157126 2016-04-28 02:02:13 -0700 [GTK][Stable] JavaScriptCore crash in 2.12.2 2016-04-28 05:53:19 -0700 1 1 1 Unclassified WebKit WebKitGTK Other Unspecified Unspecified RESOLVED DUPLICATE 156487 P2 Normal --- 1 berto webkit-unassigned bugs-noreply cgarcia clopez kapouer mcatanzaro oldest_to_newest 1188187 0 berto 2016-04-28 02:02:13 -0700 JSC is reported to crash when opening this URL: http://gexpertise.fr/activites/metiers/stockage This has been reproduced with the MiniBrowser in 2.12.1, but Carlos reports that 2.12.2 crashes as well. trunk seems to be working fine. A workaround is to set JavaScriptCoreUseJIT=0 Here's the backtrace: Program received signal SIGSEGV, Segmentation fault. JSC::StackVisitor::readFrame (this=0x7ffdf68ef990, callFrame=0xffff000000000002) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/interpreter/StackVisitor.cpp:100 100 /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/interpreter/StackVisitor.cpp: Aucun fichier ou dossier de ce type. (gdb) bt #0 JSC::StackVisitor::readFrame (this=0x7ffdf68ef990, callFrame=0xffff000000000002) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/interpreter/StackVisitor.cpp:100 #1 0x00007f0d72f5a0c6 in JSC::StackVisitor::visit<JSC::RecursionCheckFunctor> (functor=<synthetic pointer>, startFrame=<optimized out>) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/interpreter/StackVisitor.h:128 #2 JSC::ExecState::iterate<JSC::RecursionCheckFunctor> (functor=<synthetic pointer>, this=<optimized out>) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/interpreter/CallFrame.h:252 #3 JSC::CodeBlock::noticeIncomingCall (this=this@entry=0x7f0d02505200, callerFrame=0x7ffdf68efc00) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/bytecode/CodeBlock.cpp:3472 #4 0x00007f0d72f5a1f1 in JSC::CodeBlock::linkIncomingCall (this=this@entry=0x7f0d02505200, callerFrame=<optimized out>, incoming=incoming@entry=0x7f0d0217a100) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/bytecode/CodeBlock.cpp:3173 #5 0x00007f0d732e680e in JSC::linkFor (exec=exec@entry=0x7ffdf68efb40, callLinkInfo=..., calleeCodeBlock=calleeCodeBlock@entry=0x7f0d02505200, callee=callee@entry=0x7f0d02443d00, codePtr=..., codePtr@entry=...) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/jit/Repatch.cpp:571 #6 0x00007f0d732cd998 in JSC::operationLinkCall (execCallee=0x7ffdf68efb40, callLinkInfo=0x7f0d0217a100) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/jit/JITOperations.cpp:819 #7 0x00007f0d53ffee64 in ?? () #8 0x00007ffdf68efc00 in ?? () #9 0x00007f0d140841ae in ?? () #10 0x0000000000000000 in ?? () 1188198 1 clopez 2016-04-28 04:36:35 -0700 I'm not able to reproduce this with 2.12 1188205 2 kapouer 2016-04-28 05:12:43 -0700 I'm pretty sure this is a duplicate of https://bugs.webkit.org/show_bug.cgi?id=156487 1188217 3 mcatanzaro 2016-04-28 05:53:19 -0700 *** This bug has been marked as a duplicate of bug 156487 ***