Bug 200613 – [GTK] Crash in WebCore::CoordinatedGraphicsLayer::flushCompositingStateForThisLayerOnly

• Status: NEW
• Component: WebKitGTK

[Michael Catanzaro]

#0  0x00007fcd49db7edf in std::__uniq_ptr_impl<Nicosia::BackingStore::Impl, std::default_delete<Nicosia::BackingStore::Impl> >::_M_ptr() const (this=0x50000000010) at /usr/include/c++/9.1.0/bits/unique_ptr.h:357
        layerState = <optimized out>
        hasActiveTransformAnimation = false
#1  0x00007fcd49db7edf in std::unique_ptr<Nicosia::BackingStore::Impl, std::default_delete<Nicosia::BackingStore::Impl> >::get() const (this=0x50000000010) at /usr/include/c++/9.1.0/bits/unique_ptr.h:358
        layerState = <optimized out>
        hasActiveTransformAnimation = false
#2  0x00007fcd49db7edf in std::unique_ptr<Nicosia::BackingStore::Impl, std::default_delete<Nicosia::BackingStore::Impl> >::operator*() const (this=0x50000000010) at /usr/include/c++/9.1.0/bits/unique_ptr.h:343
        layerState = <optimized out>
        hasActiveTransformAnimation = false
#3  0x00007fcd49db7edf in Nicosia::BackingStore::impl() const (this=0x50000000000)
    at ../Source/WebCore/platform/graphics/nicosia/NicosiaPlatformLayer.h:340
        layerState = <optimized out>
        hasActiveTransformAnimation = false
#4  0x00007fcd49db7edf in WebCore::CoordinatedGraphicsLayer::flushCompositingStateForThisLayerOnly() (this=
    0x7fcc30ed9800) at ../Source/WebCore/platform/graphics/texmap/coordinated/CoordinatedGraphicsLayer.cpp:744
        layerState = <optimized out>
        hasActiveTransformAnimation = false
#5  0x00007fcd49d87759 in WebKit::CompositingCoordinator::flushPendingLayerChanges() (this=0x7fccd01c8d38)
    at DerivedSources/ForwardingHeaders/wtf/DumbPtrTraits.h:43
        protector = {m_scopedVariable = @0x7fccd01c8dd2, m_originalValue = false}
        didSync = <optimized out>
        coordinatedLayer = <optimized out>
#6  0x00007fcd49d8828f in WebKit::LayerTreeHost::layerFlushTimerFired() (this=0x7fccd01c8ce8)
    at ../Source/WebKit/WebProcess/WebPage/CoordinatedGraphics/LayerTreeHost.cpp:148
        didSync = <optimized out>
#7  0x00007fcd49d88343 in WebKit::LayerTreeHost::renderNextFrame(bool)
    (this=0x7fccd01c8ce8, forceRepaint=<optimized out>)
    at ../Source/WebKit/WebProcess/WebPage/CoordinatedGraphics/LayerTreeHost.cpp:449
        scheduledWhileWaitingForRenderer = true
#8  0x00007fcd479e4018 in WTF::RunLoop::TimerBase::<lambda(gpointer)>::operator()
    (__closure=0x0, userData=0x7fcc30c8d260) at ../Source/WTF/wtf/glib/RunLoopGLib.cpp:171
        timer = 0x7fcc30c8d260
        source = 0x558df1c6ef60
#9  0x00007fcd479e4018 in WTF::RunLoop::TimerBase::<lambda(gpointer)>::_FUN(gpointer) ()
    at ../Source/WTF/wtf/glib/RunLoopGLib.cpp:177
#10 0x00007fcd4803348e in g_main_dispatch (context=0x558df0f9ead0) at ../glib/gmain.c:3179
        dispatch = 
    0x7fcd479e3a20 <WTF::<lambda(GSource*, GSourceFunc, gpointer)>::_FUN(GSource *, GSourceFunc, gpointer)>
        prev_source = 0x0
        was_in_call = 0
        user_data = 0x7fcc30c8d260
        callback = 0x7fcd479e4000 <WTF::RunLoop::TimerBase::<lambda(gpointer)>::_FUN(gpointer)>
        cb_funcs = 0x7fcd48107280 <g_source_callback_funcs>
        cb_data = 0x558df1cc00e0
        need_destroy = <optimized out>
        source = 0x558df1c6ef60
        current = 0x558df0fa7c00
        i = 0
        __FUNCTION__ = "g_main_dispatch"
#11 0x00007fcd4803348e in g_main_context_dispatch (context=context@entry=0x558df0f9ead0) at ../glib/gmain.c:3844
#12 0x00007fcd48033840 in g_main_context_iterate
--Type <RET> for more, q to quit, c to continue without paging--c
    (context=0x558df0f9ead0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../glib/gmain.c:3917
        max_priority = 2147483647
        timeout = 17
        some_ready = 1
        nfds = <optimized out>
        allocated_nfds = <optimized out>
        fds = 0x558df10cb9d0
#13 0x00007fcd48033b33 in g_main_loop_run (loop=0x558df1041090) at ../glib/gmain.c:4111
        __FUNCTION__ = "g_main_loop_run"
#14 0x00007fcd479e4480 in WTF::RunLoop::run() () at ../Source/WTF/wtf/glib/RunLoopGLib.cpp:96
        runLoop = @0x7fcd410fa000: {<WTF::FunctionDispatcher> = {<WTF::ThreadSafeRefCounted<WTF::FunctionDispatcher, (WTF::DestructionThread)0>> = {<WTF::ThreadSafeRefCountedBase> = {m_refCount = {<std::__atomic_base<unsigned int>> = {static _S_alignment = 4, _M_i = 29}, static is_always_lock_free = true}}, <No data fields>}, _vptr.FunctionDispatcher = 0x7fcd47cb2ad8 <vtable for WTF::RunLoop+16>}, m_functionQueueLock = {static isHeldBit = 1 '\001', static hasParkedBit = 2 '\002', m_byte = {value = {<std::__atomic_base<unsigned char>> = {static _S_alignment = 1, _M_i = 0 '\000'}, static is_always_lock_free = true}}}, m_functionQueue = {m_start = 24, m_end = 24, m_buffer = {<WTF::VectorBufferBase<WTF::Function<void()> >> = {m_buffer = 0x7fcc0ec4e000, m_capacity = 27, m_size = 0}, <No data fields>}}, m_mainContext = {m_ptr = 0x558df0f9ead0}, m_mainLoops = {<WTF::VectorBuffer<WTF::GRefPtr<_GMainLoop>, 0>> = {<WTF::VectorBufferBase<WTF::GRefPtr<_GMainLoop> >> = {m_buffer = 0x7fcd410fc180, m_capacity = 16, m_size = 1}, <No data fields>}, <No data fields>}, m_source = {m_ptr = 0x558df1087d90}}
        mainContext = 0x558df0f9ead0
        innermostLoop = 0x558df1041090
        nestedMainLoop = <optimized out>
#15 0x00007fcd49d9403a in WebKit::AuxiliaryProcessMain<WebKit::WebProcess, WebKit::WebProcessMain>(int, char**) (argc=3, argv=<optimized out>) at ../Source/WebKit/Shared/unix/AuxiliaryProcessMain.h:47