Bug 144109 – Segfault in WebCore::Page::refreshPlugins at ../Source/WebCore/page/Page.cpp:453

• Component: WebKitGTK
• Status: RESOLVED INVALID

[Nicolas]

Created attachment 251463 [details]
gdb evolution t a a bt f

Some applications crash on my Ubuntu 14.04.2 (all updates installed) with referring to the same source: libwebkitgtk-3.0.so.0.22.14

The relevant part was told me to be this:

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff589f9de in WebCore::Page::refreshPlugins (reload=reload@entry=false) at ../Source/WebCore/page/Page.cpp:453
453	../Source/WebCore/page/Page.cpp: Datei oder Verzeichnis nicht gefunden.


This is the important backtrace of the Thread 1, “which caused the termination”.

Thread 1 (Thread 0x7ffff7f93a80 (LWP 22808)):
#0  0x00007ffff589f9de in WebCore::Page::refreshPlugins (reload=reload@entry=false) at ../Source/WebCore/page/Page.cpp:453
        it = {m_impl = {m_position = 0x7fffac522760, m_endPosition = 0x7fffac522780}}
        end = {m_impl = {m_position = 0x7fffac522780, m_endPosition = 0x7fffac522780}}
        framesNeedingReload = {<WTF::VectorBuffer<WTF::Ref<WebCore::Frame>, 0ul>> = {<WTF::VectorBufferBase<WTF::Ref<WebCore::Frame> >> = {
              m_buffer = 0x0, m_capacity = 0, m_size = 0}, <No data fields>}, <No data fields>}
#1  0x00007ffff58b59c1 in WebCore::Settings::setPluginsEnabled (this=this@entry=0x7fffac532dc0, arePluginsEnabled=<optimized out>)
    at ../Source/WebCore/page/Settings.cpp:441
No locals.
#2  0x00007ffff51a1473 in webkit_web_view_update_settings (webView=webView@entry=0x555557d90360)
    at ../Source/WebKit/gtk/webkit/webkitwebview.cpp:3563
        settingsPrivate = 0x555557d5b9a0
        debugVisualsEnvironment = <optimized out>
#3  0x00007ffff51a2189 in webkit_web_view_init (webView=0x555557d90360) at ../Source/WebKit/gtk/webkit/webkitwebview.cpp:3879
        priv = 0x555557d900e0
        pageClients = {alternativeTextClient = 0x0, chromeClient = 0x555557d8f8b0, contextMenuClient = 0x555557d8fba0, 
          editorClient = 0x555557d8fbc0, dragClient = 0x555557d4e780, inspectorClient = 0x555557d50720, plugInClient = 0x0, 
          progressTrackerClient = 0x555557d50f10, backForwardClient = {m_ptr = 0x0}, validationMessageClient = 0x0, loaderClientForMainFrame = 
    0x555557d50980}
#4  0x00007ffff4084df8 in g_type_create_instance () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#5  0x00007ffff4069355 in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#6  0x00007ffff406b4c4 in g_object_new_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#7  0x00007ffff406b8a4 in g_object_new () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#8  0x00007fffc70f05b1 in mail_paned_view_constructed (object=0x555555974500) at e-mail-paned-view.c:645
        priv = 0x5555559743a0
        shell_backend = <optimized out>
        shell_window = <optimized out>
        shell_view = <optimized out>
        settings = <optimized out>
        reader = <optimized out>
        backend = <optimized out>
        session = <optimized out>
        view = <optimized out>
        message_list = <optimized out>
        container = <optimized out>
        widget = <optimized out>
#9  0x00007ffff406938a in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#10 0x00007ffff406b4c4 in g_object_new_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#11 0x00007ffff406b8a4 in g_object_new () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#12 0x00007fffc70f0a7c in e_mail_paned_view_new (shell_view=<optimized out>) at e-mail-paned-view.c:1075
        __FUNCTION__ = "e_mail_paned_view_new"
#13 0x00007fffc5d6b1cd in mail_shell_content_constructed (object=0x555557d27590) at e-mail-shell-content.c:187
        priv = 0x555557d27470
        shell_content = <optimized out>
        shell_view = 0x555557cfae30
        container = 0x555557d27590
        widget = <optimized out>
#14 0x00007ffff406938a in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#15 0x00007ffff406b4c4 in g_object_new_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#16 0x00007ffff406b8a4 in g_object_new () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#17 0x00007ffff7bc5da5 in shell_view_constructed (object=0x555557cfae30) at e-shell-view.c:613
        shell = 0x5555559741d0
        shell_view = 0x555557cfae30
        shell_backend = <optimized out>
        shell_view_class = 0x555555840640
        widget = 0x555557cfaf90
        handler_id = <optimized out>
#18 0x00007fffc5d6db1b in mail_shell_view_constructed (object=0x555557cfae30) at e-mail-shell-view.c:247
No locals.
#19 0x00007ffff406938a in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#20 0x00007ffff406b4c4 in g_object_new_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#21 0x00007ffff406b8a4 in g_object_new () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#22 0x00007ffff7bc82ae in shell_window_create_shell_view (shell_window=0x555557c8c2c0, view_name=<optimized out>) at e-shell-window.c:715
        shell = <optimized out>
        shell_view = <optimized out>
        shell_backend = <optimized out>
        loaded_views = <optimized out>
        ui_manager = <optimized out>
        notebook = 0x555557d1b190
        action = 0x555557ca0310
        widget = <optimized out>
        name = 0x7fffc5d7820f "mail"
        id = <optimized out>
        page_num = 0
        type = 93824997034784
#23 0x00007ffff7bc7d0c in e_shell_window_get_shell_view (shell_window=shell_window@entry=0x555557c8c2c0, 
    view_name=view_name@entry=0x555557d19d60 "mail") at e-shell-window.c:1139
        shell_view = <optimized out>
        class = <optimized out>
        __FUNCTION__ = "e_shell_window_get_shell_view"
#24 0x00007ffff7bc8b38 in e_shell_window_set_active_view (shell_window=0x555557c8c2c0, view_name=0x555557d19d60 "mail") at e-shell-window.c:1381
        action = <optimized out>
        shell_view = <optimized out>
        __FUNCTION__ = "e_shell_window_set_active_view"
#25 0x00007ffff7bc9486 in shell_window_set_property (object=0x555557c8c2c0, property_id=<optimized out>, value=<optimized out>, 
    pspec=<optimized out>) at e-shell-window.c:241
No locals.
#26 0x00007ffff406c6e3 in g_object_set_property () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#27 0x00007ffff435bf63 in ?? () from /usr/lib/x86_64-linux-gnu/libgio-2.0.so.0
No symbol table info available.
#28 0x00007ffff435e9e1 in g_settings_bind_with_mapping () from /usr/lib/x86_64-linux-gnu/libgio-2.0.so.0
No symbol table info available.
#29 0x00007ffff435edd7 in g_settings_bind () from /usr/lib/x86_64-linux-gnu/libgio-2.0.so.0
No symbol table info available.
#30 0x00007ffff7bca3d3 in e_shell_window_private_constructed (shell_window=0x555557c8c2c0) at e-shell-window-private.c:414
        priv = 0x555557c8c020
        shell = 0x5555559741d0
        action = <optimized out>
        accel_group = <optimized out>
        ui_manager = 0x555557cd4830
        box = <optimized out>
        paned = <optimized out>
        widget = <optimized out>
        window = 0x555557c8c2c0
        merge_id = <optimized out>
        id = <optimized out>
        settings = 0x555557cd4970
        action_group = <optimized out>
#31 0x00007ffff7bc77cc in shell_window_constructed (object=0x555557c8c2c0) at e-shell-window.c:386
        shell_window = <optimized out>
#32 0x00007ffff406938a in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#33 0x00007ffff406b4c4 in g_object_new_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#34 0x00007ffff406b8a4 in g_object_new () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#35 0x00007ffff7bc78c8 in e_shell_window_new (shell=shell@entry=0x5555559741d0, safe_mode=1, geometry=0x0) at e-shell-window.c:1081
No locals.
#36 0x00007ffff7bba7e3 in e_shell_create_shell_window (shell=0x5555559741d0, view_name=0x0) at e-shell.c:1365
        shell_window = <optimized out>
        link = <optimized out>
        __FUNCTION__ = "e_shell_create_shell_window"
#37 0x0000555555557ccf in idle_cb (uris=0x0) at main.c:248
        shell = 0x5555559741d0
#38 0x00007ffff3d94ce5 in g_main_context_dispatch () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#39 0x00007ffff3d95048 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#40 0x00007ffff3d9530a in g_main_loop_run () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#41 0x00007ffff47b8fe5 in gtk_main () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
No symbol table info available.
#42 0x00005555555579cf in main (argc=1, argv=0x7fffffffe068) at main.c:683
        shell = 0x5555559741d0
        settings = <optimized out>
        error = 0x0

---

Evolution:

nsk@sesta09:~$ evolution 

(evolution:16111): camel-WARNING **: Failed to initialize NSS SQL database in sql:/etc/pki/nssdb: NSS error -8126
Speicherzugriffsfehler (Speicherabzug geschrieben)

nsk@sesta09:~$ tail -1 /var/log/syslog
Apr  3 16:11:54 sesta09 kernel: [ 4646.673708] evolution[16111]: segfault at 3c78f55f ip 00007f61a5a3a9de sp 00007fff3c78f530 error 6 in libwebkitgtk-3.0.so.0.22.14[7f61a4ec3000+1c91000]
nsk@sesta09:~$ 

---

Unity Control Center, when accessing the "Information" element:

nsk@sesta09:~$ unity-control-center 
Speicherzugriffsfehler (Speicherabzug geschrieben)
nsk@sesta09:~$ tail -1 /var/log/syslog
Apr  3 16:12:57 sesta09 kernel: [ 4709.794574] unity-control-c[16747]: segfault at 4ca0de9f ip 00007fa18367c9de sp 00007fff4ca05e80 error 6 in libwebkitgtk-3.0.so.0.22.14[7fa182b05000+1c91000]
nsk@sesta09:~$ 

---

Software Center:

nsk@sesta09:~$ software-center
2015-04-03 16:16:38,647 - softwarecenter.ui.gtk3.app - INFO - setting up proxy 'None'
2015-04-03 16:16:39,625 - softwarecenter.backend.reviews - WARNING - Could not get usefulness from server, no username in config file
2015-04-03 16:16:39,627 - softwarecenter.plugin - INFO - activating plugin '<module 'webapps_activation' from '/usr/share/software-center/softwarecenter/plugins/webapps_activation.pyc'>'
2015-04-03 16:16:39,679 - softwarecenter.db.pkginfo_impl.aptcache - INFO - aptcache.open()
2015-04-03 16:16:40,517 - softwarecenter.backend.reviews - WARNING - error creating bsddb: '(22, 'Das Argument ist ung\xc3\xbcltig -- BDB0054 illegal flag combination specified to DB_ENV->open')' (corrupted?)
2015-04-03 16:16:40,518 - softwarecenter.backend.reviews - ERROR - trying to repair DB failed
Traceback (most recent call last):
  File "/usr/share/software-center/softwarecenter/backend/reviews/__init__.py", line 358, in _save_review_stats_cache_blocking
    self._dump_bsddbm_for_unity(outfile, outdir)
  File "/usr/share/software-center/softwarecenter/backend/reviews/__init__.py", line 377, in _dump_bsddbm_for_unity
    0600)
DBInvalidArgError: (22, 'Das Argument ist ung\xc3\xbcltig -- BDB0054 illegal flag combination specified to DB_ENV->open')
/usr/lib/python2.7/dist-packages/gi/overrides/GLib.py:535: Warning: Source ID 74 was not found when attempting to remove it
  return super(MainContext, self).iteration(may_block)
Speicherzugriffsfehler (Speicherabzug geschrieben)
nsk@sesta09:~$ tail -1 /var/log/syslog
Apr  3 16:16:41 sesta09 kernel: [ 4933.484896] software-center[18773]: segfault at 1544dd3f ip 00007fd466b3c9de sp 00007fff15445d10 error 6 in libwebkitgtk-3.0.so.0.22.14[7fd465fc5000+1c91000]
nsk@sesta09:~$ 

---

I am assuming this started with update of libwebkitgtk-3.0-0 from version 2.4.0-1ubuntu2 to 2.4.8-1ubuntu1~ubuntu14.04.1, but I am unable to downgrade via synaptic or apt because the dependencies wants me to uninstall half of the system then...

This is my current kernel:
nsk@sesta09:~$ uname -a
Linux sesta09 3.13.0-48-generic #80-Ubuntu SMP Thu Mar 12 11:16:15 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux
nsk@sesta09:~$ 

But the behaviour did not changed with the last kernel upgrade.

I am using Gnome Flashback desktop environment with version 3.8.0-1ubuntu12.2

Additionally using compiz

nsk@sesta09:~$ compiz --version
Compiz 0.9.11.3
nsk@sesta09:~$

---

Thanks to the help of Paul Menzel in this bug report, I was able to produce those debug traces: https://bugs.webkit.org/show_bug.cgi?id=142692

[Nicolas]

Bug report in launchpad: https://bugs.launchpad.net/ubuntu/+source/webkitgtk/+bug/1447775

[Carlos Garcia Campos]

Plugins are no longer supported.