Bug 138696 - [GTK][Stable] Toshiba page makes WebKitGTK+ crash
Summary: [GTK][Stable] Toshiba page makes WebKitGTK+ crash
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebKitGTK (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-11-13 08:50 PST by Bastien Nocera
Modified: 2014-11-16 23:32 PST (History)
4 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Bastien Nocera 2014-11-13 08:50:56 PST
WebKitGTK+ 2.6.3 crashes on the following website:
http://www.toshiba.fr/innovation/generic/product-selector/

trunk works though.
Comment 1 Carlos Garcia Campos 2014-11-13 08:53:21 PST
#0  0x00007f58e08f8ecc in WTFCrash () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#1  0x00007f58e07598fd in slow_path_get_direct_pname () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#2  0x00007f58e08e813e in llint_entry () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#3  0x00007f58e08e7974 in llint_entry () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#4  0x00007f58e08e7974 in llint_entry () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#5  0x00007f58e08e7974 in llint_entry () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#6  0x00007f58e08e7974 in llint_entry () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#7  0x00007f58e08e2036 in vmEntryToJavaScript () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#8  0x00007f58e064d3d0 in JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#9  0x00007f58e06326e4 in JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::JSObject*) () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#10 0x00007f58e075acdf in JSC::evaluate(JSC::ExecState*, JSC::SourceCode const&, JSC::JSValue, JSC::JSValue*) () from /home/cgarcia/gnome/lib/libjavascriptcoregtk-4.0.so.18
#11 0x00007f58e298b75d in WebCore::ScriptController::evaluateInWorld(WebCore::ScriptSourceCode const&, WebCore::DOMWrapperWorld&) () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#12 0x00007f58e298ba1c in WebCore::ScriptController::evaluate(WebCore::ScriptSourceCode const&) () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#13 0x00007f58e2b8a80c in WebCore::ScriptElement::executeScript(WebCore::ScriptSourceCode const&) () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#14 0x00007f58e2d927bb in WebCore::HTMLScriptRunner::executePendingScriptAndDispatchEvent(WebCore::PendingScript&) () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#15 0x00007f58e2d92b72 in WebCore::HTMLScriptRunner::executeParsingBlockingScript() () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#16 0x00007f58e2d92eaf in WebCore::HTMLScriptRunner::executeParsingBlockingScripts() () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#17 0x00007f58e2d79503 in WebCore::HTMLDocumentParser::runScriptsForPausedTreeBuilder() () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#18 0x00007f58e2d79610 in WebCore::HTMLDocumentParser::canTakeNextToken(WebCore::HTMLDocumentParser::SynchronousMode, WebCore::PumpSession&) ()
   from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#19 0x00007f58e2d7bf42 in WebCore::HTMLDocumentParser::pumpTokenizer(WebCore::HTMLDocumentParser::SynchronousMode) () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#20 0x00007f58e2d7db0b in WebCore::HTMLDocumentParser::resumeParsingAfterScriptExecution() () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#21 0x00007f58e2d7dbe8 in WebCore::HTMLDocumentParser::notifyFinished(WebCore::CachedResource*) () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#22 0x00007f58e2ee2487 in WebCore::CachedResource::checkNotify() [clone .part.162] () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#23 0x00007f58e2ea66ac in WebCore::SubresourceLoader::didFinishLoading(double) () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#24 0x00007f58e35f8f39 in WebCore::readCallback(_GObject*, _GAsyncResult*, void*) () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#25 0x00007f58de3b3446 in async_ready_callback_wrapper (source_object=0x7f58440038d0, res=0x15c5930, user_data=0x7f583a5272c0) at ginputstream.c:523
#26 0x00007f58de3d8864 in g_task_return_now (task=0x15c5930) at gtask.c:1077
#27 0x00007f58de3d8889 in complete_in_idle_cb (task=0x15c5930) at gtask.c:1086
#28 0x00007f58dde13b5d in g_main_dispatch (context=0x143ed40) at gmain.c:3122
#29 g_main_context_dispatch (context=context@entry=0x143ed40) at gmain.c:3721
#30 0x00007f58dde13ef8 in g_main_context_iterate (context=0x143ed40, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3792
#31 0x00007f58dde14212 in g_main_loop_run (loop=0x1a9eac0) at gmain.c:3986
#32 0x00007f58e27ec571 in WebProcessMainUnix () from /home/cgarcia/gnome/lib/libwebkit2gtk-4.0.so.37
#33 0x00007f58e0c84b45 in __libc_start_main (main=0x400740 <main>, argc=2, argv=0x7fff765a50f8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, 
    stack_end=0x7fff765a50e8) at libc-start.c:287
#34 0x0000000000400794 in _start ()
Comment 2 Štefan Gurský 2014-11-13 09:08:29 PST
If I do "view source" on that page (and it opens in gedit, since I disabled internal-view-source in epiphany browser), every second byte of the file is 0 (shows as \00 in gedit). If I wget the page, then those bytes are not present.

Similar things happen also with pages https://www.elines.cz/cz/ and http://slovnik.cz/
Comment 3 Carlos Garcia Campos 2014-11-16 23:32:23 PST
This was fixed in r175724, I've just merged it in the stable branch at r176176. Thanks for reporting!