Bug 25992 – youtube.com crashes in qtlauncher

• Status: RESOLVED
• Resolution: FIXED
• Component: Plug-ins

[Robert Hogan]

#0  0xb3370000 in ?? ()                             
#1  0xb6e5ee2e in WebCore::jsCSSStyleSheetPrototypeFunctionInsertRule (exec=0xaf0c7ba0, thisValue=
      {m_ptr = 0x8ac3530}, args=@0xb2fa7284) at generated/debug/JSCSSStyleSheet.cpp:178           
#2  0xb63b178f in JSC::Interpreter::privateExecute (this=0x87942e8, flag=JSC::Interpreter::Normal, 
    registerFile=0x87942f0, callFrame=0xb2fa7284, exception=0xbff085cc)                            
    at ../../../JavaScriptCore/interpreter/Interpreter.cpp:3066                                    
#3  0xb63b5d13 in JSC::Interpreter::execute (this=0x87942e8, programNode=0x8bc9fd8, callFrame=0x86741fc, 
    scopeChain=0x8813628, thisObj=0xb3370000, exception=0xbff085cc)
    at ../../../JavaScriptCore/interpreter/Interpreter.cpp:641
#4  0xb63eecae in JSC::evaluate (exec=0x86741fc, scopeChain=@0x86741d8, source=@0xbff0870c, thisValue=
      {m_ptr = 0xb3370000}) at ../../../JavaScriptCore/runtime/Completion.cpp:67
#5  0xb64e02a1 in WebCore::ScriptController::evaluate (this=0x854d700, sourceCode=@0xbff0870c)
    at ../../../WebCore/bindings/js/ScriptController.cpp:101
#6  0xb6869271 in WebCore::FrameLoader::executeScript (this=0x854d47c, sourceCode=@0xbff0870c)
    at ../../../WebCore/loader/FrameLoader.cpp:807
#7  0xb6869364 in WebCore::FrameLoader::executeScript (this=0x854d47c, script=@0x90821c0,
    forceUserGesture=false) at ../../../WebCore/loader/FrameLoader.cpp:796
#8  0xb64e7623 in WebCore::ScheduledAction::execute (this=0x90821b0, document=0x87f6b90)
    at ../../../WebCore/bindings/js/ScheduledAction.cpp:128
#9  0xb64e76ea in WebCore::ScheduledAction::execute (this=0x90821b0, context=0x87f6bc0)
    at ../../../WebCore/bindings/js/ScheduledAction.cpp:76
#10 0xb68c9bd3 in WebCore::DOMTimer::fired (this=0x9082578) at ../../../WebCore/page/DOMTimer.cpp:125
#11 0xb69950a9 in WebCore::ThreadTimers::fireTimers (this=0x854b9a8, fireTime=1243187611.302655,
    firingTimers=@0xbff08874) at ../../../WebCore/platform/ThreadTimers.cpp:111
#12 0xb6995268 in WebCore::ThreadTimers::sharedTimerFiredInternal (this=0x854b9a8)
    at ../../../WebCore/platform/ThreadTimers.cpp:141
#13 0xb69952e7 in WebCore::ThreadTimers::sharedTimerFired ()
    at ../../../WebCore/platform/ThreadTimers.cpp:122
#14 0xb6b2f974 in WebCore::SharedTimerQt::timerEvent (this=0x854ba68, ev=0xbff08d08)
    at ../../../WebCore/platform/qt/SharedTimerQt.cpp:105
#15 0xb4700e4f in QObject::event (this=0x854ba68, e=0xbff08d08)
    at /var/tmp/qt-x11-src-4.5.0/src/corelib/kernel/qobject.cpp:1073
#16 0xb4b57a7f in QApplicationPrivate::notify_helper (this=0x84f8550, receiver=0x854ba68, e=0xbff08d08)
    at /var/tmp/qt-x11-src-4.5.0/src/gui/kernel/qapplication.cpp:4084
#17 0xb4b5b6b9 in QApplication::notify (this=0xbff09030, receiver=0x854ba68, e=0xbff08d08)
    at /var/tmp/qt-x11-src-4.5.0/src/gui/kernel/qapplication.cpp:3631
#18 0xb46ef81b in QCoreApplication::notifyInternal (this=0xbff09030, receiver=0x854ba68, event=0xbff08d08)
    at /var/tmp/qt-x11-src-4.5.0/src/corelib/kernel/qcoreapplication.cpp:602
#19 0xb471e300 in QTimerInfoList::activateTimers (this=0x85017c4)
    at /var/tmp/qt-x11-src-4.5.0/src/corelib/kernel/qcoreapplication.h:213
#20 0xb471bb00 in timerSourceDispatch (source=0x8501790)
    at /var/tmp/qt-x11-src-4.5.0/src/corelib/kernel/qeventdispatcher_glib.cpp:164
#21 0xb450bb88 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#22 0xb450f0eb in ?? () from /usr/lib/libglib-2.0.so.0
#23 0xb450f268 in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#24 0xb471c03e in QEventDispatcherGlib::processEvents (this=0x84fe370, flags=@0xbff08e78)
    at /var/tmp/qt-x11-src-4.5.0/src/corelib/kernel/qeventdispatcher_glib.cpp:323
#25 0xb4bf1bd5 in QGuiEventDispatcherGlib::processEvents (this=0x84fe370, flags=@0xbff08ea8)
    at /var/tmp/qt-x11-src-4.5.0/src/gui/kernel/qguieventdispatcher_glib.cpp:202
#26 0xb46ee9ed in QEventLoop::processEvents (this=0xbff08f20, flags=@0xbff08ee8)
    at /var/tmp/qt-x11-src-4.5.0/src/corelib/kernel/qeventloop.cpp:149
#27 0xb46eed5d in QEventLoop::exec (this=0xbff08f20, flags=@0xbff08f28)
---Type <return> to continue, or q <return> to quit---
    at /var/tmp/qt-x11-src-4.5.0/src/corelib/kernel/qeventloop.cpp:200
#28 0xb46f0cfc in QCoreApplication::exec ()
    at /var/tmp/qt-x11-src-4.5.0/src/corelib/kernel/qcoreapplication.cpp:880
#29 0xb4b57217 in QApplication::exec () at /var/tmp/qt-x11-src-4.5.0/src/gui/kernel/qapplication.cpp:3553
#30 0x08059645 in main (argc=-1208894456, argv=0x88005d8)
    at /home/robert/WebKit/WebKit/qt/QtLauncher/main.cpp:462

[Robert Hogan]

The bt doesn't show it but the failure occurs in JSCell.h at:

    ALWAYS_INLINE JSCell* JSValue::asCell() const
    {
        ASSERT(isCell());
        return m_ptr;
    }

when attempting to return m_ptr. As far as I can see m_ptr is fine and contains a value.

The caller of the above is:

// this method is here to be after the inline declaration of JSCell::isObject
inline bool JSValue::isObject(const ClassInfo* classInfo) const
{
    return isCell() && asCell()->isObject(classInfo);
}

As a sidenote, doesn't the ASSERT(isCell()) in JSCell.h make the check in isObject() redundant? Seems a shame to have to call it twice.

[Kenneth Rohde Christiansen]

How to reproduce this? It doesn't crash for me.

[Robert Hogan]

Can't reproduce it any more myself.