| Summary: | SIGSEGV on amd64 when built with gcc 4.3 | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Mike Hommey <mh+webkit> |
| Component: | JavaScriptCore | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED FIXED | ||
| Severity: | Normal | CC: | mrowe |
| Priority: | P2 | ||
| Version: | 528+ (Nightly build) | ||
| Hardware: | PC | ||
| OS: | Linux | ||
|
Description
Mike Hommey
2008-04-11 11:56:28 PDT
FWIW, it was built with CFLAGS="-O2 -g" CXXFLAGS="-O2 -g" ./autogen.sh, which means it is not a debug build, despite debugging symbols being there to provide a full backtrace. Stacktrace with --enable-debug:
Thread 1 (Thread 0x2b85d0fa0ee0 (LWP 29540)):
#0 0x00002b85c78e0ea5 in waitpid () from /lib/libpthread.so.0
No symbol table info available.
#1 0x00002b85c869f5a6 in g_spawn_sync () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#2 0x00002b85c869f8b8 in g_spawn_command_line_sync () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#3 0x00002b85d191a4b3 in ?? () from /usr/lib/gtk-2.0/modules/libgnomebreakpad.so
No symbol table info available.
#4 <signal handler called>
No symbol table info available.
#5 0x00002b85c7248346 in WTF::HashTable<long, std::pair<long, int>, WTF::PairFirstExtractor<std::pair<long, int> >, WTF::IntHash<long>, WTF::PairHashTraits<WTF::HashTraits<long>, WTF::HashTraits<int> >, WTF::HashTraits<long> >::add<KJS::JSCell*, unsigned int, WTF::HashMapTranslator<true, std::pair<KJS::JSCell*, unsigned int>, WTF::PairBaseHashTraits<WTF::HashTraits<KJS::JSCell*>, WTF::HashTraits<unsigned int> >, WTF::PairHashTraits<WTF::HashTraits<long>, WTF::HashTraits<int> >, WTF::PtrHash<KJS::JSCell*> > > (this=
0x2b85c78c0460, key=@0x7fffe4508390, extra=@0x7fffe450839c) at ../JavaScriptCore/wtf/HashTable.h:597
k = <value optimized out>
sizeMask = <value optimized out>
h = <value optimized out>
i = <value optimized out>
deletedEntry = <value optimized out>
entry = <value optimized out>
__PRETTY_FUNCTION__ = "std::pair<typename WTF::HashTable<Key, Value, Extractor, HashFunctions, Traits, KeyTraits>::iterator, bool> WTF::HashTable<Key, Value, Extractor, HashFunctions, Traits, KeyTraits>::add(const T&, const"...
#6 0x00002b85c7246644 in KJS::Collector::protect (k=0x2b85d2900000) at ../JavaScriptCore/wtf/HashMap.h:271
__PRETTY_FUNCTION__ = "static void KJS::Collector::protect(KJS::JSValue*)"
#7 0x00002b85c6d2d7fb in KJS::ProtectedPtr<WebCore::JSDOMWindowWrapper>::operator= (this=0x6ccdb0, optr=0x2b85d2900000) at ../JavaScriptCore/kjs/protect.h:35
lock = {<WTFNoncopyable::Noncopyable> = {<No data fields>}, <No data fields>}
#8 0x00002b85c6d2cccc in WebCore::KJSProxy::initScript (this=0x6ccdb0) at ../WebCore/bindings/js/kjs_proxy.cpp:147
lock = {<WTFNoncopyable::Noncopyable> = {<No data fields>}, <No data fields>}
#9 0x00002b85c6d2d5d5 in WebCore::KJSProxy::evaluate (this=0x7fffe4507a60, filename=@0x7fffe45087c0, baseLine=0, str=@0x7fffe45089e0)
at ../WebCore/bindings/js/kjs_proxy.h:86
exec = <value optimized out>
lock = {<WTFNoncopyable::Noncopyable> = {<No data fields>}, <No data fields>}
comp = {m_type = 6965616, m_value = 0xffffffff}
#10 0x00002b85c6fdf3a8 in WebCore::FrameLoader::executeScript (this=0x68ad70, url=@0x7fffe45087c0, baseLine=0, script=@0x7fffe45089e0)
at ../WebCore/loader/FrameLoader.cpp:783
scriptProxy = <value optimized out>
wasRunningScript = false
result = <value optimized out>
#11 0x00002b85c6f94838 in WebCore::HTMLTokenizer::scriptExecution (this=0x8f8660, str=@0x7fffe45089e0, state={static EntityShift = <optimized out>, m_bits = 0},
scriptURL=<value optimized out>, baseLine=0) at ../WebCore/html/HTMLTokenizer.cpp:540
url = {m_impl = {m_ptr = 0x8df5b0}}
savedPrependingSrc = (WebCore::SegmentedString *) 0x7fffe45088f0
prependingSrc = {m_pushedChar1 = 0, m_pushedChar2 = 0, m_currentString = {m_length = 0, m_current = 0x0, m_string = {m_impl = {m_ptr = 0x0}},
m_doNotExcludeLineNumbers = true}, m_currentChar = 0x0, m_substrings = {m_start = 0, m_end = 0,
m_buffer = {<WTF::VectorBufferBase<WebCore::SegmentedSubstring>> = {<WTFNoncopyable::Noncopyable> = {<No data fields>}, m_buffer = 0x0,
m_capacity = 0}, <No data fields>}, m_iterators = 0x0}, m_composite = false}
#12 0x00002b85c6f959cf in WebCore::HTMLTokenizer::scriptHandler (this=0x8f8660, state={static EntityShift = <optimized out>, m_bits = 3830479456})
at ../WebCore/html/HTMLTokenizer.cpp:480
doScriptExec = true
followingFrameset = false
cs = (class WebCore::CachedScript *) 0x0
scriptCode = {m_impl = {m_ptr = 0x902170}}
savedPrependingSrc = (WebCore::SegmentedString *) 0x0
prependingSrc = {m_pushedChar1 = 0, m_pushedChar2 = 0, m_currentString = {m_length = 0, m_current = 0x0, m_string = {m_impl = {m_ptr = 0x0}},
m_doNotExcludeLineNumbers = true}, m_currentChar = 0x0, m_substrings = {m_start = 0, m_end = 0,
m_buffer = {<WTF::VectorBufferBase<WebCore::SegmentedSubstring>> = {<WTFNoncopyable::Noncopyable> = {<No data fields>}, m_buffer = 0x0,
m_capacity = 0}, <No data fields>}, m_iterators = 0x0}, m_composite = false}
#13 0x00002b85c6f962b3 in WebCore::HTMLTokenizer::parseSpecial (this=0x8f8660, src=@0x8f9090, state={static EntityShift = <optimized out>, m_bits = 0})
at ../WebCore/html/HTMLTokenizer.cpp:330
ch = <value optimized out>
__PRETTY_FUNCTION__ = "WebCore::HTMLTokenizer::State WebCore::HTMLTokenizer::parseSpecial(WebCore::SegmentedString&, WebCore::HTMLTokenizer::State)"
#14 0x00002b85c6f97e3b in WebCore::HTMLTokenizer::parseTag (this=0x8f8660, src=@0x8f9090, state={static EntityShift = <optimized out>, m_bits = 3830479456})
at ../WebCore/html/HTMLTokenizer.cpp:1492
tagName = {m_string = {m_impl = {m_ptr = 0x6908b0}}}
isSelfClosingScript = false
beginTag = true
n = {m_ptr = 0x901cb0}
cBufferPos = 0
lastIsSlash = false
__PRETTY_FUNCTION__ = "WebCore::HTMLTokenizer::State WebCore::HTMLTokenizer::parseTag(WebCore::SegmentedString&, WebCore::HTMLTokenizer::State)"
#15 0x00002b85c6f988ac in WebCore::HTMLTokenizer::write (this=0x8f8660, str=<value optimized out>, appendData=<value optimized out>)
at ../WebCore/html/HTMLTokenizer.cpp:1727
cc = <value optimized out>
source = {m_pushedChar1 = 0, m_pushedChar2 = 0, m_currentString = {m_length = 5975, m_current = 0x8f9540, m_string = {m_impl = {m_ptr = 0x8c5b80}},
m_doNotExcludeLineNumbers = true}, m_currentChar = 0x8f9540, m_substrings = {m_start = 0, m_end = 0,
m_buffer = {<WTF::VectorBufferBase<WebCore::SegmentedSubstring>> = {<WTFNoncopyable::Noncopyable> = {<No data fields>}, m_buffer = 0x8df670,
m_capacity = 0}, <No data fields>}, m_iterators = 0x0}, m_composite = false}
wasInWrite = false
processedCount = 12
startTime = 1207944580.5079279
frame = (class WebCore::Frame *) 0x68a370
state = {static EntityShift = <optimized out>, m_bits = 3830479456}
#16 0x00002b85c6fcb91b in WebCore::FrameLoader::write (this=<value optimized out>,
str=0x8e6ee0 "<html><head><meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\"><title>Google</title><style>body,td,a,p,.h{font-family:arial,sans-serif}.h{color:#3366cc}.q{color:#00c}.ts td{padding:0}."..., len=<value optimized out>, flush=false) at ../WebCore/loader/FrameLoader.cpp:1029
tokenizer = (WebCore::Tokenizer *) 0x8f8660
decoded = {m_impl = {m_ptr = 0x8c5b80}}
__PRETTY_FUNCTION__ = "void WebCore::FrameLoader::write(const char*, int, bool)"
#17 0x00002b85c6fc067f in WebCore::DocumentLoader::commitLoad (this=0x6f4560,
data=0x8e6ee0 "<html><head><meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\"><title>Google</title><style>body,td,a,p,.h{font-family:arial,sans-serif}.h{color:#3366cc}.q{color:#00c}.ts td{padding:0}."..., length=5982) at ../WebCore/loader/DocumentLoader.cpp:328
frameLoader = (WebCore::FrameLoader *) 0x0
#18 0x00002b85c7005479 in WebCore::ResourceLoader::didReceiveData (this=0x6a5790,
data=0x8e6ee0 "<html><head><meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\"><title>Google</title><style>body,td,a,p,.h{font-family:arial,sans-serif}.h{color:#3366cc}.q{color:#00c}.ts td{padding:0}."..., length=5982, lengthReceived=0, allAtOnce=16) at ../WebCore/loader/ResourceLoader.cpp:234
protector = {m_ptr = 0x6a5790}
#19 0x00002b85c6ffb56b in WebCore::MainResourceLoader::didReceiveData (this=0x6a5790,
data=0x8e6ee0 "<html><head><meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\"><title>Google</title><style>body,td,a,p,.h{font-family:arial,sans-serif}.h{color:#3366cc}.q{color:#00c}.ts td{padding:0}."..., length=5982, lengthReceived=0, allAtOnce=255) at ../WebCore/loader/MainResourceLoader.cpp:296
protect = {m_ptr = 0x6a5790}
__PRETTY_FUNCTION__ = "virtual void WebCore::MainResourceLoader::didReceiveData(const char*, int, long long int, bool)"
#20 0x00002b85c71c09d1 in writeCallback (ptr=0x8e6ee0, size=<value optimized out>, nmemb=<value optimized out>, data=<value optimized out>)
at ../WebCore/platform/network/curl/ResourceHandleManager.cpp:126
job = (class WebCore::ResourceHandle *) 0x6a5c20
d = (class WebCore::ResourceHandleInternal *) 0x6a5380
totalSize = 5982
h = (CURL *) 0x8d3c00
httpCode = 200
err = <value optimized out>
#21 0x00002b85ca9856a8 in ?? () from /usr/lib/libcurl-gnutls.so.4
No symbol table info available.
#22 0x00002b85ca99e7f9 in ?? () from /usr/lib/libcurl-gnutls.so.4
No symbol table info available.
#23 0x00002b85ca99e9af in ?? () from /usr/lib/libcurl-gnutls.so.4
No symbol table info available.
#24 0x00002b85ca997dfa in ?? () from /usr/lib/libcurl-gnutls.so.4
No symbol table info available.
#25 0x00002b85ca99cb1c in ?? () from /usr/lib/libcurl-gnutls.so.4
No symbol table info available.
#26 0x00002b85ca99d48b in curl_multi_perform () from /usr/lib/libcurl-gnutls.so.4
No symbol table info available.
#27 0x00002b85c71c3b9c in WebCore::ResourceHandleManager::downloadTimerCallback (this=0x6f7dd0, timer=<value optimized out>)
at ../WebCore/platform/network/curl/ResourceHandleManager.cpp:308
fdread = {fds_bits = {128, 0 <repeats 15 times>}}
fdwrite = {fds_bits = {0 <repeats 16 times>}}
fdexcep = {fds_bits = {0 <repeats 16 times>}}
maxfd = 7
timeout = {tv_sec = 0, tv_usec = 5000}
rc = 1
runningHandles = 0
started = <value optimized out>
__PRETTY_FUNCTION__ = "void WebCore::ResourceHandleManager::downloadTimerCallback(WebCore::Timer<WebCore::ResourceHandleManager>*)"
#28 0x00002b85c70c9865 in WebCore::TimerBase::fireTimers (fireTime=1207944580.5069599, firingTimers=@0x7fffe4509670) at ../WebCore/platform/Timer.cpp:347
timer = (class WebCore::TimerBase *) 0x6f7dd0
interval = <value optimized out>
size = <value optimized out>
#29 0x00002b85c70c99df in WebCore::TimerBase::sharedTimerFired () at ../WebCore/platform/Timer.cpp:368
fireTime = 1207944580.5069599
firingTimers = {m_size = 1, m_buffer = {<WTF::VectorBufferBase<WebCore::TimerBase*>> = {<WTFNoncopyable::Noncopyable> = {<No data fields>}, m_buffer = 0x8df430,
m_capacity = 16}, <No data fields>}}
firingTimersSet = {m_impl = {static m_minTableSize = <optimized out>, static m_maxLoad = <optimized out>, static m_minLoad = <optimized out>, m_table = 0x8dfb00,
m_tableSize = 64, m_tableSizeMask = 63, m_keyCount = 0, m_deletedCount = 1, m_iterators = 0x0}}
#30 0x00002b85c6bc91e2 in timeout_cb () at ../WebCore/platform/gtk/SharedTimerGtk.cpp:48
No locals.
#31 0x00002b85c866c81b in ?? () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#32 0x00002b85c866c0f2 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#33 0x00002b85c866f396 in ?? () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#34 0x00002b85c866f657 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#35 0x00002b85c7f7cb63 in IA__gtk_main () at /build/buildd/gtk+2.0-2.12.9/gtk/gtkmain.c:1163
tmp_list = (GList *) 0x62a8b0
functions = (GList *) 0x0
init = (GtkInitFunction *) 0x661280
loop = (GMainLoop *) 0x8cb060
#36 0x0000000000401efb in main (argc=1, argv=0x7fffe45099c8) at ../WebKitTools/GtkLauncher/main.c:200
vbox = (GtkWidget *) 0x62a8b0
uri = <value optimized out>
The backtrace for a debug build matches the following assertion failure: ASSERTION FAILED: !HashTranslator::equal(KeyTraits::deletedValue(), key) As seen on irc, this is fixed by building javascriptcore with -fno-strict-aliases |