Bug 177800 – [GTK] Network process crash in WebKit::ChildProcess::didReceiveInvalidMessage

• Status: RESOLVED
• Resolution: WONTFIX
• Component: WebKitGTK

[Michael Catanzaro]

Created attachment 322498 [details]
Backtrace

We have 2641 reports of this network process crash in WebKit::ChildProcess::didReceiveInvalidMessage:

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 WTFCrash at /usr/src/debug/webkitgtk-2.18.0/Source/WTF/wtf/Assertions.cpp:278
 #1 WebKit::ChildProcess::didReceiveInvalidMessage at /usr/src/debug/webkitgtk-2.18.0/Source/WebKit/Shared/ChildProcess.cpp:206
 #2 IPC::Connection::dispatchMessage at /usr/src/debug/webkitgtk-2.18.0/Source/WebKit/Platform/IPC/Connection.cpp:942
 #3 IPC::Connection::dispatchOneMessage at /usr/src/debug/webkitgtk-2.18.0/Source/WebKit/Platform/IPC/Connection.cpp:959
 #4 WTF::Function<void ()>::operator()() const at /usr/src/debug/webkitgtk-2.18.0/Source/WTF/wtf/Function.h:56
 #5 WTF::RunLoop::performWork at /usr/src/debug/webkitgtk-2.18.0/Source/WTF/wtf/RunLoop.cpp:106
 #6 WTF::RunLoop::<lambda(gpointer)>::operator() at /usr/src/debug/webkitgtk-2.18.0/Source/WTF/wtf/glib/RunLoopGLib.cpp:68
 #7 WTF::RunLoop::<lambda(gpointer)>::_FUN(gpointer) at /usr/src/debug/webkitgtk-2.18.0/Source/WTF/wtf/glib/RunLoopGLib.cpp:70
 #12 WTF::RunLoop::run at /usr/src/debug/webkitgtk-2.18.0/Source/WTF/wtf/glib/RunLoopGLib.cpp:96
 #13 WebKit::ChildProcessMain<WebKit::NetworkProcess, WebKit::NetworkProcessMain> at /usr/src/debug/webkitgtk-2.18.0/Source/WebKit/Shared/unix/ChildProcessMain.h:61

I'm attaching a full backtrace, but I'm afraid it won't be enough to determine which message is invalid. Note in particular frame three:

#3  0x00007faabaf13595 in IPC::Connection::dispatchOneMessage (this=0x7faaa64f7000) at /usr/src/debug/webkitgtk-2.18.0/Source/WebKit/Platform/IPC/Connection.cpp:959
        message = std::unique_ptr<IPC::Decoder> containing 0x0

[Zan Dobersek]

(In reply to Michael Catanzaro from comment #0)
> #3  0x00007faabaf13595 in IPC::Connection::dispatchOneMessage
> (this=0x7faaa64f7000) at
> /usr/src/debug/webkitgtk-2.18.0/Source/WebKit/Platform/IPC/Connection.cpp:959
>         message = std::unique_ptr<IPC::Decoder> containing 0x0

That's the initial value. You can see in frame #2 that a non-null std::unique_ptr<IPC::Decoder> is passed to dispatchMessage():

> #2  0x00007faabaf12d7a in IPC::Connection::dispatchMessage (this=0x7faaa64f7000, message=std::unique_ptr<IPC::Decoder> containing 0x7faaa64ee000) at /usr/src/debug/webkitgtk-2.18.0/Source/WebKit/Platform/IPC/Connection.cpp:942

[Michael Catanzaro]

This happens when you update WebKit while the browser is running.