Bug 26116 – Crash when accessing www.ovi.com using 64 bit

• Component: JavaScriptCore
• Status: RESOLVED DUPLICATE

[Kenneth Rohde Christiansen]

The Qt Launcher crashes in JSC when accessing http://www.ovi.com on 64 bit Ubuntu linux (latest release)

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7ff37657c750 (LWP 10232)]
0x00007ff374bc2759 in JSC::Interpreter::privateExecute (this=0x19070d0, flag=JSC::Interpreter::Normal, registerFile=0x19070e0, callFrame=0x7ff3648d92c0, exception=0x18cb588)
    at ../../../JavaScriptCore/interpreter/Interpreter.cpp:3116
3116	                argStore[i] = callFrame->registers()[i - RegisterFile::CallFrameHeaderSize - expectedParams];
(gdb) bt
#0  0x00007ff374bc2759 in JSC::Interpreter::privateExecute (this=0x19070d0, flag=JSC::Interpreter::Normal, registerFile=0x19070e0, callFrame=0x7ff3648d92c0, exception=0x18cb588)
    at ../../../JavaScriptCore/interpreter/Interpreter.cpp:3116
#1  0x00007ff374bc6513 in JSC::Interpreter::execute (this=0x19070d0, functionBodyNode=0x1af2120, callFrame=0x19023b8, function=0x7ff3648bfc40, thisObj=0x7ff3648b2600, 
    args=@0x7fff7e5a7e60, scopeChain=0x1c90c50, exception=0x18cb588) at ../../../JavaScriptCore/interpreter/Interpreter.cpp:712
#2  0x00007ff374bff1a0 in JSC::JSFunction::call (this=0x7ff3648bfc40, exec=0x19023b8, thisValue={m_ptr = 0x7ff3648b2600}, args=@0x7fff7e5a7e60)
    at ../../../JavaScriptCore/runtime/JSFunction.cpp:111
#3  0x00007ff374bd3a83 in JSC::call (exec=0x19023b8, functionObject={m_ptr = 0x7ff3648bfc40}, callType=JSC::CallTypeJS, callData=@0x7fff7e5a7e90, thisValue=
      {m_ptr = 0x7ff3648b2600}, args=@0x7fff7e5a7e60) at ../../../JavaScriptCore/runtime/CallData.cpp:39
#4  0x00007ff374cda1cd in WebCore::JSEventListener::handleEvent (this=0x1c8f010, event=0x21bb0c0, isWindowEvent=false) at ../../../WebCore/bindings/js/JSEventListener.cpp:132
#5  0x00007ff374e68477 in WebCore::Node::handleLocalEvents (this=0x19215e0, event=0x21bb0c0, useCapture=false) at ../../../WebCore/dom/Node.cpp:2381
#6  0x00007ff374e65b35 in WebCore::Node::dispatchGenericEvent (this=0x19215e0, prpEvent={m_ptr = 0x7fff7e5a8150}) at ../../../WebCore/dom/Node.cpp:2502
#7  0x00007ff374e66170 in WebCore::Node::dispatchEvent (this=0x19215e0, e={m_ptr = 0x7fff7e5a81d0}, ec=@0x7fff7e5a81dc) at ../../../WebCore/dom/Node.cpp:2435
#8  0x00007ff374e26615 in WebCore::Document::finishedParsing (this=0x19215e0) at ../../../WebCore/dom/Document.cpp:3889
#9  0x00007ff374fc18b2 in WebCore::HTMLParser::finished (this=0x1677840) at ../../../WebCore/html/HTMLParser.cpp:1616
#10 0x00007ff374fdb398 in WebCore::HTMLTokenizer::end (this=0x17df460) at ../../../WebCore/html/HTMLTokenizer.cpp:1821
#11 0x00007ff374fe2fc2 in WebCore::HTMLTokenizer::write (this=0x17df460, str=@0x7fff7e5a8390, appendData=false) at ../../../WebCore/html/HTMLTokenizer.cpp:1765
#12 0x00007ff374fde817 in WebCore::HTMLTokenizer::notifyFinished (this=0x17df460) at ../../../WebCore/html/HTMLTokenizer.cpp:2028
#13 0x00007ff3750292d7 in WebCore::CachedScript::checkNotify (this=0x1af17a0) at ../../../WebCore/loader/CachedScript.cpp:106
#14 0x00007ff3750293cb in WebCore::CachedScript::data (this=0x1af17a0, data={m_ptr = 0x7fff7e5a8620}, allDataReceived=true) at ../../../WebCore/loader/CachedScript.cpp:96
#15 0x00007ff37507f350 in WebCore::Loader::Host::didFinishLoading (this=0x1981240, loader=0x1af2960) at ../../../WebCore/loader/loader.cpp:318
#16 0x00007ff37508d341 in WebCore::SubresourceLoader::didFinishLoading (this=0x1af2960) at ../../../WebCore/loader/SubresourceLoader.cpp:183
#17 0x00007ff37508a29e in WebCore::ResourceLoader::didFinishLoading (this=0x1af2960) at ../../../WebCore/loader/ResourceLoader.cpp:416
#18 0x00007ff37530147c in WebCore::QNetworkReplyHandler::finish (this=0x197c620) at ../../../WebCore/platform/network/qt/QNetworkReplyHandler.cpp:225
#19 0x00007ff375301513 in WebCore::QNetworkReplyHandler::qt_metacall (this=0x197c620, _c=QMetaObject::InvokeMetaMethod, _id=0, _a=0x1a50560) at ./moc_QNetworkReplyHandler.cpp:69
#20 0x00007ff3710ddc55 in QMetaCallEvent::placeMetaCall (this=0x1a55fe0, object=0x197c620) at /home/kenneth/repo/Qt/qt/src/corelib/kernel/qobject.cpp:456
#21 0x00007ff3710e0e4a in QObject::event (this=0x197c620, e=0x1a55fe0) at /home/kenneth/repo/Qt/qt/src/corelib/kernel/qobject.cpp:1088
#22 0x00007ff372a85173 in QApplicationPrivate::notify_helper (this=0x136fd20, receiver=0x197c620, e=0x1a55fe0) at /home/kenneth/repo/Qt/qt/src/gui/kernel/qapplication.cpp:4047
#23 0x00007ff372a85515 in QApplication::notify (this=0x7fff7e5a9670, receiver=0x197c620, e=0x1a55fe0) at /home/kenneth/repo/Qt/qt/src/gui/kernel/qapplication.cpp:3594
#24 0x00007ff3710ca6b7 in QCoreApplication::notifyInternal (this=0x7fff7e5a9670, receiver=0x197c620, event=0x1a55fe0)
    at /home/kenneth/repo/Qt/qt/src/corelib/kernel/qcoreapplication.cpp:624
#25 0x00007ff375312213 in QCoreApplication::sendEvent (receiver=0x197c620, event=0x1a55fe0)
    at ../../../../kenneth-qt-webkit/include/QtCore/../../../qt/src/corelib/kernel/qcoreapplication.h:213
#26 0x00007ff3710caccd in QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, data=0x136fe90)
    at /home/kenneth/repo/Qt/qt/src/corelib/kernel/qcoreapplication.cpp:1261
#27 0x00007ff3710cafdc in QCoreApplication::sendPostedEvents (receiver=0x0, event_type=0) at /home/kenneth/repo/Qt/qt/src/corelib/kernel/qcoreapplication.cpp:1154
#28 0x00007ff372b52c25 in QCoreApplication::sendPostedEvents () at ../../include/QtCore/../../../qt/src/corelib/kernel/qcoreapplication.h:218
#29 0x00007ff371103c09 in postEventSourceDispatch (s=0x137d8c0) at /home/kenneth/repo/Qt/qt/src/corelib/kernel/qeventdispatcher_glib.cpp:210
#30 0x00007ff37068c20a in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#31 0x00007ff37068f8e0 in ?? () from /usr/lib/libglib-2.0.so.0
#32 0x00007ff37068fa7c in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#33 0x00007ff371102ba6 in QEventDispatcherGlib::processEvents (this=0x1379550, flags={i = 2119865104})
    at /home/kenneth/repo/Qt/qt/src/corelib/kernel/qeventdispatcher_glib.cpp:327
#34 0x00007ff372b51123 in QGuiEventDispatcherGlib::processEvents (this=0x1379550, flags={i = 2119865200})
    at /home/kenneth/repo/Qt/qt/src/gui/kernel/qguieventdispatcher_glib.cpp:202
#35 0x00007ff3710c6e23 in QEventLoop::processEvents (this=0x7fff7e5a9460, flags={i = 2119865360}) at /home/kenneth/repo/Qt/qt/src/corelib/kernel/qeventloop.cpp:149
#36 0x00007ff3710c7047 in QEventLoop::exec (this=0x7fff7e5a9460, flags={i = 2119865472}) at /home/kenneth/repo/Qt/qt/src/corelib/kernel/qeventloop.cpp:201
#37 0x00007ff3710cb101 in QCoreApplication::exec () at /home/kenneth/repo/Qt/qt/src/corelib/kernel/qcoreapplication.cpp:902
#38 0x00007ff372a84ed0 in QApplication::exec () at /home/kenneth/repo/Qt/qt/src/gui/kernel/qapplication.cpp:3516
#39 0x000000000041a10d in main (argc=2, argv=0x7fff7e5a9868) at /home/kenneth/repo/Qt/webkit/WebKit/qt/QtLauncher/main.cpp:433

[Mark Rowe (bdash)]

This is probably related to the other Linux-specific 64-bit JS crasher we have filed.

[Oliver Hunt]

*** This bug has been marked as a duplicate of bug 27016 ***