#310
Issues/pizlonator/fil-c/#310

Null pointer crash in webkitWebViewBaseEnterAcceleratedCompositingMode

Openpizlonatoropened 2mo ago
filc safety error: cannot read pointer with null object.
    pointer: (nil),<null>
    expected 8 bytes with ptr aligned to 8 bytes.
semantic origin:
    (libwebkitgtk-6.0.so.4) Source/WebKit/UIProcess/API/gtk/WebKitWebViewBase.cpp:2928:55: webkitWebViewBaseEnterAcceleratedCompositingMode(_WebKitWebViewBase*, WebKit::LayerTreeContext const&)
check scheduled at:
    (libwebkitgtk-6.0.so.4) Source/WebKit/UIProcess/API/gtk/WebKitWebViewBase.cpp:2928:55: webkitWebViewBaseEnterAcceleratedCompositingMode(_WebKitWebViewBase*, WebKit::LayerTreeContext const&)
    (libwebkitgtk-6.0.so.4) Source/WebKit/UIProcess/API/gtk/PageClientImpl.cpp:332:5: WebKit::PageClientImpl::enterAcceleratedCompositingMode(WebKit::LayerTreeContext const&)
    (libwebkitgtk-6.0.so.4) Source/WebKit/UIProcess/WebPageProxy.cpp:10109:28: WebKit::WebPageProxy::enterAcceleratedCompositingMode(WebKit::LayerTreeContext const&)
    (libwebkitgtk-6.0.so.4) Source/WebKit/UIProcess/CoordinatedGraphics/DrawingAreaProxyCoordinatedGraphics.cpp:240:30: WebKit::DrawingAreaProxyCoordinatedGraphics::enterAcceleratedCompositingMode(WebKit::LayerTreeContext const&) (inlined)
    (libwebkitgtk-6.0.so.4) Source/WebKit/UIProcess/CoordinatedGraphics/DrawingAreaProxyCoordinatedGraphics.cpp:212:5: WebKit::DrawingAreaProxyCoordinatedGraphics::enterAcceleratedCompositingMode(unsigned long, WebKit::LayerTreeContext const&)
    (libwebkitgtk-6.0.so.4) Source/WebKit/Platform/IPC/HandleMessage.h:136:13: auto void IPC::callMemberFunction<WebKit::DrawingAreaProxy, WebKit::DrawingAreaProxy, void (unsigned long, WebKit::LayerTreeContext const&), std::__1::tuple<unsigned long, WebKit::LayerTreeContext>>(WebKit::DrawingAreaProxy*, void (WebKit::DrawingAreaProxy::*)(unsigned long, WebKit::LayerTreeContext const&), std::__1::tuple<unsigned long, WebKit::LayerTreeContext>&&)::'lambda'(auto&&...)::operator()<unsigned long, WebKit::LayerTreeContext>(auto&&...) const (inlined)
    (libwebkitgtk-6.0.so.4) /usr/bin/../include/c++/v1/__type_traits/invoke.h:179:25: decltype(std::declval<WebKit::DrawingAreaProxy>()(std::declval<unsigned long>(), std::declval<WebKit::LayerTreeContext>())) std::__1::__invoke[abi:sn200100]<void IPC::callMemberFunction<WebKit::DrawingAreaProxy, WebKit::DrawingAreaProxy, void (unsigned long, WebKit::LayerTreeContext const&), std::__1::tuple<unsigned long, WebKit::LayerTreeContext>>(WebKit::DrawingAreaProxy*, void (WebKit::DrawingAreaProxy::*)(unsigned long, WebKit::LayerTreeContext const&), std::__1::tuple<unsigned long, WebKit::LayerTreeContext>&&)::'lambda'(auto&&...), unsigned long, WebKit::LayerTreeContext>(WebKit::DrawingAreaProxy&&, unsigned long&&, WebKit::LayerTreeContext&&) (inlined)
    (libwebkitgtk-6.0.so.4) /usr/bin/../include/c++/v1/tuple:1375:5: decltype(auto) std::__1::__apply_tuple_impl[abi:sn200100]<void IPC::callMemberFunction<WebKit::DrawingAreaProxy, WebKit::DrawingAreaProxy, void (unsigned long, WebKit::LayerTreeContext const&), std::__1::tuple<unsigned long, WebKit::LayerTreeContext>>(WebKit::DrawingAreaProxy*, void (WebKit::DrawingAreaProxy::*)(unsigned long, WebKit::LayerTreeContext const&), std::__1::tuple<unsigned long, WebKit::LayerTreeContext>&&)::'lambda'(auto&&...), std::__1::tuple<unsigned long, WebKit::LayerTreeContext>, 0ul, 1ul>(WebKit::DrawingAreaProxy&&, WebKit::DrawingAreaProxy&&, std::__1::__tuple_indices<0ul, 1ul>) (inlined)
    (libwebkitgtk-6.0.so.4) /usr/bin/../include/c++/v1/tuple:1379:5: decltype(auto) std::__1::apply[abi:sn200100]<void IPC::callMemberFunction<WebKit::DrawingAreaProxy, WebKit::DrawingAreaProxy, void (unsigned long, WebKit::LayerTreeContext const&), std::__1::tuple<unsigned long, WebKit::LayerTreeContext>>(WebKit::DrawingAreaProxy*, void (WebKit::DrawingAreaProxy::*)(unsigned long, WebKit::LayerTreeContext const&), std::__1::tuple<unsigned long, WebKit::LayerTreeContext>&&)::'lambda'(auto&&...), std::__1::tuple<unsigned long, WebKit::LayerTreeContext>>(WebKit::DrawingAreaProxy&&, WebKit::DrawingAreaProxy&&) (inlined)
    (libwebkitgtk-6.0.so.4) Source/WebKit/Platform/IPC/HandleMessage.h:134:5: void IPC::callMemberFunction<WebKit::DrawingAreaProxy, WebKit::DrawingAreaProxy, void (unsigned long, WebKit::LayerTreeContext const&), std::__1::tuple<unsigned long, WebKit::LayerTreeContext>>(WebKit::DrawingAreaProxy*, void (WebKit::DrawingAreaProxy::*)(unsigned long, WebKit::LayerTreeContext const&), std::__1::tuple<unsigned long, WebKit::LayerTreeContext>&&) (inlined)
    (libwebkitgtk-6.0.so.4) Source/WebKit/Platform/IPC/HandleMessage.h:236:9: void IPC::handleMessage<Messages::DrawingAreaProxy::EnterAcceleratedCompositingMode, WebKit::DrawingAreaProxy, WebKit::DrawingAreaProxy, void (unsigned long, WebKit::LayerTreeContext const&)>(IPC::Connection&, IPC::Decoder&, WebKit::DrawingAreaProxy*, void (WebKit::DrawingAreaProxy::*)(unsigned long, WebKit::LayerTreeContext const&)) (inlined)
    (libwebkitgtk-6.0.so.4) DerivedSources/WebKit/DrawingAreaProxyMessageReceiver.cpp:48:16: WebKit::DrawingAreaProxy::didReceiveMessage(IPC::Connection&, IPC::Decoder&)
    (libwebkitgtk-6.0.so.4) Source/WebKit/Platform/IPC/MessageReceiverMap.cpp:129:26: IPC::MessageReceiverMap::dispatchMessage(IPC::Connection&, IPC::Decoder&)
    (libwebkitgtk-6.0.so.4) Source/WebKit/UIProcess/AuxiliaryProcessProxy.cpp:306:33: WebKit::AuxiliaryProcessProxy::dispatchMessage(IPC::Connection&, IPC::Decoder&)
    (libwebkitgtk-6.0.so.4) Source/WebKit/UIProcess/WebProcessProxy.cpp:1103:9: WebKit::WebProcessProxy::didReceiveMessage(IPC::Connection&, IPC::Decoder&)
    (libwebkitgtk-6.0.so.4) Source/WebKit/UIProcess/WebProcessProxy.cpp: non-virtual thunk to WebKit::WebProcessProxy::didReceiveMessage(IPC::Connection&, IPC::Decoder&)
    (libwebkitgtk-6.0.so.4) Source/WebKit/Platform/IPC/Connection.cpp:1300:15: IPC::Connection::dispatchMessage(IPC::Decoder&)
    (libwebkitgtk-6.0.so.4) Source/WebKit/Platform/IPC/Connection.cpp:1348:9: IPC::Connection::dispatchMessage(WTF::UniqueRef<IPC::Decoder>)
    (libwebkitgtk-6.0.so.4) Source/WebKit/Platform/IPC/Connection.cpp:1458:5: IPC::Connection::dispatchIncomingMessages()
    (libwebkitgtk-6.0.so.4) Source/WebKit/Platform/IPC/Connection.cpp:1258:28: IPC::Connection::enqueueIncomingMessage(WTF::UniqueRef<IPC::Decoder>)::$_0::operator()() const (inlined)
    (libwebkitgtk-6.0.so.4) WTF/Headers/wtf/Function.h:53:39: WTF::Detail::CallableWrapper<IPC::Connection::enqueueIncomingMessage(WTF::UniqueRef<IPC::Decoder>)::$_0, void>::call()
    (libjavascriptcoregtk-6.0.so.1) Source/WTF/wtf/Function.h:82:35: WTF::Function<void ()>::operator()() const (inlined)
    (libjavascriptcoregtk-6.0.so.1) Source/WTF/wtf/RunLoop.cpp:147:9: WTF::RunLoop::performWork()
    (libjavascriptcoregtk-6.0.so.1) Source/WTF/wtf/glib/RunLoopGLib.cpp:80:42: WTF::RunLoop::RunLoop()::$_0::operator()(void*) const (inlined)
    (libjavascriptcoregtk-6.0.so.1) Source/WTF/wtf/glib/RunLoopGLib.cpp:79:43: WTF::RunLoop::RunLoop()::$_0::__invoke(void*)
    (libjavascriptcoregtk-6.0.so.1) Source/WTF/wtf/glib/RunLoopGLib.cpp:53:28: WTF::RunLoop::$_0::operator()(_GSource*, int (*)(void*), void*) const (inlined)
    (libjavascriptcoregtk-6.0.so.1) Source/WTF/wtf/glib/RunLoopGLib.cpp:45:5: WTF::RunLoop::$_0::__invoke(_GSource*, int (*)(void*), void*)
    (libglib-2.0.so.0) ../glib/gmain.c:3344:27: g_main_dispatch (inlined)
    (libglib-2.0.so.0) ../glib/gmain.c:4152:7: g_main_context_dispatch_unlocked
    (libglib-2.0.so.0) ../glib/gmain.c:4217:5: g_main_context_iterate_unlocked
    (libglib-2.0.so.0) ../glib/gmain.c:4282:12: g_main_context_iteration
    (libgio-2.0.so.0) ../gio/gapplication.c:2712:7: g_application_run
    (MiniBrowser) Tools/MiniBrowser/gtk/main.c:1023:5: main
    (libc.so.6666) ../sysdeps/nptl/libc_start_call_main.h:58:16: __libc_start_call_main
    (libc.so.6666) ../csu/libc-start.c:161:3: __libc_start_main
    (libpizlo.so) <runtime>: start_program
filc panic: thwarted a futile attempt to violate memory safety.

Activity

0

No activity yet.