Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-44361

Segfault in WebCore::Path::isEmpty/QPainterPath::elementCount on embedded soundcloud player

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Cannot Reproduce
    • Icon: P2: Important P2: Important
    • None
    • 5.4.0
    • WebKit
    • None
    • Archlinux

      How to reproduce:

      • Go to http://reddit.com/r/gohamhour
      • Find an episode with a soundcloud player, e.g. #3 at the very bottom
      • Click the play/plus icon to show the player
      • In the player, click play/pause a few times (around 5 times for me)

      Stacktrace:

      #0  QPainterPath::elementCount (this=0x0) at painting/qpainterpath.cpp:477
      #1  0x00007ffff5cd9349 in WebCore::Path::isEmpty (this=<optimized out>) at platform/graphics/qt/PathQt.cpp:348
      #2  0x00007ffff64c3e1a in WebCore::RenderSVGShape::paint (this=0x7fff71ff53e8, paintInfo=...) at rendering/svg/RenderSVGShape.cpp:274
      #3  0x00007ffff6740f22 in WebCore::RenderBox::paint (this=this@entry=0x7fff7004ae40, paintInfo=..., paintOffset=...) at rendering/RenderBox.cpp:1047
      #4  0x00007ffff64dfd37 in WebCore::RenderSVGRoot::paintReplaced (this=0x7fff7004ae40, paintInfo=..., paintOffset=...) at rendering/svg/RenderSVGRoot.cpp:314
      #5  0x00007ffff6814354 in WebCore::RenderReplaced::paint (this=0x7fff7004ae40, paintInfo=..., paintOffset=...) at rendering/RenderReplaced.cpp:158
      #6  0x00007ffff67809d1 in WebCore::InlineBox::paint (this=0x7fff5760c2c0, paintInfo=..., paintOffset=...) at rendering/InlineBox.cpp:237
      #7  0x00007ffff6830628 in WebCore::InlineFlowBox::paint (this=this@entry=0x7fff5760c2f8, paintInfo=..., paintOffset=..., lineTop=..., lineTop@entry=..., lineBottom=..., lineBottom@entry=...)
          at rendering/InlineFlowBox.cpp:1170
      #8  0x00007ffff6830a2c in WebCore::RootInlineBox::paint (this=0x7fff5760c2f8, paintInfo=..., paintOffset=..., lineTop=..., lineBottom=...) at rendering/RootInlineBox.cpp:218
      #9  0x00007ffff680bfc3 in WebCore::RenderLineBoxList::paint (this=this@entry=0x7fff71ff50b8, renderer=renderer@entry=0x7fff71ff5020, paintInfo=..., paintOffset=...) at rendering/RenderLineBoxList.cpp:262
      #10 0x00007ffff680c27d in WebCore::RenderBlock::paintContents (this=0x7fff71ff5020, paintInfo=..., paintOffset=...) at rendering/RenderBlock.cpp:3177
      #11 0x00007ffff681035e in WebCore::RenderBlock::paintObject (this=0x7fff71ff5020, paintInfo=..., paintOffset=...) at rendering/RenderBlock.cpp:3295
      #12 0x00007ffff67b9f06 in WebCore::RenderBlock::paint (this=0x7fff71ff5020, paintInfo=..., paintOffset=...) at rendering/RenderBlock.cpp:2990
      #13 0x00007ffff675ca12 in WebCore::RenderBlock::paintChild (this=this@entry=0x7fff7004ac18, child=0x7fff71ff5020, paintInfo=..., paintOffset=..., paintInfoForChild=..., usePrintRect=usePrintRect@entry=false)
          at rendering/RenderBlock.cpp:3228
      #14 0x00007ffff5c49364 in WebCore::RenderFlexibleBox::paintChildren (this=0x7fff7004ac18, paintInfo=..., paintOffset=..., paintInfoForChild=..., usePrintRect=<optimized out>) at rendering/RenderFlexibleBox.cpp:419
      #15 0x00007ffff680c214 in WebCore::RenderBlock::paintContents (this=0x7fff7004ac18, paintInfo=..., paintOffset=...) at rendering/RenderBlock.cpp:3190
      #16 0x00007ffff681035e in WebCore::RenderBlock::paintObject (this=0x7fff7004ac18, paintInfo=..., paintOffset=...) at rendering/RenderBlock.cpp:3295
      #17 0x00007ffff67b9f06 in WebCore::RenderBlock::paint (this=0x7fff7004ac18, paintInfo=..., paintOffset=...) at rendering/RenderBlock.cpp:2990
      #18 0x00007ffff679a890 in WebCore::RenderLayer::paintForegroundForFragmentsWithPhase (this=this@entry=0x7fff7004ad18, phase=phase@entry=WebCore::PaintPhaseForeground, layerFragments=..., context=context@entry=0x7fff56661120, 
          localPaintingInfo=..., paintBehavior=paintBehavior@entry=0, subtreePaintRootForRenderer=0x0) at rendering/RenderLayer.cpp:4234
      #19 0x00007ffff67c360f in WebCore::RenderLayer::paintForegroundForFragments (this=0x7fff7004ad18, layerFragments=..., context=0x7fff56661120, transparencyLayerContext=<optimized out>, transparencyPaintDirtyRect=..., 
          haveTransparency=<optimized out>, localPaintingInfo=..., paintBehavior=0, subtreePaintRootForRenderer=0x0, selectionOnly=false, forceBlackText=false) at rendering/RenderLayer.cpp:4210
      #20 0x00007ffff6869a77 in WebCore::RenderLayer::paintLayerContents (this=0x7fff7004ad18, context=0x7fff56661120, paintingInfo=..., paintFlags=224) at rendering/RenderLayer.cpp:3941
      #21 0x00007ffff6869fe4 in WebCore::RenderLayer::paintLayerContentsAndReflection (this=this@entry=0x7fff7004ad18, context=context@entry=0x7fff56661120, paintingInfo=..., paintFlags=paintFlags@entry=224)
          at rendering/RenderLayer.cpp:3701
      #22 0x00007ffff686a790 in WebCore::RenderLayer::paintLayer (this=this@entry=0x7fff7004ad18, context=context@entry=0x7fff56661120, paintingInfo=..., paintFlags=paintFlags@entry=224) at rendering/RenderLayer.cpp:3683
      #23 0x00007ffff686b812 in WebCore::RenderLayer::paintList (this=0x7fff71e11278, list=0x7fff56d2dc00, context=0x7fff56661120, paintingInfo=..., paintFlags=224) at rendering/RenderLayer.cpp:4027
      #24 0x00007ffff6869dfe in WebCore::RenderLayer::paintLayerContents (this=0x7fff71e11278, context=0x7fff56661120, paintingInfo=..., paintFlags=224) at rendering/RenderLayer.cpp:3952
      #25 0x00007ffff5c68606 in WebCore::RenderLayerBacking::paintIntoLayer (this=0x7fff571c7140, graphicsLayer=0x7fff571b6a00, context=0x7fff56661120, paintDirtyRect=..., paintBehavior=0, paintingPhase=<optimized out>)
          at rendering/RenderLayerBacking.cpp:1987
      #26 0x00007ffff5c68751 in WebCore::RenderLayerBacking::paintContents (this=0x7fff571c7140, graphicsLayer=0x7fff571b6a00, context=..., paintingPhase=<optimized out>, clip=...) at rendering/RenderLayerBacking.cpp:2032
      #27 0x00007ffff5baa90f in WebCore::GraphicsLayer::paintGraphicsLayerContents (this=this@entry=0x7fff571b6a00, context=..., clip=...) at platform/graphics/GraphicsLayer.cpp:324
      #28 0x00007ffff5cdd91d in WebCore::BitmapTextureImageBuffer::updateContents (this=<optimized out>, sourceLayer=0x7fff571b6a00, targetRect=..., sourceOffset=...) at platform/graphics/texmap/TextureMapperImageBuffer.cpp:71
      #29 0x00007ffff5ce328c in WebCore::TextureMapperTile::updateContents (this=0x7fff85e02400, textureMapper=textureMapper@entry=0x7fff576013c0, sourceLayer=sourceLayer@entry=0x7fff571b6a00, dirtyRect=..., 
          updateContentsFlag=updateContentsFlag@entry=WebCore::BitmapTexture::UpdateCanModifyOriginalImageData) at platform/graphics/texmap/TextureMapperTile.cpp:69
      #30 0x00007ffff5ce48d8 in WebCore::TextureMapperTiledBackingStore::updateContents (this=0x7fff5691d508, textureMapper=textureMapper@entry=0x7fff576013c0, sourceLayer=sourceLayer@entry=0x7fff571b6a00, totalSize=..., 
          dirtyRect=..., updateContentsFlag=updateContentsFlag@entry=WebCore::BitmapTexture::UpdateCanModifyOriginalImageData) at platform/graphics/texmap/TextureMapperTiledBackingStore.cpp:152
      #31 0x00007ffff5cdb246 in WebCore::GraphicsLayerTextureMapper::updateBackingStoreIfNeeded (this=0x7fff571b6a00) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:622
      #32 0x00007ffff5cda11c in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff571b6a00, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:589
      #33 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff5764ec80, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #34 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff57645c80, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #35 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff57645280, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #36 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff57645500, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #37 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff57645a00, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #38 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff5764e000, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #39 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff57653a00, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #40 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff57653c80, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #41 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff5764ea00, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #42 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff5764e280, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #43 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff5764e500, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #44 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff5764e780, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #45 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff57656c80, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #46 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff57656a00, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #47 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff57653780, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #48 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff57653000, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #49 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff57653280, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #50 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff57653500, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #51 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff5765aa00, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #52 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff5765a500, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #53 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff5765a780, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #54 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff57656780, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #55 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff57656000, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #56 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff57656280, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #57 0x00007ffff5cda17b in WebCore::GraphicsLayerTextureMapper::flushCompositingState (this=0x7fff57656500, rect=...) at platform/graphics/texmap/GraphicsLayerTextureMapper.cpp:596
      #58 0x00007ffff678a299 in WebCore::RenderLayerCompositor::flushPendingLayerChanges (this=0x7fffe44e1e00, isFlushRoot=isFlushRoot@entry=true) at rendering/RenderLayerCompositor.cpp:396
      #59 0x00007ffff5b4c583 in WebCore::FrameView::flushCompositingStateForThisFrame (this=this@entry=0x7fffe44d4a00, rootFrameForFlush=0x7fffe44b9c00) at page/FrameView.cpp:935
      #60 0x00007ffff5b4c5c3 in WebCore::FrameView::flushCompositingStateIncludingSubframes (this=0x7fffe44d4a00) at page/FrameView.cpp:1037
      #61 0x00007ffff5795e09 in WebCore::TextureMapperLayerClientQt::syncLayers (this=0xe750c0) at qt/WebCoreSupport/TextureMapperLayerClientQt.cpp:90
      #62 0x00007ffff5c2d281 in WebCore::ThreadTimers::sharedTimerFiredInternal (this=0x7fffe44850c8) at platform/ThreadTimers.cpp:129
      #63 0x00007ffff4a38473 in QObject::event (this=0x905c90, e=<optimized out>) at kernel/qobject.cpp:1267
      #64 0x00007ffff789ad8c in QApplicationPrivate::notify_helper (this=0x730ce0, receiver=0x905c90, e=0x7fffffffda60) at kernel/qapplication.cpp:3722
      #65 0x00007ffff78a0370 in QApplication::notify (this=0x7fffffffdd20, receiver=0x905c90, e=0x7fffffffda60) at kernel/qapplication.cpp:3505
      #66 0x00007ffff4a07a9b in QCoreApplication::notifyInternal (this=0x7fffffffdd20, receiver=0x905c90, event=event@entry=0x7fffffffda60) at kernel/qcoreapplication.cpp:932
      #67 0x00007ffff4a5df6d in sendEvent (event=0x7fffffffda60, receiver=<optimized out>) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:228
      #68 QTimerInfoList::activateTimers (this=0x75d330) at kernel/qtimerinfo_unix.cpp:635
      #69 0x00007ffff4a5e3b1 in timerSourceDispatch (source=<optimized out>) at kernel/qeventdispatcher_glib.cpp:177
      #70 0x00007ffff347ba0d in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
      #71 0x00007ffff347bcf8 in ?? () from /usr/lib/libglib-2.0.so.0
      #72 0x00007ffff347bdac in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
      #73 0x00007ffff4a5f077 in QEventDispatcherGlib::processEvents (this=0x75d870, flags=...) at kernel/qeventdispatcher_glib.cpp:418
      #74 0x00007ffff4a05532 in QEventLoop::exec (this=this@entry=0x7fffffffdcb0, flags=..., flags@entry=...) at kernel/qeventloop.cpp:204
      #75 0x00007ffff4a0cf0c in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1185
      #76 0x000000000042cd5f in main ()
      

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

            allan.jensen Allan Sandfeld Jensen
            the compiler Florian Bruhin
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved:

                There are no open Gerrit changes