58789 2011-04-18 08:11:06 -0700 Crash with webkit gtk 1.3.13 build 2015-05-07 17:39:43 -0700 1 1 1 Unclassified WebKit WebKitGTK 528+ (Nightly build) PC Linux RESOLVED WONTFIX P2 Normal --- 0 danilo webkit-unassigned barraclough ggaren mrobinson oliver xan.lopez oldest_to_newest 387727 0 90037 danilo 2011-04-18 08:11:06 -0700 Created attachment 90037 Backtrace I am getting a crash repeatedly in the same place in Epiphany 3.0.0 with webkit gtk 1.3.13 build, linked with gtk 3.0. I get them on unrelated web sites (or so it seems to me). The backtrace is attached, I'll try to see if I get crashes with JIT disabled. Considering this happens in timeout execution, I wonder if bug 30876 is related. 391522 1 mrobinson 2011-04-23 19:54:33 -0700 Does this occur with consistency on some site? If so what site? 392711 2 danilo 2011-04-26 14:23:03 -0700 No, it was the only regular crash that I got on my other computer during usual browsing on arbitrary web sites (at least I haven't noticed a pattern). I haven't seen it at all on this machine (it's also an amd64 build and exactly the same code since I am sharing the .deb packages between machines). With webkitgtk built with --disable-jit, I didn't see this crash anymore (and epiphany only rarely crashes with that), but I suppose that's expected. 421216 3 danilo 2011-06-15 06:15:58 -0700 This still occurs for me very consistently even after upgrade to 1.4.1. It never happened for me when I compiled WebKit without the JIT (I only rarely got the crashes then). Tracebacks are the same (minus the memory addresses, of course :). 421280 4 mrobinson 2011-06-15 07:56:07 -0700 Pasting the stack so that it will show up in searches: (gdb) bt full #0 0x0000000000000000 in ?? () No symbol table info available. #1 0x00007ffff55eeb19 in ctiTrampoline () from /usr/lib/libwebkitgtk-3.0.so.0 No symbol table info available. #2 0x00007ffff55b62ff in execute (this=0x7ffff7eac9d8, callFrame=0x200, function=0xffff000000000002, callType=<value optimized out>, callData=<value optimized out>, thisValue=<value optimized out>, args=...) at ../Source/JavaScriptCore/jit/JITCode.h:77 No locals. #3 JSC::Interpreter::executeCall (this=0x7ffff7eac9d8, callFrame=0x200, function=0xffff000000000002, callType=<value optimized out>, callData=<value optimized out>, thisValue=<value optimized out>, args=...) at ../Source/JavaScriptCore/interpreter/Interpreter.cpp:844 newCodeBlock = <value optimized out> callDataScopeChain = <value optimized out> compileError = 0x7fffd3266038 globalObjectScope = {m_dynamicGlobalObjectSlot = @0x7fffe4890dd0, m_savedDynamicGlobalObject = 0x0} registerOffset = <value optimized out> end = 0x0 scopeChain = 0x7fffc4084e50 argCount = <value optimized out> globalObjectScope = {m_dynamicGlobalObjectSlot = @0x7ffff26367f0, m_savedDynamicGlobalObject = 0x7ffff26261e6} oldEnd = 0x7fffd3266000 dst = <value optimized out> #4 0x00007ffff563ff8d in JSC::call (exec=<value optimized out>, functionObject=<value optimized out>, callType=<value optimized out>, callData=<value optimized out>, thisValue=<value optimized out>, args=<value optimized out>) at ../Source/JavaScriptCore/runtime/CallData.cpp:38 No locals. #5 0x00007ffff4a68215 in call (this=<value optimized out>, globalObject=0x7fffd1b5ebd0, thisValue=..., context=0x7fffd22e5c60) at ../Source/WebCore/bindings/js/JSMainThreadExecState.h:48 No locals. #6 WebCore::ScheduledAction::executeFunctionInContext ( this=<value optimized out>, globalObject=0x7fffd1b5ebd0, thisValue=..., context=0x7fffd22e5c60) at ../Source/WebCore/bindings/js/ScheduledAction.cpp:106 callData = {native = {function = 0x7fffc4084e50}, js = { functionExecutable = 0x7fffc4084e50, scopeChain = 0x7fffc5846a70}} callType = JSC::CallTypeJS exec = 0x7fffd1b5ec58 args = {static inlineCapacity = 8, m_buffer = 0x7fffffffd1a0, m_size = 0, m_isUsingInlineBuffer = true, m_vector = {m_size = 0, m_buffer = {<WTF::VectorBufferBase<JSC::Register>> = { m_buffer = 0x7fffffffd1a0, m_capacity = 8}, static m_inlineBufferSize = 64, m_inlineBuffer = { buffer = "\240\336 \362\377\177\000\000a\366\367\361\377\177\000\000\300\366a\001\000\000\000\000\020I\311\001\000\000\000\000\a\000\000\000\000\000\000\000\346ab\362\377\177\000\000\002\000\000\200\000\000\000\000\333]b\362\377\177\000"}}}, m_markSet = 0x0} size = 0 #7 0x00007ffff4a68813 in WebCore::ScheduledAction::execute ( this=<value optimized out>, document=0x7fffd22e5c00) at ../Source/WebCore/bindings/js/ScheduledAction.cpp:128 window = 0x7fffd1b5ebd0 #8 0x00007ffff4e0b330 in WebCore::DOMTimer::fired (this=0x7fffcd0bf548) at ../Source/WebCore/page/DOMTimer.cpp:148 context = 0x7fffd22e5c60 gestureIndicator = {static s_processingUserGesture = WebCore::PossiblyProcessingUserGesture, m_previousValue = WebCore::PossiblyProcessingUserGesture} cookie = {first = 0x0, second = 0} #9 0x00007ffff4ec7e52 in WebCore::ThreadTimers::sharedTimerFiredInternal ( this=0x7fffe42ad910) at ../Source/WebCore/platform/ThreadTimers.cpp:112 timer = 0x7fffcd0bf548 interval = 0 fireTime = 1303135638.7455771 timeToQuit = 1303135638.795577 #10 0x00007ffff48dfc02 in WebCore::timeout_cb () at ../Source/WebCore/platform/gtk/SharedTimerGtk.cpp:49 No locals. #11 0x00007ffff1f644eb in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0 No symbol table info available. #12 0x00007ffff1f62bcd in g_main_context_dispatch () from /lib/x86_64-linux-gnu/libglib-2.0.so.0 No symbol table info available. #13 0x00007ffff1f633a8 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0 No symbol table info available. #14 0x00007ffff1f639f2 in g_main_loop_run () from /lib/x86_64-linux-gnu/libglib-2.0.so.0 No symbol table info available. #15 0x00007ffff3d76d9d in gtk_main () from /usr/lib/libgtk-3.so.0 No symbol table info available. #16 0x0000000000430ed4 in main (argc=1, argv=0x7fffffffe708) at ephy-main.c:752 option_context = <value optimized out> option_group = <value optimized out> proxy = <value optimized out> error = 0x0 user_time = 18104725 arbitrary_url = <value optimized out> (gdb) 421281 5 mrobinson 2011-06-15 07:56:58 -0700 Do you mind confirming that this happens with the latest stable releases? 421299 6 mrobinson 2011-06-15 08:08:57 -0700 (In reply to comment #5) > Do you mind confirming that this happens with the latest stable releases? Would you be willing to build a debug build and try to get a debug stack trace? I'm also CCing some of the JSC developers. Perhaps they will see something right away in the stack trace. 426091 7 danilo 2011-06-23 05:12:58 -0700 Hi, I'd be very happy to try out with the debug build as well. I see that there might be more things than just debug symbols (which are included in my build already) such as assertions, so I'll try that next. Not sure when I'll have time to try it out, especially since I won't have access to this computer next week. 1092901 8 mrobinson 2015-05-07 17:39:43 -0700 Going to close this since it's unlikely that we will be able to patch the 1.3 series. 90037 2011-04-18 08:11:06 -0700 2011-04-18 08:11:06 -0700 Backtrace webkit-crash.txt text/plain 4794 danilo KGdkYikgYnQgZnVsbAojMCAgMHgwMDAwMDAwMDAwMDAwMDAwIGluID8/ICgpCk5vIHN5bWJvbCB0 YWJsZSBpbmZvIGF2YWlsYWJsZS4KIzEgIDB4MDAwMDdmZmZmNTVlZWIxOSBpbiBjdGlUcmFtcG9s aW5lICgpIGZyb20gL3Vzci9saWIvbGlid2Via2l0Z3RrLTMuMC5zby4wCk5vIHN5bWJvbCB0YWJs ZSBpbmZvIGF2YWlsYWJsZS4KIzIgIDB4MDAwMDdmZmZmNTViNjJmZiBpbiBleGVjdXRlICh0aGlz PTB4N2ZmZmY3ZWFjOWQ4LCBjYWxsRnJhbWU9MHgyMDAsIAogICAgZnVuY3Rpb249MHhmZmZmMDAw MDAwMDAwMDAyLCBjYWxsVHlwZT08dmFsdWUgb3B0aW1pemVkIG91dD4sIAogICAgY2FsbERhdGE9 PHZhbHVlIG9wdGltaXplZCBvdXQ+LCB0aGlzVmFsdWU9PHZhbHVlIG9wdGltaXplZCBvdXQ+LCBh cmdzPS4uLikKICAgIGF0IC4uL1NvdXJjZS9KYXZhU2NyaXB0Q29yZS9qaXQvSklUQ29kZS5oOjc3 Ck5vIGxvY2Fscy4KIzMgIEpTQzo6SW50ZXJwcmV0ZXI6OmV4ZWN1dGVDYWxsICh0aGlzPTB4N2Zm ZmY3ZWFjOWQ4LCBjYWxsRnJhbWU9MHgyMDAsIAogICAgZnVuY3Rpb249MHhmZmZmMDAwMDAwMDAw MDAyLCBjYWxsVHlwZT08dmFsdWUgb3B0aW1pemVkIG91dD4sIAogICAgY2FsbERhdGE9PHZhbHVl IG9wdGltaXplZCBvdXQ+LCB0aGlzVmFsdWU9PHZhbHVlIG9wdGltaXplZCBvdXQ+LCBhcmdzPS4u LikKICAgIGF0IC4uL1NvdXJjZS9KYXZhU2NyaXB0Q29yZS9pbnRlcnByZXRlci9JbnRlcnByZXRl ci5jcHA6ODQ0CiAgICAgICAgbmV3Q29kZUJsb2NrID0gPHZhbHVlIG9wdGltaXplZCBvdXQ+CiAg ICAgICAgY2FsbERhdGFTY29wZUNoYWluID0gPHZhbHVlIG9wdGltaXplZCBvdXQ+CiAgICAgICAg Y29tcGlsZUVycm9yID0gMHg3ZmZmZDMyNjYwMzgKICAgICAgICBnbG9iYWxPYmplY3RTY29wZSA9 IHttX2R5bmFtaWNHbG9iYWxPYmplY3RTbG90ID0gQDB4N2ZmZmU0ODkwZGQwLCAKICAgICAgICAg IG1fc2F2ZWREeW5hbWljR2xvYmFsT2JqZWN0ID0gMHgwfQogICAgICAgIHJlZ2lzdGVyT2Zmc2V0 ID0gPHZhbHVlIG9wdGltaXplZCBvdXQ+CiAgICAgICAgZW5kID0gMHgwCiAgICAgICAgc2NvcGVD aGFpbiA9IDB4N2ZmZmM0MDg0ZTUwCiAgICAgICAgYXJnQ291bnQgPSA8dmFsdWUgb3B0aW1pemVk IG91dD4KICAgICAgICBnbG9iYWxPYmplY3RTY29wZSA9IHttX2R5bmFtaWNHbG9iYWxPYmplY3RT bG90ID0gQDB4N2ZmZmYyNjM2N2YwLCAKICAgICAgICAgIG1fc2F2ZWREeW5hbWljR2xvYmFsT2Jq ZWN0ID0gMHg3ZmZmZjI2MjYxZTZ9CiAgICAgICAgb2xkRW5kID0gMHg3ZmZmZDMyNjYwMDAKICAg ICAgICBkc3QgPSA8dmFsdWUgb3B0aW1pemVkIG91dD4KIzQgIDB4MDAwMDdmZmZmNTYzZmY4ZCBp biBKU0M6OmNhbGwgKGV4ZWM9PHZhbHVlIG9wdGltaXplZCBvdXQ+LCAKICAgIGZ1bmN0aW9uT2Jq ZWN0PTx2YWx1ZSBvcHRpbWl6ZWQgb3V0PiwgY2FsbFR5cGU9PHZhbHVlIG9wdGltaXplZCBvdXQ+ LCAKICAgIGNhbGxEYXRhPTx2YWx1ZSBvcHRpbWl6ZWQgb3V0PiwgdGhpc1ZhbHVlPTx2YWx1ZSBv cHRpbWl6ZWQgb3V0PiwgCiAgICBhcmdzPTx2YWx1ZSBvcHRpbWl6ZWQgb3V0PikKICAgIGF0IC4u L1NvdXJjZS9KYXZhU2NyaXB0Q29yZS9ydW50aW1lL0NhbGxEYXRhLmNwcDozOApObyBsb2NhbHMu CiM1ICAweDAwMDA3ZmZmZjRhNjgyMTUgaW4gY2FsbCAodGhpcz08dmFsdWUgb3B0aW1pemVkIG91 dD4sIAogICAgZ2xvYmFsT2JqZWN0PTB4N2ZmZmQxYjVlYmQwLCB0aGlzVmFsdWU9Li4uLCBjb250 ZXh0PTB4N2ZmZmQyMmU1YzYwKQogICAgYXQgLi4vU291cmNlL1dlYkNvcmUvYmluZGluZ3MvanMv SlNNYWluVGhyZWFkRXhlY1N0YXRlLmg6NDgKTm8gbG9jYWxzLgojNiAgV2ViQ29yZTo6U2NoZWR1 bGVkQWN0aW9uOjpleGVjdXRlRnVuY3Rpb25JbkNvbnRleHQgKAogICAgdGhpcz08dmFsdWUgb3B0 aW1pemVkIG91dD4sIGdsb2JhbE9iamVjdD0weDdmZmZkMWI1ZWJkMCwgdGhpc1ZhbHVlPS4uLiwg CiAgICBjb250ZXh0PTB4N2ZmZmQyMmU1YzYwKQogICAgYXQgLi4vU291cmNlL1dlYkNvcmUvYmlu ZGluZ3MvanMvU2NoZWR1bGVkQWN0aW9uLmNwcDoxMDYKICAgICAgICBjYWxsRGF0YSA9IHtuYXRp dmUgPSB7ZnVuY3Rpb24gPSAweDdmZmZjNDA4NGU1MH0sIGpzID0gewogICAgICAgICAgICBmdW5j dGlvbkV4ZWN1dGFibGUgPSAweDdmZmZjNDA4NGU1MCwgc2NvcGVDaGFpbiA9IDB4N2ZmZmM1ODQ2 YTcwfX0KICAgICAgICBjYWxsVHlwZSA9IEpTQzo6Q2FsbFR5cGVKUwogICAgICAgIGV4ZWMgPSAw eDdmZmZkMWI1ZWM1OAogICAgICAgIGFyZ3MgPSB7c3RhdGljIGlubGluZUNhcGFjaXR5ID0gOCwg bV9idWZmZXIgPSAweDdmZmZmZmZmZDFhMCwgCiAgICAgICAgICBtX3NpemUgPSAwLCBtX2lzVXNp bmdJbmxpbmVCdWZmZXIgPSB0cnVlLCBtX3ZlY3RvciA9IHttX3NpemUgPSAwLCAKICAgICAgICAg ICAgbV9idWZmZXIgPSB7PFdURjo6VmVjdG9yQnVmZmVyQmFzZTxKU0M6OlJlZ2lzdGVyPj4gPSB7 CiAgICAgICAgICAgICAgICBtX2J1ZmZlciA9IDB4N2ZmZmZmZmZkMWEwLCBtX2NhcGFjaXR5ID0g OH0sIAogICAgICAgICAgICAgIHN0YXRpYyBtX2lubGluZUJ1ZmZlclNpemUgPSA2NCwgbV9pbmxp bmVCdWZmZXIgPSB7CiAgICAgICAgICAgICAgICBidWZmZXIgPSAiXDI0MFwzMzYgXDM2MlwzNzdc MTc3XDAwMFwwMDBhXDM2NlwzNjdcMzYxXDM3N1wxNzdcMDAwXDAwMFwzMDBcMzY2YVwwMDFcMDAw XDAwMFwwMDBcMDAwXDAyMElcMzExXDAwMVwwMDBcMDAwXDAwMFwwMDBcYVwwMDBcMDAwXDAwMFww MDBcMDAwXDAwMFwwMDBcMzQ2YWJcMzYyXDM3N1wxNzdcMDAwXDAwMFwwMDJcMDAwXDAwMFwyMDBc MDAwXDAwMFwwMDBcMDAwXDMzM11iXDM2MlwzNzdcMTc3XDAwMCJ9fX0sIG1fbWFya1NldCA9IDB4 MH0KICAgICAgICBzaXplID0gMAojNyAgMHgwMDAwN2ZmZmY0YTY4ODEzIGluIFdlYkNvcmU6OlNj aGVkdWxlZEFjdGlvbjo6ZXhlY3V0ZSAoCiAgICB0aGlzPTx2YWx1ZSBvcHRpbWl6ZWQgb3V0Piwg ZG9jdW1lbnQ9MHg3ZmZmZDIyZTVjMDApCiAgICBhdCAuLi9Tb3VyY2UvV2ViQ29yZS9iaW5kaW5n cy9qcy9TY2hlZHVsZWRBY3Rpb24uY3BwOjEyOAogICAgICAgIHdpbmRvdyA9IDB4N2ZmZmQxYjVl YmQwCiM4ICAweDAwMDA3ZmZmZjRlMGIzMzAgaW4gV2ViQ29yZTo6RE9NVGltZXI6OmZpcmVkICh0 aGlzPTB4N2ZmZmNkMGJmNTQ4KQogICAgYXQgLi4vU291cmNlL1dlYkNvcmUvcGFnZS9ET01UaW1l ci5jcHA6MTQ4CiAgICAgICAgY29udGV4dCA9IDB4N2ZmZmQyMmU1YzYwCiAgICAgICAgZ2VzdHVy ZUluZGljYXRvciA9IHtzdGF0aWMgc19wcm9jZXNzaW5nVXNlckdlc3R1cmUgPSAKICAgIFdlYkNv cmU6OlBvc3NpYmx5UHJvY2Vzc2luZ1VzZXJHZXN0dXJlLCAKICAgICAgICAgIG1fcHJldmlvdXNW YWx1ZSA9IFdlYkNvcmU6OlBvc3NpYmx5UHJvY2Vzc2luZ1VzZXJHZXN0dXJlfQogICAgICAgIGNv b2tpZSA9IHtmaXJzdCA9IDB4MCwgc2Vjb25kID0gMH0KIzkgIDB4MDAwMDdmZmZmNGVjN2U1MiBp biBXZWJDb3JlOjpUaHJlYWRUaW1lcnM6OnNoYXJlZFRpbWVyRmlyZWRJbnRlcm5hbCAoCiAgICB0 aGlzPTB4N2ZmZmU0MmFkOTEwKSBhdCAuLi9Tb3VyY2UvV2ViQ29yZS9wbGF0Zm9ybS9UaHJlYWRU aW1lcnMuY3BwOjExMgogICAgICAgIHRpbWVyID0gMHg3ZmZmY2QwYmY1NDgKICAgICAgICBpbnRl cnZhbCA9IDAKICAgICAgICBmaXJlVGltZSA9IDEzMDMxMzU2MzguNzQ1NTc3MQogICAgICAgIHRp bWVUb1F1aXQgPSAxMzAzMTM1NjM4Ljc5NTU3NwojMTAgMHgwMDAwN2ZmZmY0OGRmYzAyIGluIFdl YkNvcmU6OnRpbWVvdXRfY2IgKCkKICAgIGF0IC4uL1NvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL2d0 ay9TaGFyZWRUaW1lckd0ay5jcHA6NDkKTm8gbG9jYWxzLgojMTEgMHgwMDAwN2ZmZmYxZjY0NGVi IGluID8/ICgpIGZyb20gL2xpYi94ODZfNjQtbGludXgtZ251L2xpYmdsaWItMi4wLnNvLjAKTm8g c3ltYm9sIHRhYmxlIGluZm8gYXZhaWxhYmxlLgojMTIgMHgwMDAwN2ZmZmYxZjYyYmNkIGluIGdf bWFpbl9jb250ZXh0X2Rpc3BhdGNoICgpCiAgIGZyb20gL2xpYi94ODZfNjQtbGludXgtZ251L2xp YmdsaWItMi4wLnNvLjAKTm8gc3ltYm9sIHRhYmxlIGluZm8gYXZhaWxhYmxlLgojMTMgMHgwMDAw N2ZmZmYxZjYzM2E4IGluID8/ICgpIGZyb20gL2xpYi94ODZfNjQtbGludXgtZ251L2xpYmdsaWIt Mi4wLnNvLjAKTm8gc3ltYm9sIHRhYmxlIGluZm8gYXZhaWxhYmxlLgojMTQgMHgwMDAwN2ZmZmYx ZjYzOWYyIGluIGdfbWFpbl9sb29wX3J1biAoKQogICBmcm9tIC9saWIveDg2XzY0LWxpbnV4LWdu dS9saWJnbGliLTIuMC5zby4wCk5vIHN5bWJvbCB0YWJsZSBpbmZvIGF2YWlsYWJsZS4KIzE1IDB4 MDAwMDdmZmZmM2Q3NmQ5ZCBpbiBndGtfbWFpbiAoKSBmcm9tIC91c3IvbGliL2xpYmd0ay0zLnNv LjAKTm8gc3ltYm9sIHRhYmxlIGluZm8gYXZhaWxhYmxlLgojMTYgMHgwMDAwMDAwMDAwNDMwZWQ0 IGluIG1haW4gKGFyZ2M9MSwgYXJndj0weDdmZmZmZmZmZTcwOCkgYXQgZXBoeS1tYWluLmM6NzUy CiAgICAgICAgb3B0aW9uX2NvbnRleHQgPSA8dmFsdWUgb3B0aW1pemVkIG91dD4KICAgICAgICBv cHRpb25fZ3JvdXAgPSA8dmFsdWUgb3B0aW1pemVkIG91dD4KICAgICAgICBwcm94eSA9IDx2YWx1 ZSBvcHRpbWl6ZWQgb3V0PgogICAgICAgIGVycm9yID0gMHgwCiAgICAgICAgdXNlcl90aW1lID0g MTgxMDQ3MjUKICAgICAgICBhcmJpdHJhcnlfdXJsID0gPHZhbHVlIG9wdGltaXplZCBvdXQ+Cihn ZGIpIAoK