Bug 98242 – [GTK] Crash destroying WebView in WebKit2

• Status: RESOLVED
• Resolution: WORKSFORME
• Component: WebKitGTK

[Xan Lopez]

I think this was fixed at some point, but now it's back (or it was never fixed):

Program received signal SIGSEGV, Segmentation fault.
glBindFramebufferEXT () at glapi_x86-64.S:31759
31759		movq	6688(%rax), %r11
Missing separate debuginfos, use: debuginfo-install libxkbfile-1.0.7-2.fc15.x86_64
(gdb) bt
#0  glBindFramebufferEXT () at glapi_x86-64.S:31759
#1  0x00007ffff7ac587d in WebCore::GLContextGLX::~GLContextGLX() () from /home/xan/gnome/lib64/libwebkit2gtk-3.0.so.0
#2  0x00007ffff7ac5949 in WebCore::GLContextGLX::~GLContextGLX() () from /home/xan/gnome/lib64/libwebkit2gtk-3.0.so.0
#3  0x00007ffff7ac6a69 in WebCore::RedirectedXCompositeWindow::~RedirectedXCompositeWindow() () from /home/xan/gnome/lib64/libwebkit2gtk-3.0.so.0
#4  0x00007ffff6a3f903 in webkitWebViewBaseFinalize(_GObject*) () from /home/xan/gnome/lib64/libwebkit2gtk-3.0.so.0
#5  0x0000000000475908 in ephy_web_view_finalize (object=0x1cd05e0) at ../../embed/ephy-web-view.c:1116
#6  0x00007ffff519e6a6 in g_object_unref (_object=0x1cd05e0) at gobject.c:3023
#7  0x00007ffff5199697 in g_object_run_dispose (object=0x1cd05e0) at gobject.c:1063
#8  0x00007ffff5a86b29 in gtk_widget_destroy (widget=0x1cd05e0) at gtkwidget.c:3974
#9  0x00007ffff5938d0e in gtk_overlay_forall (overlay=0x56aca0, include_internals=0, callback=0x7ffff5a86a7f <gtk_widget_destroy>, callback_data=0x0) at gtkoverlay.c:568
#10 0x00007ffff582a143 in gtk_container_foreach (container=0x56aca0, callback=0x7ffff5a86a7f <gtk_widget_destroy>, callback_data=0x0) at gtkcontainer.c:2093
#11 0x00007ffff582896e in gtk_container_destroy (widget=0x56aca0) at gtkcontainer.c:1377
#12 0x00007ffff5195480 in g_cclosure_marshal_VOID__VOID (closure=0x4f1460, return_value=0x0, n_param_values=1, param_values=0x7fffffffa7f0, invocation_hint=0x7fffffffa730, marshal_data=0x7ffff582889a) at gmarshal.c:85
#13 0x00007ffff5192b8d in g_type_class_meta_marshal (closure=0x4f1460, return_value=0x0, n_param_values=1, param_values=0x7fffffffa7f0, invocation_hint=0x7fffffffa730, marshal_data=0x98) at gclosure.c:970
#14 0x00007ffff51924d8 in g_closure_invoke (closure=0x4f1460, return_value=0x0, n_param_values=1, param_values=0x7fffffffa7f0, invocation_hint=0x7fffffffa730) at gclosure.c:777
#15 0x00007ffff51af1fd in signal_emit_unlocked_R (node=0x4fa150, detail=0, instance=0x56aca0, emission_return=0x0, instance_and_params=0x7fffffffa7f0) at gsignal.c:3667
#16 0x00007ffff51ae093 in g_signal_emit_valist (instance=0x56aca0, signal_id=3, detail=0, var_args=0x7fffffffab18) at gsignal.c:3300
#17 0x00007ffff51ae5dc in g_signal_emit (instance=0x56aca0, signal_id=3, detail=0) at gsignal.c:3356
#18 0x00007ffff5a92bf7 in gtk_widget_dispose (object=0x56aca0) at gtkwidget.c:10268
#19 0x00007ffff519968b in g_object_run_dispose (object=0x56aca0) at gobject.c:1061
#20 0x00007ffff5a86b29 in gtk_widget_destroy (widget=0x56aca0) at gtkwidget.c:3974
#21 0x00007ffff593dfc5 in gtk_paned_forall (container=0x12ade10, include_internals=0, callback=0x7ffff5a86a7f <gtk_widget_destroy>, callback_data=0x0) at gtkpaned.c:1956
#22 0x00007ffff582a143 in gtk_container_foreach (container=0x12ade10, callback=0x7ffff5a86a7f <gtk_widget_destroy>, callback_data=0x0) at gtkcontainer.c:2093
#23 0x00007ffff582896e in gtk_container_destroy (widget=0x12ade10) at gtkcontainer.c:1377
#24 0x00007ffff5195480 in g_cclosure_marshal_VOID__VOID (closure=0x4f1460, return_value=0x0, n_param_values=1, param_values=0x7fffffffb030, invocation_hint=0x7fffffffaf70, marshal_data=0x7ffff582889a) at gmarshal.c:85
#25 0x00007ffff5192b8d in g_type_class_meta_marshal (closure=0x4f1460, return_value=0x0, n_param_values=1, param_values=0x7fffffffb030, invocation_hint=0x7fffffffaf70, marshal_data=0x98) at gclosure.c:970
#26 0x00007ffff51924d8 in g_closure_invoke (closure=0x4f1460, return_value=0x0, n_param_values=1, param_values=0x7fffffffb030, invocation_hint=0x7fffffffaf70) at gclosure.c:777
#27 0x00007ffff51af1fd in signal_emit_unlocked_R (node=0x4fa150, detail=0, instance=0x12ade10, emission_return=0x0, instance_and_params=0x7fffffffb030) at gsignal.c:3667
#28 0x00007ffff51ae093 in g_signal_emit_valist (instance=0x12ade10, signal_id=3, detail=0, var_args=0x7fffffffb358) at gsignal.c:3300
#29 0x00007ffff51ae5dc in g_signal_emit (instance=0x12ade10, signal_id=3, detail=0) at gsignal.c:3356
#30 0x00007ffff5a92bf7 in gtk_widget_dispose (object=0x12ade10) at gtkwidget.c:10268
#31 0x00007ffff519968b in g_object_run_dispose (object=0x12ade10) at gobject.c:1061
#32 0x00007ffff5a86b29 in gtk_widget_destroy (widget=0x12ade10) at gtkwidget.c:3974
#33 0x00007ffff57d1e1a in gtk_box_forall (container=0x1ca5210, include_internals=0, callback=0x7ffff5a86a7f <gtk_widget_destroy>, callback_data=0x0) at gtkbox.c:1865
#34 0x00007ffff582a143 in gtk_container_foreach (container=0x1ca5210, callback=0x7ffff5a86a7f <gtk_widget_destroy>, callback_data=0x0) at gtkcontainer.c:2093
#35 0x00007ffff582896e in gtk_container_destroy (widget=0x1ca5210) at gtkcontainer.c:1377
#36 0x00007ffff5195480 in g_cclosure_marshal_VOID__VOID (closure=0x4f1460, return_value=0x0, n_param_values=1, param_values=0x7fffffffb880, invocation_hint=0x7fffffffb7c0, marshal_data=0x7ffff582889a) at gmarshal.c:85
#37 0x00007ffff5192b8d in g_type_class_meta_marshal (closure=0x4f1460, return_value=0x0, n_param_values=1, param_values=0x7fffffffb880, invocation_hint=0x7fffffffb7c0, marshal_data=0x98) at gclosure.c:970
#38 0x00007ffff51924d8 in g_closure_invoke (closure=0x4f1460, return_value=0x0, n_param_values=1, param_values=0x7fffffffb880, invocation_hint=0x7fffffffb7c0) at gclosure.c:777
#39 0x00007ffff51af1fd in signal_emit_unlocked_R (node=0x4fa150, detail=0, instance=0x1ca5210, emission_return=0x0, instance_and_params=0x7fffffffb880) at gsignal.c:3667
#40 0x00007ffff51ae093 in g_signal_emit_valist (instance=0x1ca5210, signal_id=3, detail=0, var_args=0x7fffffffbba8) at gsignal.c:3300
#41 0x00007ffff51ae5dc in g_signal_emit (instance=0x1ca5210, signal_id=3, detail=0) at gsignal.c:3356
#42 0x00007ffff5a92bf7 in gtk_widget_dispose (object=0x1ca5210) at gtkwidget.c:10268
#43 0x000000000046bcdf in ephy_embed_dispose (object=0x1ca5210) at ../../embed/ephy-embed.c:418
#44 0x00007ffff519968b in g_object_run_dispose (object=0x1ca5210) at gobject.c:1061
#45 0x00007ffff5a86b29 in gtk_widget_destroy (widget=0x1ca5210) at gtkwidget.c:3974
#46 0x00000000004357a2 in notebook_page_close_request_cb (notebook=0x12a70d0, embed=0x1ca5210, window=0x1282020) at ../../src/ephy-window.c:2994
#47 0x00007ffff51970d6 in g_cclosure_marshal_VOID__OBJECTv (closure=0x53e510, return_value=0x0, instance=0x12a70d0, args=0x7fffffffc218, marshal_data=0x0, n_params=1, param_types=0x12a6940) at gmarshal.c:1312
#48 0x00007ffff51927bc in _g_closure_invoke_va (closure=0x53e510, return_value=0x0, instance=0x12a70d0, args=0x7fffffffc218, n_params=1, param_types=0x12a6940) at gclosure.c:840
#49 0x00007ffff51ad42b in g_signal_emit_valist (instance=0x12a70d0, signal_id=212, detail=0, var_args=0x7fffffffc218) at gsignal.c:3211
#50 0x00007ffff51ae5dc in g_signal_emit (instance=0x12a70d0, signal_id=212, detail=0) at gsignal.c:3356
#51 0x000000000044f439 in close_button_clicked_cb (widget=0x1c82bd0, tab=0x1ca5210) at ../../src/ephy-notebook.c:523
#52 0x00007ffff519551b in g_cclosure_marshal_VOID__VOIDv (closure=0x39474b0, return_value=0x0, instance=0x1c82bd0, args=0x7fffffffc758, marshal_data=0x0, n_params=0, param_types=0x0) at gmarshal.c:115
#53 0x00007ffff51927bc in _g_closure_invoke_va (closure=0x39474b0, return_value=0x0, instance=0x1c82bd0, args=0x7fffffffc758, n_params=0, param_types=0x0) at gclosure.c:840
#54 0x00007ffff51ad42b in g_signal_emit_valist (instance=0x1c82bd0, signal_id=219, detail=0, var_args=0x7fffffffc758) at gsignal.c:3211
#55 0x00007ffff51ae5dc in g_signal_emit (instance=0x1c82bd0, signal_id=219, detail=0) at gsignal.c:3356
#56 0x00007ffff57dd6d6 in gtk_button_clicked (button=0x1c82bd0) at gtkbutton.c:1308
#57 0x00007ffff57deb79 in gtk_real_button_released (button=0x1c82bd0) at gtkbutton.c:1967
#58 0x00007ffff519551b in g_cclosure_marshal_VOID__VOIDv (closure=0x12aed30, return_value=0x0, instance=0x1c82bd0, args=0x7fffffffcd48, marshal_data=0x7ffff57deb0e, n_params=0, param_types=0x0) at gmarshal.c:115
#59 0x00007ffff5192c10 in g_type_class_meta_marshalv (closure=0x12aed30, return_value=0x0, instance=0x1c82bd0, args=0x7fffffffcd48, marshal_data=0x3f8, n_params=0, param_types=0x0) at gclosure.c:997
#60 0x00007ffff51927bc in _g_closure_invoke_va (closure=0x12aed30, return_value=0x0, instance=0x1c82bd0, args=0x7fffffffcd48, n_params=0, param_types=0x0) at gclosure.c:840
#61 0x00007ffff51ad42b in g_signal_emit_valist (instance=0x1c82bd0, signal_id=218, detail=0, var_args=0x7fffffffcd48) at gsignal.c:3211
#62 0x00007ffff51ae5dc in g_signal_emit (instance=0x1c82bd0, signal_id=218, detail=0) at gsignal.c:3356
#63 0x00007ffff57de6ce in gtk_button_button_release (widget=0x1c82bd0, event=0x1c444b0) at gtkbutton.c:1802
#64 0x00007ffff58f176c in _gtk_marshal_BOOLEAN__BOXEDv (closure=0x504610, return_value=0x7fffffffd190, instance=0x1c82bd0, args=0x7fffffffd328, marshal_data=0x7ffff57de68c, n_params=1, param_types=0x504640) at gtkmarshalers.c:130
#65 0x00007ffff5192c10 in g_type_class_meta_marshalv (closure=0x504610, return_value=0x7fffffffd190, instance=0x1c82bd0, args=0x7fffffffd328, marshal_data=0x188, n_params=1, param_types=0x504640) at gclosure.c:997
#66 0x00007ffff51927bc in _g_closure_invoke_va (closure=0x504610, return_value=0x7fffffffd190, instance=0x1c82bd0, args=0x7fffffffd328, n_params=1, param_types=0x504640) at gclosure.c:840
#67 0x00007ffff51ad42b in g_signal_emit_valist (instance=0x1c82bd0, signal_id=29, detail=0, var_args=0x7fffffffd328) at gsignal.c:3211
#68 0x00007ffff51ae5dc in g_signal_emit (instance=0x1c82bd0, signal_id=29, detail=0) at gsignal.c:3356
#69 0x00007ffff5a8b566 in gtk_widget_event_internal (widget=0x1c82bd0, event=0x1c444b0) at gtkwidget.c:6301
#70 0x00007ffff5a8abd0 in gtk_widget_event (widget=0x1c82bd0, event=0x1c444b0) at gtkwidget.c:5958
#71 0x00007ffff58f10be in propagate_event_up (widget=0x1c82bd0, event=0x1c444b0, topmost=0x0) at gtkmain.c:2397
#72 0x00007ffff58f1420 in propagate_event (widget=0x1c82bd0, event=0x1c444b0, captured=0, topmost=0x0) at gtkmain.c:2497
#73 0x00007ffff58f14ee in gtk_propagate_event (widget=0x1c82bd0, event=0x1c444b0) at gtkmain.c:2532
#74 0x00007ffff58efffa in gtk_main_do_event (event=0x1c444b0) at gtkmain.c:1720
#75 0x00007ffff553b582 in _gdk_event_emit (event=0x1c444b0) at gdkevents.c:69
#76 0x00007ffff5570840 in gdk_event_source_dispatch (source=0x54e510, callback=0, user_data=0x0) at gdkeventsource.c:358
#77 0x00007ffff5087c8b in g_main_dispatch (context=0x529890) at gmain.c:2715
#78 0x00007ffff5088821 in g_main_context_dispatch (context=0x529890) at gmain.c:3219
#79 0x00007ffff5088a04 in g_main_context_iterate (context=0x529890, block=1, dispatch=1, self=0x52b240) at gmain.c:3290
#80 0x00007ffff5088ac8 in g_main_context_iteration (context=0x529890, may_block=1) at gmain.c:3351
#81 0x00007ffff52a6fdd in g_application_run (application=0x667000, argc=1, argv=0x7fffffffd9e8) at gapplication.c:1620
#82 0x000000000042e6ac in main (argc=1, argv=0x7fffffffd9e8) at ../../src/ephy-main.c:499
(gdb)

[Martin Robinson]

It would be very useful to have an apitrace dump and/or a trace from a stable release. I've never seen this issue and sadly it looks like a driver bug.

[Alejandro G. Castro]

Just checked closing ephy tabs with a today's trunk with WebKit2 does not crash for me. So could be the driver.

[Michael Catanzaro]

This is obsolete.