(WTF::MonotonicTime)::<lambda(JSC::MarkStackArray&)> > at /usr/src/debug/webkitgtk-2.16.3/Source/JavaScriptCore/heap/SlotVisitorInlines.h:116

Only one report of this total. Better backtrace attached.