Bug 129677 – [GTK] [Debug] Facebook crashes in v2.3.91

• Status: RESOLVED
• Resolution: FIXED
• Component: WebKitGTK

[Alberto Garcia]

This was GtkLauncher browsing a random Facebook page, but I'm
experiencing crashes with WK2 as well.

Here's the backtrace:

#0  WTFCrash () at ../Source/WTF/wtf/Assertions.cpp:333
#1  0x00007f55453900e6 in WebCore::Element::isFocusable (this=0x3e9b770) at ../Source/WebCore/dom/Element.cpp:468
#2  0x00007f5545325cc3 in WebCore::Document::resetHiddenFocusElementTimer (this=0x381b870) at ../Source/WebCore/dom/Document.cpp:4757
#3  0x00007f5545364dea in std::_Mem_fn<void (WebCore::Document::*)(WebCore::Timer<WebCore::Document>&)>::operator()<WebCore::Timer<WebCore::Document>&, void> (this=0x2fb1350, __object=0x381b870, __args=...) at /usr/bin/../lib/gcc/x86_64-linux-gnu/4.8/../../../../include/c++/4.8/functional:601
#4  0x00007f5545364d50 in std::_Bind<std::_Mem_fn<void (WebCore::Document::*)(WebCore::Timer<WebCore::Document>&)> (WebCore::Document*, std::reference_wrapper<WebCore::Timer<WebCore::Document> >)>::__call<void, , 0ul, 1ul>(std::tuple<>&&, std::_Index_tuple<0ul, 1ul>) (this=0x2fb1350, __args=<unknown type in /home/berto/devel/WebKit/build/.libs/libwebkitgtk-3.0.so.0, CU 0x6b080a0, DIE 0x6cad02b>)
    at /usr/bin/../lib/gcc/x86_64-linux-gnu/4.8/../../../../include/c++/4.8/functional:1295
#5  0x00007f5545364cd6 in std::_Bind<std::_Mem_fn<void (WebCore::Document::*)(WebCore::Timer<WebCore::Document>&)> (WebCore::Document*, std::reference_wrapper<WebCore::Timer<WebCore::Document> >)>::operator()<, void>() (this=0x2fb1350)
    at /usr/bin/../lib/gcc/x86_64-linux-gnu/4.8/../../../../include/c++/4.8/functional:1353
#6  0x00007f55453649ad in std::_Function_handler<void (), std::_Bind<std::_Mem_fn<void (WebCore::Document::*)(WebCore::Timer<WebCore::Document>&)> (WebCore::Document*, std::reference_wrapper<WebCore::Timer<WebCore::Document> >)> >::_M_invoke(std::_Any_data const&) (__functor=...)
    at /usr/bin/../lib/gcc/x86_64-linux-gnu/4.8/../../../../include/c++/4.8/functional:2071
#7  0x00007f5544d9b83e in std::function<void ()>::operator()() const (this=0x381bfc8)
    at /usr/bin/../lib/gcc/x86_64-linux-gnu/4.8/../../../../include/c++/4.8/functional:2464
#8  0x00007f55453645dc in WebCore::Timer<WebCore::Document>::fired (this=0x381bf90) at ../Source/WebCore/platform/Timer.h:132
#9  0x00007f5544f8d49c in WebCore::ThreadTimers::sharedTimerFiredInternal (this=0x2699570) at ../Source/WebCore/platform/ThreadTimers.cpp:132
#10 0x00007f5544f8d1c9 in WebCore::ThreadTimers::sharedTimerFired () at ../Source/WebCore/platform/ThreadTimers.cpp:107
#11 0x00007f5544fb65c3 in WebCore::sharedTimerTimeoutCallback () at ../Source/WebCore/platform/gtk/SharedTimerGtk.cpp:49
#12 0x00007f553e78cf33 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#13 0x00007f553e78c526 in g_main_context_dispatch () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#14 0x00007f553e78c878 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#15 0x00007f553e78cb3a in g_main_loop_run () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#16 0x00007f5541bf95a5 in gtk_main () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#17 0x000000000040474d in main (argc=1, argv=0x7fff7a61c308) at ../Tools/GtkLauncher/main.c:561

[Alberto Garcia]

Another crash, this one from a normal build, although probably unrelated:

Program received signal SIGSEGV, Segmentation fault.
0x00007f7d1ea1a939 in llint_function_for_call_arity_check () from .libs/libjavascriptcoregtk-3.0.so.0
(gdb) bt
#0  0x00007f7d1ea1a939 in llint_function_for_call_arity_check () from .libs/libjavascriptcoregtk-3.0.so.0
#1  0x0000000000000000 in ?? ()

[Alberto Garcia]

(In reply to comment #1)
> Another crash, this one from a normal build, although probably unrelated:

Yes, this one seems to be related to bug 127909, although we are using
the code previous to the jsCStack branch merge.

I added r163083 and r163085 to the list of proposed changes for the
2.4 branch.

[Alberto Garcia]

Still crashing in 2.4.0, I'll try to figure out what's happening.

[Alberto Garcia]

It seems to work fine in trunk (r169421).