WebKit Bugzilla
New
Browse
Search+
Log In
×
Sign in with GitHub
or
Remember my login
Create Account
·
Forgot Password
Forgotten password account recovery
NEW
193532
webkitWebViewBaseCreateWebPage SIGSEGV due Invalid read of size 8
https://bugs.webkit.org/show_bug.cgi?id=193532
Summary
webkitWebViewBaseCreateWebPage SIGSEGV due Invalid read of size 8
Germano Massullo
Reported
2019-01-17 02:15:31 PST
Created
attachment 359364
[details]
GDB backtrace While trying to debug this crash on BOINC Manager gui
https://github.com/BOINC/boinc/issues/2350
by looking at GDB backtrace (see attachment) and Valgrind output (hereunder), I think it is a problem Webkit, in particular you get a SIGSEGV: segmentation violation at the function webkitWebViewBaseCreateWebPage(_WebKitWebViewBase*, WTF::Ref<API::PageConfiguration, WTF::DumbPtrTraits<API::PageConfiguration> >&&) of file WebKitWebViewBase.cpp:1364 Libraries version I am using: webkit2gtk3-2.22.5-1.fc29.x86_64 wxBase3-3.0.4-4.fc29.x86_64 wxGTK3-3.0.4-4.fc29.x86_64 wxGTK3-webview-3.0.4-4.fc29.x86_64 Valgrind output when BOINC Manager crashes: ==6052== ==6052== HEAP SUMMARY: ==6052== in use at exit: 10,297,642 bytes in 84,663 blocks ==6052== total heap usage: 1,338,545 allocs, 1,253,882 frees, 1,767,724,014 bytes allocated ==6052== ==6052== LEAK SUMMARY: ==6052== definitely lost: 364,320 bytes in 1,312 blocks ==6052== indirectly lost: 418,708 bytes in 13,602 blocks ==6052== possibly lost: 8,109 bytes in 113 blocks ==6052== still reachable: 8,861,441 bytes in 64,897 blocks ==6052== of which reachable via heuristic: ==6052== length64 : 9,888 bytes in 147 blocks ==6052== newarray : 49,560 bytes in 78 blocks ==6052== suppressed: 0 bytes in 0 blocks ==6052== Rerun with --leak-check=full to see details of leaked memory ==6052== ==6052== For counts of detected and suppressed errors, rerun with: -v ==6052== Use --track-origins=yes to see where uninitialised values come from ==6052== ERROR SUMMARY: 189 errors from 6 contexts (suppressed: 0 from 0) ==5953== Invalid read of size 8 ==5953== at 0x6874D7A: g_dbus_server_get_client_address (gdbusserver.c:518) ==5953== by 0x4996134: wxgtk_initialize_web_extensions (webview_webkit2.cpp:367) ==5953== by 0x69553DC: g_closure_invoke (gclosure.c:810) ==5953== by 0x6968982: signal_emit_unlocked_R (gsignal.c:3635) ==5953== by 0x6971AA9: g_signal_emit_valist (gsignal.c:3391) ==5953== by 0x69720A2: g_signal_emit (gsignal.c:3447) ==5953== by 0x77EA6A6: webkitWebContextInitializeWebExtensions(_WebKitWebContext*) (WebKitWebContext.cpp:1600) ==5953== by 0x77D1499: WebKitInjectedBundleClient::getInjectedBundleInitializationUserData(WebKit::WebProcessPool&) (WebKitInjectedBundleClient.cpp:136) ==5953== by 0x7754E2C: WebKit::WebProcessPool::initializeNewWebProcess(WebKit::WebProcessProxy&, WebKit::WebsiteDataStore&) (WebProcessPool.cpp:982) ==5953== by 0x775500D: WebKit::WebProcessPool::createNewWebProcess(WebKit::WebsiteDataStore&, WebKit::WebProcessProxy::IsInPrewarmedPool) (WebProcessPool.cpp:797) ==5953== by 0x77554D3: WebKit::WebProcessPool::createWebPage(WebKit::PageClient&, WTF::Ref<API::PageConfiguration, WTF::DumbPtrTraits<API::PageConfiguration> >&&) (WebProcessPool.cpp:1180) ==5953== by 0x780E9DD: webkitWebViewBaseCreateWebPage(_WebKitWebViewBase*, WTF::Ref<API::PageConfiguration, WTF::DumbPtrTraits<API::PageConfiguration> >&&) (WebKitWebViewBase.cpp:1364) ==5953== Address 0x11000000110 is not stack'd, malloc'd or (recently) free'd ==5953== ==5953== ==5953== HEAP SUMMARY: ==5953== in use at exit: 10,301,652 bytes in 84,670 blocks ==5953== total heap usage: 1,338,587 allocs, 1,253,917 frees, 1,767,726,032 bytes allocated ==5953== ==5953== LEAK SUMMARY: ==5953== definitely lost: 351,824 bytes in 1,295 blocks ==5953== indirectly lost: 418,612 bytes in 13,598 blocks ==5953== possibly lost: 12,141 bytes in 122 blocks ==5953== still reachable: 8,874,011 bytes in 64,916 blocks ==5953== of which reachable via heuristic: ==5953== length64 : 9,888 bytes in 147 blocks ==5953== newarray : 49,560 bytes in 78 blocks ==5953== suppressed: 0 bytes in 0 blocks ==5953== Rerun with --leak-check=full to see details of leaked memory ==5953== ==5953== For counts of detected and suppressed errors, rerun with: -v ==5953== Use --track-origins=yes to see where uninitialised values come from ==5953== ERROR SUMMARY: 193 errors from 7 contexts (suppressed: 0 from 0)
Attachments
GDB backtrace
(59.94 KB, text/plain)
2019-01-17 02:15 PST
,
Germano Massullo
no flags
Details
View All
Add attachment
proposed patch, testcase, etc.
Note
You need to
log in
before you can comment on or make changes to this bug.
Top of Page
Format For Printing
XML
Clone This Bug