Bug 173539

Summary: [GTK] Segfault while visiting omgubuntu
Product: WebKit Reporter: Cédric Bellegarde <cedric.bellegarde>
Component: WebKitGTKAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal CC: bugs-noreply, mcatanzaro
Priority: P2    
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Cédric Bellegarde
Reported 2017-06-19 00:03:05 PDT
While visiting http://www.omgubuntu.co.uk/2017/06/inkscape-krita-windows-store , WebKitGTK segfaults. WebKitGTK: 2.16.3
Attachments
Add attachment proposed patch, testcase, etc.
Cédric Bellegarde
Comment 1 2017-06-19 04:23:52 PDT
juin 19 13:22:55 arch systemd-coredump[1645]: Process 1536 (WebKitWebProces) of user 1000 dumped core. Stack trace of thread 1536: #0 0x00007fabc7a9d330 _ZN3JSC19speculationFromCellEPNS_6JSCellE (libjavascriptcoregtk-4.0.so.18) #1 0x00007fabc7a8a2f8 _ZN3JSC39CompressedLazyOperandValueProfileHolder25computeUpdatedPredictionsERKNS_18ConcurrentJSLockerE (libjavascriptcoregtk-4.0.so.18) #2 0x00007fabc7a65212 _ZN3JSC9CodeBlock36updateAllPredictionsAndCountLivenessERjS1_ (libjavascriptcoregtk-4.0.so.18) #3 0x00007fabc7a65281 _ZN3JSC9CodeBlock32updateAllValueProfilePredictionsEv (libjavascriptcoregtk-4.0.so.18) #4 0x00007fabc7a653e9 _ZN3JSC9CodeBlock20updateAllPredictionsEv (libjavascriptcoregtk-4.0.so.18) #5 0x00007fabc7a6b7e8 _ZN3JSC9CodeBlock22UnconditionalFinalizer23finalizeUnconditionallyEv (libjavascriptcoregtk-4.0.so.18) #6 0x00007fabc7dbda9d _ZN3JSC4Heap31finalizeUnconditionalFinalizersEv (libjavascriptcoregtk-4.0.so.18) #7 0x00007fabc7dc3c9a _ZN3JSC4Heap11runEndPhaseENS_11GCConductorE (libjavascriptcoregtk-4.0.so.18) #8 0x00007fabc7dc5e1a _ZN3JSC4Heap15runCurrentPhaseENS_11GCConductorEPNS_18CurrentThreadStateE (libjavascriptcoregtk-4.0.so.18) #9 0x00007fabc7dc786a n/a (libjavascriptcoregtk-4.0.so.18) #10 0x00007fabc7dd192a _ZN3JSC26callWithCurrentThreadStateERKN3WTF12ScopedLambdaIFvRNS_18CurrentThreadStateEEEE (libjavascriptcoregtk-4.0.so.18) #11 0x00007fabc7dc5f07 _ZN3JSC4Heap22collectInMutatorThreadEv (libjavascriptcoregtk-4.0.so.18) #12 0x00007fabc7dc5f6c _ZN3JSC4Heap19stopIfNecessarySlowEj (libjavascriptcoregtk-4.0.so.18) #13 0x00007fabc7dc665b _ZN3JSC4Heap19stopIfNecessarySlowEv (libjavascriptcoregtk-4.0.so.18) #14 0x00007fabc7dc6d9f _ZN3JSC4Heap25collectIfNecessaryOrDeferEPNS_17GCDeferralContextE (libjavascriptcoregtk-4.0.so.18) #15 0x00007fabc7ffdd91 _ZN3JSC8jsStringEPNS_2VMERKN3WTF6StringE (libjavascriptcoregtk-4.0.so.18) #16 0x00007fabc8219de5 _ZN3JSC38operationStringProtoFuncReplaceGenericEPNS_9ExecStateElll (libjavascriptcoregtk-4.0.so.18) #17 0x00007fab6834528d n/a (n/a) #18 0x00007fab68348364 n/a (n/a) #19 0x00007fabc7ef847b n/a (libjavascriptcoregtk-4.0.so.18) #20 0x00007fabc7e82906 _ZN3JSC7JITCode7executeEPNS_2VMEPNS_14ProtoCallFrameE (libjavascriptcoregtk-4.0.so.18) #21 0x00007fabc7e41a25 _ZN3JSC11Interpreter7executeERNS_16CallFrameClosureE (libjavascriptcoregtk-4.0.so.18) #22 0x00007fabc821912c _ZN3JSC38operationStringProtoFuncReplaceGenericEPNS_9ExecStateElll (libjavascriptcoregtk-4.0.so.18) #23 0x00007fab6834528d n/a (n/a) #24 0x00007fabc7efee41 n/a (libjavascriptcoregtk-4.0.so.18) #25 0x00007fab68353b68 n/a (n/a) #26 0x00007fab683800f5 n/a (n/a) #27 0x00007fabc7efee41 n/a (libjavascriptcoregtk-4.0.so.18) #28 0x00007fabc7efee41 n/a (libjavascriptcoregtk-4.0.so.18) #29 0x00007fab6835924c n/a (n/a) #30 0x00007fabc7efeeb3 n/a (libjavascriptcoregtk-4.0.so.18) #31 0x00007fab6831b068 n/a (n/a) #32 0x00007fab6835924c n/a (n/a) #33 0x00007fabc7efeeb3 n/a (libjavascriptcoregtk-4.0.so.18) #34 0x00007fab6831b068 n/a (n/a) #35 0x00007fabc7efee41 n/a (libjavascriptcoregtk-4.0.so.18) #36 0x00007fab6826ac51 n/a (n/a) #37 0x00007fabc7eff174 n/a (libjavascriptcoregtk-4.0.so.18) #38 0x00007fabc7efee41 n/a (libjavascriptcoregtk-4.0.so.18) #39 0x00007fab682fede8 n/a (n/a) #40 0x00007fabc7efee41 n/a (libjavascriptcoregtk-4.0.so.18) #41 0x00007fab682fede8 n/a (n/a) #42 0x00007fabc7efee41 n/a (libjavascriptcoregtk-4.0.so.18) #43 0x00007fab6833d236 n/a (n/a) #44 0x00007fabc7efeeb3 n/a (libjavascriptcoregtk-4.0.so.18) #45 0x00007fab6831b068 n/a (n/a) #46 0x00007fabc7efeeb3 n/a (libjavascriptcoregtk-4.0.so.18) #47 0x00007fab682fede8 n/a (n/a) #48 0x00007fabc7eff2ad n/a (libjavascriptcoregtk-4.0.so.18) #49 0x00007fabc7ef847b n/a (libjavascriptcoregtk-4.0.so.18) #50 0x00007fabc7e82906 _ZN3JSC7JITCode7executeEPNS_2VMEPNS_14ProtoCallFrameE (libjavascriptcoregtk-4.0.so.18) #51 0x00007fabc7e413e1 _ZN3JSC11Interpreter11executeCallEPNS_9ExecStateEPNS_8JSObjectENS_8CallTypeERKNS_8CallDataENS_7JSValueERKNS_7ArgListE (libjavascriptcoregtk-4.0.so.18) #52 0x00007fabc802b8f4 _ZN3JSC4callEPNS_9ExecStateENS_7JSValueENS_8CallTypeERKNS_8CallDataES2_RKNS_7ArgListE (libjavascriptcoregtk-4.0.so.18) #53 0x00007fabc802b917 _ZN3JSC4callEPNS_9ExecStateENS_7JSValueENS_8CallTypeERKNS_8CallDataES2_RKNS_7ArgListERN3WTF8NakedPtrINS_9ExceptionEEE (libjavascriptcoregtk-4.0.so.18) #54 0x00007fabc802bb39 _ZN3JSC12profiledCallEPNS_9ExecStateENS_15ProfilingReasonENS_7JSValueENS_8CallTypeERKNS_8CallDataES3_RKNS_7ArgListERN3WTF8NakedPtrINS_9ExceptionEEE (libjavascriptcoregtk-4.0.so.18) #55 0x00007fabcb6e206e n/a (libwebkit2gtk-4.0.so.37) #56 0x00007fabcb6e252d n/a (libwebkit2gtk-4.0.so.37) #57 0x00007fabcbd1c016 n/a (libwebkit2gtk-4.0.so.37) #58 0x00007fabcbe2443a n/a (libwebkit2gtk-4.0.so.37) #59 0x00007fabc831f86a n/a (libjavascriptcoregtk-4.0.so.18) #60 0x00007fabc877c8b5 g_main_context_dispatch (libglib-2.0.so.0) #61 0x00007fabc877cc78 n/a (libglib-2.0.so.0) #62 0x00007fabc877cf92 g_main_loop_run (libglib-2.0.so.0) #63 0x00007fabc831fc60 _ZN3WTF7RunLoop3runEv (libjavascriptcoregtk-4.0.so.18) Stack trace of thread 1546: #0 0x00007fabca8e82bd poll (libc.so.6) #1 0x00007fabc877cbf9 n/a (libglib-2.0.so.0) #2 0x00007fabc877cd0c g_main_context_iteration (libglib-2.0.so.0) #3 0x00007fabc877cd51 n/a (libglib-2.0.so.0) #4 0x00007fabc87a3ac5 n/a (libglib-2.0.so.0) #5 0x00007fabc68b9297 start_thread (libpthread.so.0) #6 0x00007fabca8f225f __clone (libc.so.6) Stack trace of thread 1549: #0 0x00007fabca8e82bd poll (libc.so.6) #1 0x00007fabc877cbf9 n/a (libglib-2.0.so.0) #2 0x00007fabc877cf92 g_main_loop_run (libglib-2.0.so.0) #3 0x00007fabc831fc60 _ZN3WTF7RunLoop3runEv (libjavascriptcoregtk-4.0.so.18) #4 0x00007fabc831ebc3 n/a (libjavascriptcoregtk-4.0.so.18) #5 0x00007fabc82e9575 n/a (libjavascriptcoregtk-4.0.so.18) #6 0x00007fabc831cf5a n/a (libjavascriptcoregtk-4.0.so.18) #7 0x00007fabc68b9297 start_thread (libpthread.so.0) #8 0x00007fabca8f225f __clone (libc.so.6) Stack trace of thread 1539: #0 0x00007fabca8c02bd __nanosleep (libc.so.6) #1 0x00007fabc8325473 _ZN7bmalloc4Heap8scavengeERSt11unique_lockINS_11StaticMutexEENS_12ScavengeModeE (libjavascriptcoregtk-4.0.so.18) #2 0x00007fabc832551d _ZN7bmalloc4Heap18concurrentScavengeEv (libjavascriptcoregtk-4.0.so.18) #3 0x00007fabc832688e _ZN7bmalloc9AsyncTaskINS_4HeapEMS1_FvvEE13threadRunLoopEv (libjavascriptcoregtk-4.0.so.18) #4 0x00007fabc8326a69 _ZN7bmalloc9AsyncTaskINS_4HeapEMS1_FvvEE16threadEntryPointEPS4_ (libjavascriptcoregtk-4.0.so.18) #5 0x00007fabc16cef8f execute_native_thread_routine (libstdc++.so.6) #6 0x00007fabc68b9297 start_thread (libpthread.so.0) #7 0x00007fabca8f225f __clone (libc.so.6) Stack trace of thread 1547: #0 0x00007fabca8e82bd poll (libc.so.6) #1 0x00007fabc877cbf9 n/a (libglib-2.0.so.0) #2 0x00007fabc877cf92 g_main_loop_run (libglib-2.0.so.0) #3 0x00007fabc8d64426 n/a (libgio-2.0.so.0) #4 0x00007fabc87a3ac5 n/a (libglib-2.0.so.0) #5 0x00007fabc68b9297 start_thread (libpthread.so.0) #6 0x00007fabca8f225f __clone (libc.so.6) Stack trace of thread 1640: #0 0x00007fabc68bf756 pthread_cond_timedwait@@GLIBC_2.3.2 (libpthread.so.0) #1 0x00007fabc831d64a _ZN3WTF15ThreadCondition9timedWaitERNS_5MutexEd (libjavascriptcoregtk-4.0.so.18) #2 0x00007fabc82e6333 _ZN3WTF10ParkingLot21parkConditionallyImplEPKvRKNS_12ScopedLambdaIFbvEEERKNS3_IFvvEEERKNS_24TimeWithDynamicClockTypeE (libjavascriptcoregtk-4.0.so.18) #3 0x00007fabc82d57d6 n/a (libjavascriptcoregtk-4.0.so.18) #4 0x00007fabc82e9575 n/a (libjavascriptcoregtk-4.0.so.18) #5 0x00007fabc831cf5a n/a (libjavascriptcoregtk-4.0.so.18) #6 0x00007fabc68b9297 start_thread (libpthread.so.0) #7 0x00007fabca8f225f __clone (libc.so.6) Stack trace of thread 1550: #0 0x00007fabca8e82bd poll (libc.so.6) #1 0x00007fabc877cbf9 n/a (libglib-2.0.so.0) #2 0x00007fabc877cf92 g_main_loop_run (libglib-2.0.so.0) #3 0x00007fabc831fc60 _ZN3WTF7RunLoop3runEv (libjavascriptcoregtk-4.0.so.18) #4 0x00007fabc831ebc3 n/a (libjavascriptcoregtk-4.0.so.18) #5 0x00007fabc82e9575 n/a (libjavascriptcoregtk-4.0.so.18) #6 0x00007fabc831cf5a n/a (libjavascriptcoregtk-4.0.so.18) #7 0x00007fabc68b9297 start_thread (libpthread.so.0) #8 0x00007fabca8f225f __clone (libc.so.6) Stack trace of thread 1578: #0 0x00007fabca8e82bd poll (libc.so.6) #1 0x00007fabc877cbf9 n/a (libglib-2.0.so.0) #2 0x00007fabc877cf92 g_main_loop_run (libglib-2.0.so.0) #3 0x00007fabc831fc60 _ZN3WTF7RunLoop3runEv (libjavascriptcoregtk-4.0.so.18) #4 0x00007fabc831ebc3 n/a (libjavascriptcoregtk-4.0.so.18) #5 0x00007fabc82e9575 n/a (libjavascriptcoregtk-4.0.so.18) #6 0x00007fabc831cf5a n/a (libjavascriptcoregtk-4.0.so.18) #7 0x00007fabc68b9297 start_thread (libpthread.so.0) #8 0x00007fabca8f225f __clone (libc.so.6) Stack trace of thread 1552: #0 0x00007fabca8e82bd poll (libc.so.6) #1 0x00007fabc877cbf9 n/a (libglib-2.0.so.0) #2 0x00007fabc877cd0c g_main_context_iteration (libglib-2.0.so.0) #3 0x00007fabb7b3055d n/a (libdconfsettings.so) #4 0x00007fabc87a3ac5 n/a (libglib-2.0.so.0) #5 0x00007fabc68b9297 start_thread (libpthread.so.0) #6 0x00007fabca8f225f __clone (libc.so.6) Stack trace of thread 1638: #0 0x00007fabc68bf756 pthread_cond_timedwait@@GLIBC_2.3.2 (libpthread.so.0) #1 0x00007fabc831d64a _ZN3WTF15ThreadCondition9timedWaitERNS_5MutexEd (libjavascriptcoregtk-4.0.so.18) #2 0x00007fabc82e6333 _ZN3WTF10ParkingLot21parkConditionallyImplEPKvRKNS_12ScopedLambdaIFbvEEERKNS3_IFvvEEERKNS_24TimeWithDynamicClockTypeE (libjavascriptcoregtk-4.0.so.18) #3 0x00007fabc82d57d6 n/a (libjavascriptcoregtk-4.0.so.18) #4 0x00007fabc82e9575 n/a (libjavascriptcoregtk-4.0.so.18) #5 0x00007fabc831cf5a n/a (libjavascriptcoregtk-4.0.so.18) #6 0x00007fabc68b9297 start_thread (libpthread.so.0) #7 0x00007fabca8f225f __clone (libc.so.6) Stack trace of thread 1615: #0 0x00007fabc68bf756 pthread_cond_timedwait@@GLIBC_2.3.2 (libpthread.so.0) #1 0x00007fabc831d64a _ZN3WTF15ThreadCondition9timedWaitERNS_5MutexEd (libjavascriptcoregtk-4.0.so.18) #2 0x00007fabc82e6333 _ZN3WTF10ParkingLot21parkConditionallyImplEPKvRKNS_12ScopedLambdaIFbvEEERKNS3_IFvvEEERKNS_24TimeWithDynamicClockTypeE (libjavascriptcoregtk-4.0.so.18) #3 0x00007fabc82d57d6 n/a (libjavascriptcoregtk-4.0.so.18) #4 0x00007fabc82e9575 n/a (libjavascriptcoregtk-4.0.so.18) #5 0x00007fabc831cf5a n/a (libjavascriptcoregtk-4.0.so.18) #6 0x00007fabc68b9297 start_thread (libpthread.so.0) #7 0x00007fabca8f225f __clone (libc.so.6) Stack trace of thread 1634: #0 0x00007fabca8e82bd poll (libc.so.6) #1 0x00007fabc877cbf9 n/a (libglib-2.0.so.0) #2 0x00007fabc877cf92 g_main_loop_run (libglib-2.0.so.0) #3 0x00007fabc831fc60 _ZN3WTF7RunLoop3runEv (libjavascriptcoregtk-4.0.so.18) #4 0x00007fabc831ebc3 n/a (libjavascriptcoregtk-4.0.so.18) #5 0x00007fabc82e9575 n/a (libjavascriptcoregtk-4.0.so.18) #6 0x00007fabc831cf5a n/a (libjavascriptcoregtk-4.0.so.18) #7 0x00007fabc68b9297 start_thread (libpthread.so.0) #8 0x00007fabca8f225f __clone (libc.so.6) Stack trace of thread 1551: #0 0x00007fabca8e82bd poll (libc.so.6) #1 0x00007fabc877cbf9 n/a (libglib-2.0.so.0) #2 0x00007fabc877cf92 g_main_loop_run (libglib-2.0.so.0) #3 0x00007fabc831fc60 _ZN3WTF7RunLoop3runEv (libjavascriptcoregtk-4.0.so.18) #4 0x00007fabc831ebc3 n/a (libjavascriptcoregtk-4.0.so.18) #5 0x00007fabc82e9575 n/a (libjavascriptcoregtk-4.0.so.18) #6 0x00007fabc831cf5a n/a (libjavascriptcoregtk-4.0.so.18) #7 0x00007fabc68b9297 start_thread (libpthread.so.0) #8 0x00007fabca8f225f __clone (libc.so.6) Stack trace of thread 1555: #0 0x00007fabca8e82bd poll (libc.so.6) #1 0x00007fabc877cbf9 n/a (libglib-2.0.so.0) #2 0x00007fabc877cf92 g_main_loop_run (libglib-2.0.so.0) #3 0x00007fabc831fc60 _ZN3WTF7RunLoop3runEv (libjavascriptcoregtk-4.0.so.18) #4 0x00007fabc831ebc3 n/a (libjavascriptcoregtk-4.0.so.18) #5 0x00007fabc82e9575 n/a (libjavascriptcoregtk-4.0.so.18) #6 0x00007fabc831cf5a n/a (libjavascriptcoregtk-4.0.so.18) #7 0x00007fabc68b9297 start_thread (libpthread.so.0) #8 0x00007fabca8f225f __clone (libc.so.6) Stack trace of thread 1624: #0 0x00007fabc68bf756 pthread_cond_timedwait@@GLIBC_2.3.2 (libpthread.so.0) #1 0x00007fabc831d64a _ZN3WTF15ThreadCondition9timedWaitERNS_5MutexEd (libjavascriptcoregtk-4.0.so.18) #2 0x00007fabc82e6333 _ZN3WTF10ParkingLot21parkConditionallyImplEPKvRKNS_12ScopedLambdaIFbvEEERKNS3_IFvvEEERKNS_24TimeWithDynamicClockTypeE (libjavascriptcoregtk-4.0.so.18) #3 0x00007fabc82d57d6 n/a (libjavascriptcoregtk-4.0.so.18) #4 0x00007fabc82e9575 n/a (libjavascriptcoregtk-4.0.so.18) #5 0x00007fabc831cf5a n/a (libjavascriptcoregtk-4.0.so.18) #6 0x00007fabc68b9297 start_thread (libpthread.so.0) #7 0x00007fabca8f225f __clone (libc.so.6) Stack trace of thread 1639: #0 0x00007fabc68bf756 pthread_cond_timedwait@@GLIBC_2.3.2 (libpthread.so.0) #1 0x00007fabc831d64a _ZN3WTF15ThreadCondition9timedWaitERNS_5MutexEd (libjavascriptcoregtk-4.0.so.18) #2 0x00007fabc82e6333 _ZN3WTF10ParkingLot21parkConditionallyImplEPKvRKNS_12ScopedLambdaIFbvEEERKNS3_IFvvEEERKNS_24TimeWithDynamicClockTypeE (libjavascriptcoregtk-4.0.so.18) #3 0x00007fabc82d57d6 n/a (libjavascriptcoregtk-4.0.so.18) #4 0x00007fabc82e9575 n/a (libjavascriptcoregtk-4.0.so.18) #5 0x00007fabc831cf5a n/a (libjavascriptcoregtk-4.0.so.18) #6 0x00007fabc68b9297 start_thread (libpthread.so.0) #7 0x00007fabca8f225f __clone (libc.so.6)
Cédric Bellegarde
Comment 2 2017-06-19 04:25:12 PDT
*** This bug has been marked as a duplicate of bug 172754 ***
Michael Catanzaro
Comment 3 2017-06-23 18:31:17 PDT
What makes you think this is a duplicate of bug #172754? It doesn't look that way from the provided stack trace.
Cédric Bellegarde
Comment 4 2017-07-01 01:51:59 PDT
BTW the way, fixed in 2.16.5
Michael Catanzaro
Comment 5 2017-07-01 12:15:39 PDT
*** This bug has been marked as a duplicate of bug 170865 ***
Note You need to log in before you can comment on or make changes to this bug.