Bug 56399 – Segmentation fault when trying to paste text into Wordpress

• Status: UNCONFIRMED
• Component: WebKitGTK

[Debarshi Ray]

1. Go to wordpress.com.
2. Log in with your credentials.
3. Go to My Blog -> New Post.
4. As the page loads try pasting some text into the main text area. Hit Ctrl+V a couple of times.
5. If the text is successfully inserted into the text area then do a Ctrl+A followed by a Ctrl+V.
6. WebkitGtk blows up.

I have tried this with different versions of Epiphany and Midori with the same results. The following backtrace was taken using Epiphany Git and WebkitGtk3 1.3.11.

#0  WebCore::canHaveChildrenForEditing (node=0x0)
    at Source/WebCore/editing/htmlediting.cpp:76
#1  0x4b0b8ee3 in WebCore::editingIgnoresContent (node=0x0)
    at Source/WebCore/editing/htmlediting.cpp:71
#2  0x4b0bda5d in firstPositionInOrBeforeNode (node=0x0)
    at Source/WebCore/editing/htmlediting.h:118
#3  WebCore::enclosingBlock (node=0x0)
    at Source/WebCore/editing/htmlediting.cpp:332
#4  0x4b0d6ffc in WebCore::createFragmentFromText (context=0xb14bb000, text=
    ...) at Source/WebCore/editing/markup.cpp:803
#5  0x4ad0dd84 in WebCore::Pasteboard::documentFragment (this=0xbfffd1f8, 
    frame=0xb14c6700, context=Cannot access memory at address 0x0
)
    at Source/WebCore/platform/gtk/PasteboardGtk.cpp:143
#6  0x4b0a8d0b in WebCore::Editor::pasteWithPasteboard (this=0xb14c6a34, 
    pasteboard=0xb22e30d8, allowPlainText=true)
    at Source/WebCore/editing/Editor.cpp:398
#7  0x4b0a910d in WebCore::Editor::paste (this=0xb14c6a34)
    at Source/WebCore/editing/Editor.cpp:1302
#8  0x4b0971c1 in WebCore::executePaste (frame=0xb14c6700)
    at Source/WebCore/editing/EditorCommand.cpp:896
#9  0x4b099e81 in WebCore::Editor::Command::execute (this=0xbfffd30c, 
    parameter=..., triggeringEvent=0x0)
    at Source/WebCore/editing/EditorCommand.cpp:1640
#10 0x4ad8381c in webkit_web_view_real_paste_clipboard (webView=0x0)
    at Source/WebKit/gtk/webkit/webkitwebview.cpp:1372
#11 0x4781add4 in g_cclosure_marshal_VOID__VOID (closure=0x83a9830, 
    return_value=0x0, n_param_values=1, param_values=0x85864b0, 
    invocation_hint=0xbfffd490, marshal_data=0x4ad83790) at gmarshal.c:79
#12 0x477fd89e in g_type_class_meta_marshal (closure=0x83a9830, return_value=
    0x0, n_param_values=1, param_values=0x85864b0, invocation_hint=0xbfffd490, 
    marshal_data=0x21c) at gclosure.c:878
#13 0x477feff5 in g_closure_invoke (closure=0x83a9830, return_value=0x0, 
    n_param_values=1, param_values=0x85864b0, invocation_hint=0xbfffd490)
    at gclosure.c:767
#14 0x4781119f in signal_emit_unlocked_R (node=0x83a98d0, detail=0, instance=
    0x83b4108, emission_return=0x0, instance_and_params=0x85864b0)
    at gsignal.c:3290
#15 0x4781a412 in g_signal_emit_valist (instance=0x83b4108, signal_id=362, 
    detail=0, var_args=
    0xbfffd64c "\260\326\021\bH\302\062\b\260\326\021\bH\302\062\b$[\b\b\bA;\b\240a:\b\001") at gsignal.c:2983
#16 0x4781a594 in g_signal_emit (instance=0x83b4108, signal_id=362, detail=0)
    at gsignal.c:3040
#17 0x4ad7ef06 in webkit_web_view_paste_clipboard (webView=
    0x83b4108 [EphyWebView]) at Source/WebKit/gtk/webkit/webkitwebview.cpp:4253
#18 0x08085b24 in window_cmd_edit_paste (action=0x81bdcc0 [GtkAction], window=
    0x8199000 [EphyWindow]) at window-commands.c:519
#19 0x4781add4 in g_cclosure_marshal_VOID__VOID (closure=0x81d0bb0, 
    return_value=0x0, n_param_values=1, param_values=0xb6a07c08, 
    invocation_hint=0xbfffd7b0, marshal_data=0x0) at gmarshal.c:79
#20 0x477feff5 in g_closure_invoke (closure=0x81d0bb0, return_value=0x0, 
    n_param_values=1, param_values=0xb6a07c08, invocation_hint=0xbfffd7b0)
    at gclosure.c:767
#21 0x47811380 in signal_emit_unlocked_R (node=0x81a15a8, detail=0, instance=
    0x81bdcc0, emission_return=0x0, instance_and_params=0xb6a07c08)
    at gsignal.c:3252
#22 0x4781a412 in g_signal_emit_valist (instance=0x81bdcc0, signal_id=132, 
    detail=0, var_args=0xbfffd96c "\f\004\204G\340\267X") at gsignal.c:2983
#23 0x4781a594 in g_signal_emit (instance=0x81bdcc0, signal_id=132, detail=0)
    at gsignal.c:3040
#24 0x001b6487 in _gtk_action_emit_activate (action=0x81bdcc0 [GtkAction])
    at gtkaction.c:799
#25 0x001b6c65 in closure_accel_activate (return_value=0xbfffdaa4, closure=
    0x81cf790, n_param_values=<optimized out>, param_values=<optimized out>, 
    invocation_hint=<optimized out>, marshal_data=<optimized out>)
    at gtkaction.c:1635
#26 closure_accel_activate (closure=0x81cf790, return_value=0xbfffdaa4, 
    n_param_values=4, param_values=0x835e600, invocation_hint=0xbfffda90, 
    marshal_data=0x0) at gtkaction.c:1626
#27 0x477feff5 in g_closure_invoke (closure=0x81cf790, return_value=
    0xbfffdaa4, n_param_values=4, param_values=0x835e600, invocation_hint=
    0xbfffda90) at gclosure.c:767
#28 0x47811380 in signal_emit_unlocked_R (node=0x81a0ca0, detail=1791, 
    instance=0x817b8a0, emission_return=0xbfffdbdc, instance_and_params=
    0x835e600) at gsignal.c:3252
#29 0x4781a1f8 in g_signal_emit_valist (instance=0x817b8a0, signal_id=126, 
    detail=1791, var_args=0xbfffdc58 "l\334\377\277\222\004\033")
    at gsignal.c:2993
#30 0x4781a594 in g_signal_emit (instance=0x817b8a0, signal_id=126, detail=
    1791) at gsignal.c:3040
#31 0x001b0a2e in gtk_accel_group_activate (accel_group=
    0x817b8a0 [GtkAccelGroup], accel_quark=1791, acceleratable=
    0x8199000 [EphyWindow], accel_key=118, accel_mods=GDK_CONTROL_MASK)
    at gtkaccelgroup.c:908
#32 0x001b1fa9 in gtk_accel_groups_activate (object=0x8199000 [EphyWindow], 
    accel_key=118, accel_mods=GDK_CONTROL_MASK) at gtkaccelgroup.c:945
#33 0x0040e249 in gtk_window_activate_key (window=0x8199000 [EphyWindow], 
    event=0x8238388) at gtkwindow.c:9044
#34 0x0040e2af in gtk_window_key_press_event (widget=0x8199000 [EphyWindow], 
    event=0x8238388) at gtkwindow.c:5708
#35 0x08079e1e in ephy_window_key_press_event (widget=0x8199000 [EphyWindow], 
    event=0x8238388) at ephy-window.c:1029
#36 0x002a9ffa in _gtk_marshal_BOOLEAN__BOXED (closure=0x81916d0, return_value=
    0xbfffdf14, n_param_values=2, param_values=0x8598428, invocation_hint=
    0xbfffdf00, marshal_data=0x8079ca0) at gtkmarshalers.c:85
#37 0x477fd89e in g_type_class_meta_marshal (closure=0x81916d0, return_value=
    0xbfffdf14, n_param_values=2, param_values=0x8598428, invocation_hint=
    0xbfffdf00, marshal_data=0xd8) at gclosure.c:878
#38 0x477feff5 in g_closure_invoke (closure=0x81916d0, return_value=
    0xbfffdf14, n_param_values=2, param_values=0x8598428, invocation_hint=
    0xbfffdf00) at gclosure.c:767
#39 0x4781119f in signal_emit_unlocked_R (node=0x81918e0, detail=0, instance=
    0x8199000, emission_return=0xbfffe04c, instance_and_params=0x8598428)
    at gsignal.c:3290
#40 0x4781a1f8 in g_signal_emit_valist (instance=0x8199000, signal_id=72, 
    detail=0, var_args=
    0xbfffe0c0 "\354\340\377\277\210\203#\b\230\205\030\b\304\341>")
    at gsignal.c:2993
#41 0x4781a594 in g_signal_emit (instance=0x8199000, signal_id=72, detail=0)
    at gsignal.c:3040
#42 0x003ee3a3 in gtk_widget_event_internal (widget=0x8199000 [EphyWindow], 
    event=0x8238388) at gtkwidget.c:6078
#43 0x002a989c in gtk_propagate_event (widget=0x8199000 [EphyWindow], event=
    0x8238388) at gtkmain.c:2571
#44 0x002a9bb8 in gtk_main_do_event (event=0x8238388) at gtkmain.c:1872
#45 0x005aab9d in _gdk_event_emit (event=0x8238388) at gdkevents.c:71
#46 0x005d22b9 in gdk_event_source_dispatch (source=0x812b3c0, callback=0, 
    user_data=0x0) at gdkeventsource.c:318
#47 0x476f581f in g_main_dispatch (context=0x81408d8) at gmain.c:2440
#48 g_main_context_dispatch (context=0x81408d8) at gmain.c:3013
#49 0x476f5f90 in g_main_context_iterate (context=0x81408d8, block=1198542016, 
    dispatch=1, self=0x8120138) at gmain.c:3091
#50 0x476f66b7 in g_main_loop_run (loop=0x8125f28) at gmain.c:3299
#51 0x002a8ed5 in gtk_main () at gtkmain.c:1358
#52 0x0806cb2c in main (argc=1, argv=0xbffff464) at ephy-main.c:747

[Martin Robinson]

Do you still see this crash with the latest stable release?