Bug 138696 – [GTK][Stable] Toshiba page makes WebKitGTK+ crash

• Status: RESOLVED
• Resolution: FIXED
• Component: WebKitGTK

[Bastien Nocera]

WebKitGTK+ 2.6.3 crashes on the following website:
http://www.toshiba.fr/innovation/generic/product-selector/

trunk works though.

[Carlos Garcia Campos]

#0  0x00007f58e08f8ecc in WTFCrash () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#1  0x00007f58e07598fd in slow_path_get_direct_pname () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#2  0x00007f58e08e813e in llint_entry () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#3  0x00007f58e08e7974 in llint_entry () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#4  0x00007f58e08e7974 in llint_entry () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#5  0x00007f58e08e7974 in llint_entry () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#6  0x00007f58e08e7974 in llint_entry () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#7  0x00007f58e08e2036 in vmEntryToJavaScript () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#8  0x00007f58e064d3d0 in JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#9  0x00007f58e06326e4 in JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::JSObject*) () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#10 0x00007f58e075acdf in JSC::evaluate(JSC::ExecState*, JSC::SourceCode const&, JSC::JSValue, JSC::JSValue*) () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#11 0x00007f58e298b75d in WebCore::ScriptController::evaluateInWorld(WebCore::ScriptSourceCode const&, WebCore::DOMWrapperWorld&) () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#12 0x00007f58e298ba1c in WebCore::ScriptController::evaluate(WebCore::ScriptSourceCode const&) () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#13 0x00007f58e2b8a80c in WebCore::ScriptElement::executeScript(WebCore::ScriptSourceCode const&) () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#14 0x00007f58e2d927bb in WebCore::HTMLScriptRunner::executePendingScriptAndDispatchEvent(WebCore::PendingScript&) () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#15 0x00007f58e2d92b72 in WebCore::HTMLScriptRunner::executeParsingBlockingScript() () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#16 0x00007f58e2d92eaf in WebCore::HTMLScriptRunner::executeParsingBlockingScripts() () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#17 0x00007f58e2d79503 in WebCore::HTMLDocumentParser::runScriptsForPausedTreeBuilder() () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#18 0x00007f58e2d79610 in WebCore::HTMLDocumentParser::canTakeNextToken(WebCore::HTMLDocumentParser::SynchronousMode, WebCore::PumpSession&) ()
   from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#19 0x00007f58e2d7bf42 in WebCore::HTMLDocumentParser::pumpTokenizer(WebCore::HTMLDocumentParser::SynchronousMode) () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#20 0x00007f58e2d7db0b in WebCore::HTMLDocumentParser::resumeParsingAfterScriptExecution() () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#21 0x00007f58e2d7dbe8 in WebCore::HTMLDocumentParser::notifyFinished(WebCore::CachedResource*) () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#22 0x00007f58e2ee2487 in WebCore::CachedResource::checkNotify() [clone .part.162] () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#23 0x00007f58e2ea66ac in WebCore::SubresourceLoader::didFinishLoading(double) () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#24 0x00007f58e35f8f39 in WebCore::readCallback(_GObject*, _GAsyncResult*, void*) () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#25 0x00007f58de3b3446 in async_ready_callback_wrapper (source_object=0x7f58440038d0, res=0x15c5930, user_data=0x7f583a5272c0) at ginputstream.c:523
#26 0x00007f58de3d8864 in g_task_return_now (task=0x15c5930) at gtask.c:1077
#27 0x00007f58de3d8889 in complete_in_idle_cb (task=0x15c5930) at gtask.c:1086
#28 0x00007f58dde13b5d in g_main_dispatch (context=0x143ed40) at gmain.c:3122
#29 g_main_context_dispatch (context=context@entry=0x143ed40) at gmain.c:3721
#30 0x00007f58dde13ef8 in g_main_context_iterate (context=0x143ed40, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3792
#31 0x00007f58dde14212 in g_main_loop_run (loop=0x1a9eac0) at gmain.c:3986
#32 0x00007f58e27ec571 in WebProcessMainUnix () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#33 0x00007f58e0c84b45 in __libc_start_main (main=0x400740 <main>, argc=2, argv=0x7fff765a50f8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, 
    stack_end=0x7fff765a50e8) at libc-start.c:287
#34 0x0000000000400794 in _start ()

[Štefan Gurský]

If I do "view source" on that page (and it opens in gedit, since I disabled internal-view-source in epiphany browser), every second byte of the file is 0 (shows as \00 in gedit). If I wget the page, then those bytes are not present.

Similar things happen also with pages https://www.elines.cz/cz/ and http://slovnik.cz/

[Carlos Garcia Campos]

This was fixed in r175724, I've just merged it in the stable branch at r176176. Thanks for reporting!