Originally I was in page B and then typed in a new url for page A and started loading it. Before the page loading was finished I returned to page B with history "back" and waited a bit for page B to load and then clicked history "next". This caused following crash: Versions: webkit-gtk-1.2.1, epiphany-2.30.1 and libsoup-2.30.1 #6 <signal handler called> #7 WebCore::Document::frame (this=0x0) at WebCore/dom/Document.h:448 #8 WebCore::Document::ownerElement (this=0x0) at WebCore/dom/Document.cpp:3113 #9 0x00007fbbbc5768f1 in WebCore::FrameView::windowClipRect (this= 0x7fbb937ed000, clipToContents=<value optimized out>) at WebCore/page/FrameView.cpp:1571 #10 0x00007fbbbc5bc60d in WebCore::ScrollView::scrollContents (this= 0x7fbb937ed000, scrollDelta=...) at WebCore/platform/ScrollView.cpp:496 #11 0x00007fbbbc5bc94a in WebCore::ScrollView::valueChanged (this=0x0, scrollbar=<value optimized out>) at WebCore/platform/ScrollView.cpp:268 #12 0x00007fbbbc576708 in WebCore::FrameView::valueChanged (this= 0x7fbb937ed000, bar=0x7fbb79da1270) at WebCore/page/FrameView.cpp:1611 #13 0x00007fbbbc5c0291 in WebCore::Scrollbar::setCurrentPos (this= 0x7fbb79da1270, pos=<value optimized out>) at WebCore/platform/Scrollbar.cpp:295 #14 0x00007fbbbc5c03ef in WebCore::Scrollbar::setValue (this=0x7fbb79da1270, v=0) at WebCore/platform/Scrollbar.cpp:103 #15 0x00007fbbb8e3248a in IA__g_closure_invoke (closure=0x450bee0, return_value=0x0, n_param_values=<value optimized out>, param_values= 0x45c0f40, invocation_hint=0x7fffeb679c90) at gclosure.c:767 #16 0x00007fbbb8e46511 in signal_emit_unlocked_R (node=0x1614c50, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3248 #17 0x00007fbbb8e47af0 in IA__g_signal_emit_valist (instance=0x453f050, signal_id=<value optimized out>, detail=0, var_args=0x7fffeb679e80) at gsignal.c:2981 #18 0x00007fbbb8e48083 in IA__g_signal_emit (instance=0x0, signal_id= 3949435136, detail=1010) at gsignal.c:3038 #19 0x00007fbbbb710f1a in IA__gtk_adjustment_value_changed (adjustment= 0x453f050) at gtkadjustment.c:668 #20 0x00007fbbbc87e9d6 in WebCore::ScrollbarGtk::detachAdjustment (this= 0x7fbb956a5dd0) at WebCore/platform/gtk/ScrollbarGtk.cpp:126 #21 0x00007fbbbc87eaad in ~ScrollbarGtk (this=0x0, __in_chrg=<value optimized out>) at WebCore/platform/gtk/ScrollbarGtk.cpp:92 #22 0x00007fbbbc5bdf98 in derefIfNotNull<WebCore::Scrollbar> (this= 0x7fbb91efa280, hasBar=<value optimized out>) at ./JavaScriptCore/wtf/PassRefPtr.h:53 #23 WTF::RefPtr<WebCore::Scrollbar>::operator= (this=0x7fbb91efa280, hasBar=<value optimized out>) at ./JavaScriptCore/wtf/RefPtr.h:123 #24 WebCore::ScrollView::setHasVerticalScrollbar (this=0x7fbb91efa280, hasBar=<value optimized out>) at WebCore/platform/ScrollView.cpp:101 #25 0x00007fbbbc5798eb in ~FrameView (this=0x7fbb91efa280, __in_chrg=<value optimized out>) at WebCore/page/FrameView.cpp:165 #26 0x00007fbbbc56d1c5 in derefIfNotNull<WebCore::FrameView> (this= 0x7fbba105b800, view=) at ./JavaScriptCore/wtf/PassRefPtr.h:53 #27 WTF::RefPtr<WebCore::FrameView>::operator= (this=0x7fbba105b800, view=) at ./JavaScriptCore/wtf/RefPtr.h:131 #28 WebCore::Frame::setView (this=0x7fbba105b800, view=) at WebCore/page/Frame.cpp:262 #29 0x00007fbbbc513c61 in WebCore::FrameLoader::open (this=0x7fbba105b850, cachedFrame=...) at WebCore/loader/FrameLoader.cpp:2741 #30 0x00007fbbbc44cac0 in WebCore::CachedFrame::open (this=0x7fbb9ac886c0) at WebCore/history/CachedFrame.cpp:168 #31 0x00007fbbbc44df65 in WebCore::CachedPage::restore (this=0x7fbb8eb98be8, page=0x7fffeb679900) at WebCore/history/CachedPage.cpp:74 #32 0x00007fbbbc512cfe in WebCore::FrameLoader::open (this=0x7fbba105b850, cachedPage=...) at WebCore/loader/FrameLoader.cpp:2700 #33 0x00007fbbbc517717 in WebCore::FrameLoader::commitProvisionalLoad (this= 0x7fbba105b850, prpCachedPage=<value optimized out>) at WebCore/loader/FrameLoader.cpp:2466 #34 0x00007fbbbc5180d2 in WebCore::FrameLoader::loadProvisionalItemFromCachedPage (this=0x7fbba105b850) at WebCore/loader/FrameLoader.cpp:3655 #35 0x00007fbbbc51835d in WebCore::FrameLoader::continueLoadAfterNavigationPolicy (this=0x7fbba105b850, formState=) at WebCore/loader/FrameLoader.cpp:3527 #36 0x00007fbbbc5183ed in WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy (argument=0x0, request=..., formState=<value optimized out>, shouldContinue=242) at WebCore/loader/FrameLoader.cpp:3464 #37 0x00007fbbbc530f40 in WebCore::PolicyChecker::checkNavigationPolicy (this= 0x7fbba105b860, request=..., loader=0x7fbb955c7000, formState=) at WebCore/loader/PolicyChecker.cpp:68 #38 0x00007fbbbc518799 in WebCore::FrameLoader::loadWithDocumentLoader (this= 0x7fbba105b850, loader=0x7fbb955c7000, type=<value optimized out>, prpFormState=<value optimized out>) at WebCore/loader/FrameLoader.cpp:2098 #39 0x00007fbbbc51b69d in WebCore::FrameLoader::navigateToDifferentDocument ( this=0x7fbba105b850, item=<value optimized out>, loadType= WebCore::FrameLoadTypeForward) at WebCore/loader/FrameLoader.cpp:3747 #40 0x00007fbbbc5207f8 in WebCore::HistoryController::recursiveGoToItem (this= 0x7fbba105b978, item=0x7fbb8255d800, fromItem=<value optimized out>, type= WebCore::FrameLoadTypeForward) at WebCore/loader/HistoryController.cpp:589 #41 0x00007fbbbc5874c7 in WebCore::Page::goToItem (this=0x7fbba1052ea0, item= 0x7fbb8255d800, type=WebCore::FrameLoadTypeForward) at WebCore/page/Page.cpp:308 #42 0x00007fbbbc587614 in WebCore::Page::goForward (this=0x7fbba1052ea0) at WebCore/page/Page.cpp:248 #43 0x00007fbbb8e3248a in IA__g_closure_invoke (closure=0x16b7890, return_value=0x0, n_param_values=<value optimized out>, param_values= 0x49f8820, invocation_hint=0x7fffeb67acf0) at gclosure.c:767 #44 0x00007fbbb8e45e80 in signal_emit_unlocked_R (node=0x16b7920, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3178 #45 0x00007fbbb8e47af0 in IA__g_signal_emit_valist (instance=0x163e620, signal_id=<value optimized out>, detail=0, var_args=0x7fffeb67aee0) at gsignal.c:2981 #46 0x00007fbbb8e48083 in IA__g_signal_emit (instance=0x0, signal_id= 3949435136, detail=1010) at gsignal.c:3038 #47 0x00007fbbbb70bc33 in _gtk_action_emit_activate (action=0x163e620) at gtkaction.c:755 #48 0x00007fbbbb70e2f9 in closure_accel_activate (closure=0x1bbc100, return_value=0x7fffeb67b170, n_param_values=<value optimized out>, param_values=<value optimized out>, invocation_hint=<value optimized out>, marshal_data=<value optimized out>) at gtkaction.c:1725 #49 0x00007fbbb8e3248a in IA__g_closure_invoke (closure=0x1bbc100, return_value=0x7fffeb67b170, n_param_values=<value optimized out>, param_values=0x7fbb9c0e5800, invocation_hint=0x7fffeb67b130) at gclosure.c:767 #50 0x00007fbbb8e46511 in signal_emit_unlocked_R (node=0x16b7f90, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3248 #51 0x00007fbbb8e47908 in IA__g_signal_emit_valist (instance=0x16bbb80, signal_id=<value optimized out>, detail=1910, var_args=0x7fffeb67b320) at gsignal.c:2991 #52 0x00007fbbb8e48083 in IA__g_signal_emit (instance=0x0, signal_id= 3949435136, detail=1010) at gsignal.c:3038 #53 0x00007fbbbb707f54 in IA__gtk_accel_group_activate (accel_group= 0x16bbb80, accel_quark=1910, acceleratable=0x15c3b90, accel_key=65363, accel_mods=GDK_MOD1_MASK) at gtkaccelgroup.c:889 #54 0x00007fbbbb70805d in IA__gtk_accel_groups_activate (object=0x15c3b90, accel_key=65363, accel_mods=GDK_MOD1_MASK) at gtkaccelgroup.c:926 #55 0x00007fbbbb8f9243 in IA__gtk_window_activate_key (window=0x15c3b90, event=<value optimized out>) at gtkwindow.c:8316 #56 0x00007fbbbb8f92c9 in gtk_window_key_press_event (widget=0x0, event= 0x7fffeb679900) at gtkwindow.c:5210 #57 0x00007fbbbb7d12f8 in _gtk_marshal_BOOLEAN__BOXED (closure=0x15d2d70, return_value=0x7fffeb67b680, n_param_values=<value optimized out>, param_values=0x7fbb881e0cd0, invocation_hint=<value optimized out>, marshal_data=0x43e090) at gtkmarshalers.c:84 #58 0x00007fbbb8e3248a in IA__g_closure_invoke (closure=0x15d2d70, return_value=0x7fffeb67b680, n_param_values=<value optimized out>, param_values=0x7fbb881e0cd0, invocation_hint=0x7fffeb67b640) at gclosure.c:767 #59 0x00007fbbb8e46220 in signal_emit_unlocked_R (node=0x15d2ab0, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3286 #60 0x00007fbbb8e47908 in IA__g_signal_emit_valist (instance=0x15c3b90, signal_id=<value optimized out>, detail=0, var_args=0x7fffeb67b830) at gsignal.c:2991 #61 0x00007fbbb8e48083 in IA__g_signal_emit (instance=0x0, signal_id= 3949435136, detail=1010) at gsignal.c:3038 #62 0x00007fbbbb8e5d2f in gtk_widget_event_internal (widget=0x15c3b90, event= 0x5288d60) at gtkwidget.c:4943 #63 0x00007fbbbb7c98a4 in IA__gtk_propagate_event (widget=0x15c3b90, event= 0x5288d60) at gtkmain.c:2416 #64 0x00007fbbbb7ca85b in IA__gtk_main_do_event (event=0x5288d60) at gtkmain.c:1647 #65 0x00007fbbbb4400fc in gdk_event_dispatch (source=<value optimized out>, callback=<value optimized out>, user_data=<value optimized out>) at gdkevents-x11.c:2372 #66 0x00007fbbb8761f8f in g_main_dispatch (context=0x15b3040) at gmain.c:1960 #67 IA__g_main_context_dispatch (context=0x15b3040) at gmain.c:2513 #68 0x00007fbbb8765dc8 in g_main_context_iterate (context=0x15b3040, block=<value optimized out>, dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2591 #69 0x00007fbbb87662dd in IA__g_main_loop_run (loop=0x165be70) at gmain.c:2799 #70 0x00007fbbbb7cad37 in IA__gtk_main () at gtkmain.c:1219 #71 0x0000000000435623 in main (argc=1, argv=0x7fffeb67cd98) at ephy-main.c:739 Thread 3 (Thread 0x7fbba192a710 (LWP 31558)): #0 pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162 No locals. #1 0x00007fbbbca37f44 in WTF::TCMalloc_PageHeap::scavengerThread (this= 0x7fbbbd2bc0e0) at JavaScriptCore/wtf/FastMalloc.cpp:2378 No locals. #2 0x00007fbbbca37f69 in WTF::TCMalloc_PageHeap::runScavengerThread (context= 0x7fbbbd2ca1b4) at JavaScriptCore/wtf/FastMalloc.cpp:1501 No locals. #3 0x00007fbbb7fd28e4 in start_thread (arg=<value optimized out>) at pthread_create.c:297 __res = <value optimized out> pd = 0x7fbba192a710 unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140443846354704, 1573418897281838801, 140444222476512, 0, 140444320337920, 3, -1539480090327453999, -1539518740322128175}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = <value optimized out> robust = <value optimized out> freesize = <value optimized out> __PRETTY_FUNCTION__ = "start_thread" #4 0x00007fbbb7d4429d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 No locals. Thread 2 (Thread 0x7fbba1029710 (LWP 31559)): #0 pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162 No locals. #1 0x00007fbbbc72e248 in WebCore::IconDatabase::syncThreadMainLoop (this= 0x7fbba1041a00) at WebCore/loader/icon/IconDatabase.cpp:1412 didAnyWork = <value optimized out> #2 0x00007fbbbc72e311 in WebCore::IconDatabase::iconDatabaseSyncThread (this= 0x7fbba1041a00) at WebCore/loader/icon/IconDatabase.cpp:1030 journalFilename = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7fbba1047f20}} #3 0x00007fbbb7fd28e4 in start_thread (arg=<value optimized out>) at pthread_create.c:297 __res = <value optimized out> pd = 0x7fbba1029710 unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140443836913424, 1573418897281838801, 140444222476512, 0, 140444320337920, 3, -1539481052936999215, -1539518740322128175}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = <value optimized out> robust = <value optimized out> freesize = <value optimized out> __PRETTY_FUNCTION__ = "start_thread" #4 0x00007fbbb7d4429d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 No locals. Thread 1 (Thread 0x7fbbbdce08c0 (LWP 31557)): #0 0x00007fbbb7fdacdd in __libc_waitpid (pid=23555, stat_loc=<value optimized out>, options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:41 _a3 = 0 _a1 = 23555 resultvar = <value optimized out> _a4 = 0 _a2 = 140737142821600 oldtype = 0 result = <value optimized out> #1 0x00007fbbb87a6121 in IA__g_spawn_sync ( working_directory=<value optimized out>, argv=<value optimized out>, envp=<value optimized out>, flags=<value optimized out>, child_setup=<value optimized out>, user_data=<value optimized out>, standard_output=0x0, standard_error=0x0, exit_status=0x0, error= 0x7fffeb679478) at gspawn.c:386 outpipe = -1 errpipe = -1 pid = 23555 fds = {__fds_bits = {0, 16, 16, 0, 77481960, 140737142822008, 82405184, 77481936, 3, 0, 77481960, 140444230477309, 140737142821608, 140737142821600, 140737142821720, 0}} ret = <value optimized out> outstr = 0x0 errstr = 0x0 failed = 0 status = <value optimized out> __PRETTY_FUNCTION__ = "IA__g_spawn_sync" #2 0x00007fbbb87a6439 in IA__g_spawn_command_line_sync ( command_line=<value optimized out>, standard_output=0x0, standard_error= 0x0, exit_status=0x0, error=0x7fffeb679478) at gspawn.c:700 retval = 0 argv = 0x49e47d0 __PRETTY_FUNCTION__ = "IA__g_spawn_command_line_sync" #3 0x00007fbba6a52d61 in run_bug_buddy (signum=<value optimized out>) at gnome-breakpad.cc:369 res = <value optimized out> warning_file = 0x0 exec_str = 0x4c586a0 "bug-buddy --appname=\"epiphany\" --pid=31557" args_str = <value optimized out> error = 0x0 #4 check_if_gdb (signum=<value optimized out>) at gnome-breakpad.cc:440 gdb = 0x53afbb0 "/usr/bin/gdb" pid = 31557 mypath = 0x4fd6600 "\360\267\314\004" has_debug_symbols = <value optimized out> appname = 0x157e180 "epiphany" #5 bugbuddy_segv_handle (signum=<value optimized out>) at gnome-breakpad.cc:223 in_segv = 1 #6 <signal handler called> No symbol table info available. #7 WebCore::Document::frame (this=0x0) at WebCore/dom/Document.h:448 No locals. #8 WebCore::Document::ownerElement (this=0x0) at WebCore/dom/Document.cpp:3113 No locals. #9 0x00007fbbbc5768f1 in WebCore::FrameView::windowClipRect (this= 0x7fbb937ed000, clipToContents=<value optimized out>) at WebCore/page/FrameView.cpp:1571 clipRect = {m_location = {m_x = 0, m_y = 0}, m_size = {m_width = 1010, m_height = 644}} elt = <value optimized out> layer = <value optimized out> parentView = <value optimized out> #10 0x00007fbbbc5bc60d in WebCore::ScrollView::scrollContents (this= 0x7fbb937ed000, scrollDelta=...) at WebCore/platform/ScrollView.cpp:496 clipRect = {m_location = {m_x = 0, m_y = 0}, m_size = {m_width = 0, m_height = 0}} scrollViewRect = {m_location = {m_x = -1820405760, m_y = 32699}, m_size = {m_width = -1131946292, m_height = 32699}} updateRect = {m_location = {m_x = 2044334704, m_y = 32699}, m_size = { m_width = -345531248, m_height = 32767}} #11 0x00007fbbbc5bc94a in WebCore::ScrollView::valueChanged (this=0x0, scrollbar=<value optimized out>) at WebCore/platform/ScrollView.cpp:268 scrollDelta = {m_width = 0, m_height = -691} #12 0x00007fbbbc576708 in WebCore::FrameView::valueChanged (this= 0x7fbb937ed000, bar=0x7fbb79da1270) at WebCore/page/FrameView.cpp:1611 No locals. #13 0x00007fbbbc5c0291 in WebCore::Scrollbar::setCurrentPos (this= 0x7fbb79da1270, pos=<value optimized out>) at WebCore/platform/Scrollbar.cpp:295 oldThumbPos = 0 #14 0x00007fbbbc5c03ef in WebCore::Scrollbar::setValue (this=0x7fbb79da1270, v=0) at WebCore/platform/Scrollbar.cpp:103 No locals. #15 0x00007fbbb8e3248a in IA__g_closure_invoke (closure=0x450bee0, return_value=0x0, n_param_values=<value optimized out>, param_values= 0x45c0f40, invocation_hint=0x7fffeb679c90) at gclosure.c:767 marshal = 0x7fbbb8e3f280 <IA__g_cclosure_marshal_VOID__VOID> marshal_data = 0x0 __PRETTY_FUNCTION__ = "IA__g_closure_invoke" #16 0x00007fbbb8e46511 in signal_emit_unlocked_R (node=0x1614c50, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3248 tmp = <value optimized out> handler = 0x7fbb88079980 accumulator = 0x0 emission = {next = 0x7fffeb67ace0, instance = 0x453f050, ihint = { signal_id = 166, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 4} class_closure = 0x1617bc0 handler_list = 0x44d2840 return_accu = <value optimized out> accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} signal_id = 166 max_sequential_handler_number = 105826 return_value_altered = 1 #17 0x00007fbbb8e47af0 in IA__g_signal_emit_valist (instance=0x453f050, signal_id=<value optimized out>, detail=0, var_args=0x7fffeb679e80) at gsignal.c:2981 signal_return_type = 4 param_values = <value optimized out> node = 0x1614c50 i = <value optimized out> n_params = <value optimized out> __PRETTY_FUNCTION__ = "IA__g_signal_emit_valist" #18 0x00007fbbb8e48083 in IA__g_signal_emit (instance=0x0, signal_id= 3949435136, detail=1010) at gsignal.c:3038 var_args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fffeb679f60, reg_save_area = 0x7fffeb679ea0}} #19 0x00007fbbbb710f1a in IA__gtk_adjustment_value_changed (adjustment= 0x453f050) at gtkadjustment.c:668 __PRETTY_FUNCTION__ = "IA__gtk_adjustment_value_changed" #20 0x00007fbbbc87e9d6 in WebCore::ScrollbarGtk::detachAdjustment (this= 0x7fbb956a5dd0) at WebCore/platform/gtk/ScrollbarGtk.cpp:126 No locals. #21 0x00007fbbbc87eaad in ~ScrollbarGtk (this=0x0, __in_chrg=<value optimized out>) at WebCore/platform/gtk/ScrollbarGtk.cpp:92 No locals. #22 0x00007fbbbc5bdf98 in derefIfNotNull<WebCore::Scrollbar> (this= 0x7fbb91efa280, hasBar=<value optimized out>) at ./JavaScriptCore/wtf/PassRefPtr.h:53 No locals. #23 WTF::RefPtr<WebCore::Scrollbar>::operator= (this=0x7fbb91efa280, hasBar=<value optimized out>) at ./JavaScriptCore/wtf/RefPtr.h:123 ptr = 0x0 #24 WebCore::ScrollView::setHasVerticalScrollbar (this=0x7fbb91efa280, hasBar=<value optimized out>) at WebCore/platform/ScrollView.cpp:101 No locals. #25 0x00007fbbbc5798eb in ~FrameView (this=0x7fbb91efa280, __in_chrg=<value optimized out>) at WebCore/page/FrameView.cpp:165 No locals. #26 0x00007fbbbc56d1c5 in derefIfNotNull<WebCore::FrameView> (this= 0x7fbba105b800, view=) at ./JavaScriptCore/wtf/PassRefPtr.h:53 No locals. #27 WTF::RefPtr<WebCore::FrameView>::operator= (this=0x7fbba105b800, view=) at ./JavaScriptCore/wtf/RefPtr.h:131 ptr = 0x0 #28 WebCore::Frame::setView (this=0x7fbba105b800, view=) at WebCore/page/Frame.cpp:262 No locals. #29 0x00007fbbbc513c61 in WebCore::FrameLoader::open (this=0x7fbba105b850, cachedFrame=...) at WebCore/loader/FrameLoader.cpp:2741 url = {m_string = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7fbb8fcccee0}}, m_isValid = true, m_protocolInHTTPFamily = true, m_schemeEnd = 4, m_userStart = 7, m_userEnd = 7, m_passwordEnd = 7, m_hostEnd = 21, m_portEnd = 21, m_pathAfterLastSlash = 50, m_pathEnd = 65, m_queryEnd = 65, m_fragmentEnd = 65} document = 0x7fbba0756c00 view = 0x7fbb937ed000 #30 0x00007fbbbc44cac0 in WebCore::CachedFrame::open (this=0x7fbb9ac886c0) at WebCore/history/CachedFrame.cpp:168 No locals. #31 0x00007fbbbc44df65 in WebCore::CachedPage::restore (this=0x7fbb8eb98be8, page=0x7fffeb679900) at WebCore/history/CachedPage.cpp:74 focusedDocument = <value optimized out> #32 0x00007fbbbc512cfe in WebCore::FrameLoader::open (this=0x7fbba105b850, cachedPage=...) at WebCore/loader/FrameLoader.cpp:2700 No locals. #33 0x00007fbbbc517717 in WebCore::FrameLoader::commitProvisionalLoad (this= 0x7fbba105b850, prpCachedPage=<value optimized out>) at WebCore/loader/FrameLoader.cpp:2466 No locals. #34 0x00007fbbbc5180d2 in WebCore::FrameLoader::loadProvisionalItemFromCachedPage (this=0x7fbba105b850) at WebCore/loader/FrameLoader.cpp:3655 provisionalLoader = 0x7fbb955c7000 #35 0x00007fbbbc51835d in WebCore::FrameLoader::continueLoadAfterNavigationPolicy (this=0x7fbba105b850, formState=) at WebCore/loader/FrameLoader.cpp:3527 isTargetItem = <value optimized out> type = <value optimized out> #36 0x00007fbbbc5183ed in WebCore::FrameLoader::callContinueLoadAfterNavigationPolicy (argument=0x0, request=..., formState=<value optimized out>, shouldContinue=242) at WebCore/loader/FrameLoader.cpp:3464 No locals. #37 0x00007fbbbc530f40 in WebCore::PolicyChecker::checkNavigationPolicy (this= 0x7fbba105b860, request=..., loader=0x7fbb955c7000, formState=) at WebCore/loader/PolicyChecker.cpp:68 action = {m_URL = {m_string = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7fbb988be8c0}}, m_isValid = true, m_protocolInHTTPFamily = true, m_schemeEnd = 4, m_userStart = 7, m_userEnd = 7, m_passwordEnd = 7, m_hostEnd = 21, m_portEnd = 21, m_pathAfterLastSlash = 50, m_pathEnd = 65, m_queryEnd = 65, m_fragmentEnd = 65}, m_type = WebCore::NavigationTypeOther, m_event = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x0}} #38 0x00007fbbbc518799 in WebCore::FrameLoader::loadWithDocumentLoader (this= 0x7fbba105b850, loader=0x7fbb955c7000, type=<value optimized out>, prpFormState=<value optimized out>) at WebCore/loader/FrameLoader.cpp:2098 newURL = @0x7fbb955c72b0 #39 0x00007fbbbc51b69d in WebCore::FrameLoader::navigateToDifferentDocument ( this=0x7fbba105b850, item=<value optimized out>, loadType= WebCore::FrameLoadTypeForward) at WebCore/loader/FrameLoader.cpp:3747 itemOriginalURL = {m_string = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7fffeb67a940}}, m_isValid = false, m_protocolInHTTPFamily = false, m_schemeEnd = 32767, m_userStart = -2108303360, m_userEnd = 32699, m_passwordEnd = -345528000, m_hostEnd = 32767, m_portEnd = -2108769616, m_pathAfterLastSlash = 32699, m_pathEnd = -1593460360, m_queryEnd = 32699, m_fragmentEnd = 2} currentURL = {m_string = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x0}}, m_isValid = false, m_protocolInHTTPFamily = false, m_schemeEnd = 0, m_userStart = 0, m_userEnd = 32767, m_passwordEnd = -1822740480, m_hostEnd = 32699, m_portEnd = 0, m_pathAfterLastSlash = 0, m_pathEnd = 0, m_queryEnd = 0, m_fragmentEnd = 0} request = {<WebCore::ResourceRequestBase> = {<WTF::FastAllocBase> = {<No data fields>}, m_url = {m_string = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7fffeb67a6d8}}, m_isValid = false, m_protocolInHTTPFamily = false, m_schemeEnd = 32767, m_userStart = -2108303352, m_userEnd = 32699, m_passwordEnd = 64, m_hostEnd = 0, m_portEnd = -345528551, m_pathAfterLastSlash = 32767, m_pathEnd = -1193080400, m_queryEnd = 32699, m_fragmentEnd = -1134872282}, m_cachePolicy = WebCore::UseProtocolCachePolicy, m_timeoutInterval = 6.9533387364531223e-310, m_firstPartyForCookies = {m_string = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x200}}, m_isValid = false, m_protocolInHTTPFamily = false, m_schemeEnd = 1999580986, m_userStart = 1865316215, m_userEnd = 1986816363, m_passwordEnd = 1697543013, m_hostEnd = 1634742117, m_portEnd = 1801549413, m_pathAfterLastSlash = 841966709, m_pathEnd = 791687472, m_queryEnd = 1701606772, m_fragmentEnd = 1702065517}, m_httpMethod = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x746c757365722f30}}, m_httpHeaderFields = {<WTF::HashMap<WebCore::AtomicString, WebCore::String, WebCore::CaseFoldingHash, WTF::HashTraits<WebCore::AtomicString>, WTF::HashTraits<WebCore::String> >> = {<WTF::FastAllocBase> = {<No data fields>}, m_impl = { static m_minTableSize = <optimized out>, static m_maxLoad = <optimized out>, static m_minLoad = <optimized out>, m_table = 0x74682e3331353073, m_tableSize = -1130168211, m_tableSizeMask = 32699, m_keyCount = 7929964, m_deletedCount = 7274599}}, <No data fields>}, m_responseContentDispositionEncodingFallbackArray = {<WTF::FastAllocBase> = {<No data fields>}, m_size = 28992386461466734, m_buffer = {<WTF::VectorBufferBase<WebCore::String>> = {<WTFNoncopyable::Noncopyable> = {<WTF::FastAllocBase> = {<No data fields>}, <No data fields>}, m_buffer = 0x6c006f0050002c, m_capacity = 30962698416816249}, <No data fields>}}, m_httpBody = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x67006d003a0065}, m_allowCookies = 44, m_resourceRequestUpdated = false, m_platformRequestUpdated = 82, m_reportUploadProgress = false, m_targetType = 6488165}, m_soupFlags = 38} action = {m_URL = {m_string = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x0}}, m_isValid = false, m_protocolInHTTPFamily = false, m_schemeEnd = 0, m_userStart = 0, m_userEnd = 0, m_passwordEnd = 0, m_hostEnd = 32699, m_portEnd = 0, m_pathAfterLastSlash = 6684752, m_pathEnd = -4194304, m_queryEnd = 1105199103, m_fragmentEnd = 0}, m_type = WebCore::NavigationTypeLinkClicked, m_event = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x0}} itemURL = {m_string = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x0}}, m_isValid = false, m_protocolInHTTPFamily = false, m_schemeEnd = 0, m_userStart = 5, m_userEnd = 0, m_passwordEnd = -1130127293, m_hostEnd = 32699, m_portEnd = -1882403104, m_pathAfterLastSlash = 32699, m_pathEnd = -1112112005, m_queryEnd = 4, m_fragmentEnd = 7} #40 0x00007fbbbc5207f8 in WebCore::HistoryController::recursiveGoToItem (this= 0x7fbba105b978, item=0x7fbb8255d800, fromItem=<value optimized out>, type= WebCore::FrameLoadTypeForward) at WebCore/loader/HistoryController.cpp:589 itemURL = {m_string = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7fbb8fcccee0}}, m_isValid = true, m_protocolInHTTPFamily = true, m_schemeEnd = 4, m_userStart = 7, m_userEnd = 7, m_passwordEnd = 7, m_hostEnd = 21, m_portEnd = 21, m_pathAfterLastSlash = 50, m_pathEnd = 65, m_queryEnd = 65, m_fragmentEnd = 65} currentURL = {m_string = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7fbb9aa74b40}}, m_isValid = true, m_protocolInHTTPFamily = true, m_schemeEnd = 4, m_userStart = 7, m_userEnd = 7, m_passwordEnd = 7, m_hostEnd = 18, m_portEnd = 18, m_pathAfterLastSlash = 19, m_pathEnd = 19, m_queryEnd = 19, m_fragmentEnd = 19} #41 0x00007fbbbc5874c7 in WebCore::Page::goToItem (this=0x7fbba1052ea0, item= 0x7fbb8255d800, type=WebCore::FrameLoadTypeForward) at WebCore/page/Page.cpp:308 currentItem = <value optimized out> #42 0x00007fbbbc587614 in WebCore::Page::goForward (this=0x7fbba1052ea0) at WebCore/page/Page.cpp:248 item = 0x7fffeb679900 #43 0x00007fbbb8e3248a in IA__g_closure_invoke (closure=0x16b7890, return_value=0x0, n_param_values=<value optimized out>, param_values= 0x49f8820, invocation_hint=0x7fffeb67acf0) at gclosure.c:767 marshal = 0x7fbbb8e309b0 <g_type_class_meta_marshal> marshal_data = 0x0 __PRETTY_FUNCTION__ = "IA__g_closure_invoke" #44 0x00007fbbb8e45e80 in signal_emit_unlocked_R (node=0x16b7920, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3178 accumulator = 0x1d333a8 emission = {next = 0x0, instance = 0x163e620, ihint = {signal_id = 234, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 23063600} class_closure = 0x16b7890 handler_list = 0x0 return_accu = <value optimized out> accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} signal_id = 234 max_sequential_handler_number = 2 return_value_altered = 0 #45 0x00007fbbb8e47af0 in IA__g_signal_emit_valist (instance=0x163e620, signal_id=<value optimized out>, detail=0, var_args=0x7fffeb67aee0) at gsignal.c:2981 signal_return_type = 4 param_values = <value optimized out> node = 0x16b7920 i = <value optimized out> n_params = <value optimized out> __PRETTY_FUNCTION__ = "IA__g_signal_emit_valist" #46 0x00007fbbb8e48083 in IA__g_signal_emit (instance=0x0, signal_id= 3949435136, detail=1010) at gsignal.c:3038 var_args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fffeb67afc0, reg_save_area = 0x7fffeb67af00}} #47 0x00007fbbbb70bc33 in _gtk_action_emit_activate (action=0x163e620) at gtkaction.c:755 group = 0x1cc18a0 #48 0x00007fbbbb70e2f9 in closure_accel_activate (closure=0x1bbc100, return_value=0x7fffeb67b170, n_param_values=<value optimized out>, param_values=<value optimized out>, invocation_hint=<value optimized out>, marshal_data=<value optimized out>) at gtkaction.c:1725 No locals. #49 0x00007fbbb8e3248a in IA__g_closure_invoke (closure=0x1bbc100, return_value=0x7fffeb67b170, n_param_values=<value optimized out>, param_values=0x7fbb9c0e5800, invocation_hint=0x7fffeb67b130) at gclosure.c:767 marshal = 0x7fbbbb70e2c0 <closure_accel_activate> marshal_data = 0x0 __PRETTY_FUNCTION__ = "IA__g_closure_invoke" #50 0x00007fbbb8e46511 in signal_emit_unlocked_R (node=0x16b7f90, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3248 tmp = <value optimized out> handler = 0x1d31550 accumulator = 0x16ea8a0 emission = {next = 0x7fffeb67b630, instance = 0x16bbb80, ihint = { signal_id = 228, detail = 1910, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 4} class_closure = 0x0 handler_list = 0x1d31890 return_accu = <value optimized out> accu = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} signal_id = 228 max_sequential_handler_number = 105825 return_value_altered = 0 #51 0x00007fbbb8e47908 in IA__g_signal_emit_valist (instance=0x16bbb80, signal_id=<value optimized out>, detail=1910, var_args=0x7fffeb67b320) at gsignal.c:2991 return_value = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} error = <value optimized out> signal_return_type = 20 param_values = <value optimized out> node = 0x16b7f90 i = <value optimized out> n_params = <value optimized out> __PRETTY_FUNCTION__ = "IA__g_signal_emit_valist" #52 0x00007fbbb8e48083 in IA__g_signal_emit (instance=0x0, signal_id= 3949435136, detail=1010) at gsignal.c:3038 var_args = {{gp_offset = 48, fp_offset = 48, overflow_arg_area = 0x7fffeb67b400, reg_save_area = 0x7fffeb67b340}} #53 0x00007fbbbb707f54 in IA__gtk_accel_group_activate (accel_group= 0x16bbb80, accel_quark=1910, acceleratable=0x15c3b90, accel_key=65363, accel_mods=GDK_MOD1_MASK) at gtkaccelgroup.c:889 was_handled = 0 __PRETTY_FUNCTION__ = "IA__gtk_accel_group_activate" #54 0x00007fbbbb70805d in IA__gtk_accel_groups_activate (object=0x15c3b90, accel_key=65363, accel_mods=GDK_MOD1_MASK) at gtkaccelgroup.c:926 accel_name = <value optimized out> accel_quark = 1910 slist = 0x1699100 = {0x16bbb80} __PRETTY_FUNCTION__ = "IA__gtk_accel_groups_activate" #55 0x00007fbbbb8f9243 in IA__gtk_window_activate_key (window=0x15c3b90, event=<value optimized out>) at gtkwindow.c:8316 key_hash = <value optimized out> found_entry = 0x4b81820 enable_mnemonics = 1 enable_accels = 1 __PRETTY_FUNCTION__ = "IA__gtk_window_activate_key" #56 0x00007fbbbb8f92c9 in gtk_window_key_press_event (widget=0x0, event= 0x7fffeb679900) at gtkwindow.c:5210 handled = <value optimized out> #57 0x00007fbbbb7d12f8 in _gtk_marshal_BOOLEAN__BOXED (closure=0x15d2d70, return_value=0x7fffeb67b680, n_param_values=<value optimized out>, param_values=0x7fbb881e0cd0, invocation_hint=<value optimized out>, marshal_data=0x43e090) at gtkmarshalers.c:84 data1 = 0x15c3b90 data2 = 0x284000003f2 v_return = <value optimized out> __PRETTY_FUNCTION__ = "_gtk_marshal_BOOLEAN__BOXED" #58 0x00007fbbb8e3248a in IA__g_closure_invoke (closure=0x15d2d70, return_value=0x7fffeb67b680, n_param_values=<value optimized out>, param_values=0x7fbb881e0cd0, invocation_hint=0x7fffeb67b640) at gclosure.c:767 marshal = 0x7fbbb8e309b0 <g_type_class_meta_marshal> marshal_data = 0x0 __PRETTY_FUNCTION__ = "IA__g_closure_invoke" #59 0x00007fbbb8e46220 in signal_emit_unlocked_R (node=0x15d2ab0, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3286 accumulator = 0x15d2b30 emission = {next = 0x0, instance = 0x15c3b90, ihint = {signal_id = 42, detail = 0, run_type = G_SIGNAL_RUN_LAST}, state = EMISSION_RUN, chain_type = 23116640} class_closure = 0x15d2d70 handler_list = 0x1773600 return_accu = <value optimized out> accu = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} signal_id = 42 max_sequential_handler_number = 105825 return_value_altered = 1 #60 0x00007fbbb8e47908 in IA__g_signal_emit_valist (instance=0x15c3b90, signal_id=<value optimized out>, detail=0, var_args=0x7fffeb67b830) at gsignal.c:2991 return_value = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} error = <value optimized out> signal_return_type = 20 param_values = <value optimized out> node = 0x15d2ab0 i = <value optimized out> n_params = <value optimized out> __PRETTY_FUNCTION__ = "IA__g_signal_emit_valist" #61 0x00007fbbb8e48083 in IA__g_signal_emit (instance=0x0, signal_id= 3949435136, detail=1010) at gsignal.c:3038 var_args = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fffeb67b910, reg_save_area = 0x7fffeb67b850}} #62 0x00007fbbbb8e5d2f in gtk_widget_event_internal (widget=0x15c3b90, event= 0x5288d60) at gtkwidget.c:4943 signal_num = <value optimized out> return_val = 0 #63 0x00007fbbbb7c98a4 in IA__gtk_propagate_event (widget=0x15c3b90, event= 0x5288d60) at gtkmain.c:2416 window = 0x15c3b90 handled_event = <value optimized out> __PRETTY_FUNCTION__ = "IA__gtk_propagate_event" #64 0x00007fbbbb7ca85b in IA__gtk_main_do_event (event=0x5288d60) at gtkmain.c:1647 event_widget = 0x0 grab_widget = 0x15c3b90 window_group = 0x16d7940 rewritten_event = 0x0 tmp_list = <value optimized out> __PRETTY_FUNCTION__ = "IA__gtk_main_do_event" #65 0x00007fbbbb4400fc in gdk_event_dispatch (source=<value optimized out>, callback=<value optimized out>, user_data=<value optimized out>) at gdkevents-x11.c:2372 display = <value optimized out> event = 0x5288d60 #66 0x00007fbbb8761f8f in g_main_dispatch (context=0x15b3040) at gmain.c:1960 dispatch = 0x7fbbbb4400b0 <gdk_event_dispatch> user_data = 0x0 callback = 0 cb_funcs = 0x0 cb_data = 0x0 current_source_link = {data = 0x15b2fc0, next = 0x0} source = 0x15b2fc0 current = 0x15df6a0 i = 0 #67 IA__g_main_context_dispatch (context=0x15b3040) at gmain.c:2513 No locals. #68 0x00007fbbb8765dc8 in g_main_context_iterate (context=0x15b3040, block=<value optimized out>, dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2591 max_priority = 2147483647 timeout = 9921 some_ready = 1 nfds = 13 allocated_nfds = -1200149552 fds = <value optimized out> __PRETTY_FUNCTION__ = "g_main_context_iterate" #69 0x00007fbbb87662dd in IA__g_main_loop_run (loop=0x165be70) at gmain.c:2799 self = 0x1579e20 __PRETTY_FUNCTION__ = "IA__g_main_loop_run" #70 0x00007fbbbb7cad37 in IA__gtk_main () at gtkmain.c:1219 tmp_list = 0x15f9580 = {0x160f2f0, A debugging session is active.
Seems likely that this is Gtk specific.
It'd be really helpful if there was some way to reproduce this consistently. From the stack trace: #18 0x00007fbbb8e48083 in IA__g_signal_emit (instance=0x0, signal_id= 3949435136, detail=1010) at gsignal.c:3038 #19 0x00007fbbbb710f1a in IA__gtk_adjustment_value_changed (adjustment= 0x453f050) at gtkadjustment.c:668 #20 0x00007fbbbc87e9d6 in WebCore::ScrollbarGtk::detachAdjustment (this= 0x7fbb956a5dd0) at WebCore/platform/gtk/ScrollbarGtk.cpp:126 #21 0x00007fbbbc87eaad in ~ScrollbarGtk (this=0x0, __in_chrg=<value optimized out>) This code has changed a great deal since 1.2.1. ScrollbarGtk doesn't event exist any longer Can you reproduce this with the latest development release or the code from master? Unless there is some consistent way to reproduce this issue, I'm not sure what else to do but close it. :(
I just realized that this bug is over 6 months old. Since the scrollbar code has been greatly improved since then (and this trace is not very useful at this point), I'm going to close it. If someone else hits this problem and can generate a backtrace from a recent development version, feel free to reopen.