RESOLVED INVALID31153
Crash when loading a webpage 
https://bugs.webkit.org/show_bug.cgi?id=31153
Summary Crash when loading a webpage
Priit Laes (IRC: plaes)
Reported 2009-11-04 21:38:07 PST
What were you doing when the application crashed? Loaded web page... Epiphany-2.27.3 Distribution: Gentoo Base System release 2.0.1 Gnome Release: 2.26.2 2009-05-23 (Gentoo) BugBuddy Version: 2.26.0 System: Linux 2.6.30 #155 SMP Wed Jun 10 15:05:04 EEST 2009 x86_64 X Vendor: The X.Org Foundation X Vendor Release: 10601901 Selinux: No Accessibility: Disabled GTK+ Theme: Clearlooks Compact Icon Theme: gnome GTK+ Modules: canberra-gtk-module, gnomebreakpad #0 0x00007f0fcdf7ca4f in __libc_waitpid (pid=32095, stat_loc=0x7fff1baf6f30, options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:41 #1 0x00007f0fccbf9121 in IA__g_spawn_sync ( working_directory=<value optimized out>, argv=<value optimized out>, envp=<value optimized out>, flags=<value optimized out>, child_setup=<value optimized out>, user_data=<value optimized out>, standard_output=0x0, standard_error=0x0, exit_status=0x0, error=0x7fff1baf70b8) at gspawn.c:382 #2 0x00007f0fccbf9478 in IA__g_spawn_command_line_sync ( command_line=<value optimized out>, standard_output=0x0, standard_error=0x0, exit_status=0x0, error=0x7fff1baf70b8) at gspawn.c:694 #3 0x00007f0fbd16bba3 in bugbuddy_segv_handle (signum=<value optimized out>) at gnome-breakpad.cc:369 #4 <signal handler called> #5 0x00007f0fd0572de9 in WebCore::CSSStyleSelector::matchRulesForList ( this=0x7f0fb6e22b00, rules=<value optimized out>, firstRuleIndex=@0x7fff1baf765c, lastRuleIndex=@0x7fff1baf7658) at ./WebCore/platform/text/AtomicString.h:62 #6 0x00007f0fd0575138 in WebCore::CSSStyleSelector::matchRules ( this=0x7f0fb6e22b00, rules=0x7f0fb6ce52c0, firstRuleIndex=@0x7fff1baf765c, lastRuleIndex=@0x7fff1baf7658) at WebCore/css/CSSStyleSelector.cpp:665 #7 0x00007f0fd05881e6 in WebCore::CSSStyleSelector::styleForElement ( this=0x7f0fb6e22b00, e=0x7f0fbb178690, defaultParent=<value optimized out>, allowSharing=<value optimized out>, resolveForRootDefault=false) at WebCore/css/CSSStyleSelector.cpp:1198 #8 0x00007f0fd05caa21 in WebCore::Element::recalcStyle (this=0x7f0fbb178690, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:781 #9 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fbae87540, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 #10 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fb4f41af0, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 #11 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fbae874d0, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 #12 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fb6698380, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 #13 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fbae872a0, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 #14 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fbae87230, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 #15 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fbae871c0, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 #16 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fb6bf49a0, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 #17 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fb5570168, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 #18 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fb6bf45b0, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 #19 0x00007f0fd05b44bf in WebCore::Document::recalcStyle ( this=0x7f0fb7d1f000, change=WebCore::Node::NoChange) at WebCore/dom/Document.cpp:1192 #20 0x00007f0fd05ac46f in WebCore::Document::updateStyleIfNeeded ( this=0x7f0fb7d1f000) at WebCore/dom/Document.cpp:1228 #21 0x00007f0fd05b07dc in WebCore::Document::updateStyleForAllDocuments () at WebCore/dom/Document.cpp:1245 #22 0x00007f0fd04fc02d in WebCore::JSEventListener::handleEvent ( this=0x7f0fb78a4a00, event=0x7f0fb633a2c0, isWindowEvent=false) at WebCore/bindings/js/JSEventListener.cpp:151 #23 0x00007f0fd08cf082 in WebCore::XMLHttpRequest::dispatchReadyStateChangeEvent (this=0x7f0fb500f000) at WebCore/xml/XMLHttpRequest.cpp:1143 #24 0x00007f0fd08cf0f7 in WebCore::XMLHttpRequest::callReadyStateChangeListener (this=0x7f0fb500f000) at WebCore/xml/XMLHttpRequest.cpp:284 #25 0x00007f0fd08d33d5 in WebCore::XMLHttpRequest::open (this=0x7f0fb500f000, method=@0x7fff1baf8250, url=@0x7fff1baf81c0, async=true, ec=<value optimized out>) at WebCore/xml/XMLHttpRequest.cpp:345 #26 0x00007f0fd0517165 in WebCore::JSXMLHttpRequest::open ( this=0x7f0fb928b780, exec=0x7f0fb94097e8, args=@0x7fff1baf82e0) at WebCore/bindings/js/JSXMLHttpRequestCustom.cpp:100 #27 0x00007f0fd0bd01e2 in WebCore::jsXMLHttpRequestPrototypeFunctionOpen ( exec=0x7f0fb94097e8, thisValue={m_ptr = 0x7f0fb928b780}, args=@0x7fff1baf82e0) at DerivedSources/JSXMLHttpRequest.cpp:345 #28 0x00007f0fbcb602f4 in ?? () #29 0x00007f0fb9409790 in ?? () #30 0x0000000000000003 in ?? () #31 0x0000000000000000 in ?? () Thread 1 (Thread 0x7f0fd1bce760 (LWP 21695)): #0 0x00007f0fcdf7ca4f in __libc_waitpid (pid=32095, stat_loc=0x7fff1baf6f30, options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:41 oldtype = 0 result = <value optimized out> #1 0x00007f0fccbf9121 in IA__g_spawn_sync ( working_directory=<value optimized out>, argv=<value optimized out>, envp=<value optimized out>, flags=<value optimized out>, child_setup=<value optimized out>, user_data=<value optimized out>, standard_output=0x0, standard_error=0x0, exit_status=0x0, error=0x7fff1baf70b8) at gspawn.c:382 outpipe = -1 errpipe = -1 pid = 32095 fds = {__fds_bits = {25571968, 8, 16, 16, 31125520, 0, 16, 0, 31125544, 30773952, 31125520, 140733657870520, 3, 139705836232086, 140733657870136, 140733657870248}} ret = <value optimized out> outstr = (GString *) 0x0 errstr = (GString *) 0x0 failed = 0 status = <value optimized out> __PRETTY_FUNCTION__ = "IA__g_spawn_sync" #2 0x00007f0fccbf9478 in IA__g_spawn_command_line_sync ( command_line=<value optimized out>, standard_output=0x0, standard_error=0x0, exit_status=0x0, error=0x7fff1baf70b8) at gspawn.c:694 retval = 0 argv = (gchar **) 0x1daf010 __PRETTY_FUNCTION__ = "IA__g_spawn_command_line_sync" #3 0x00007f0fbd16bba3 in bugbuddy_segv_handle (signum=<value optimized out>) at gnome-breakpad.cc:369 in_segv = 1 #4 <signal handler called> No locals. #5 0x00007f0fd0572de9 in WebCore::CSSStyleSelector::matchRulesForList ( this=0x7f0fb6e22b00, rules=<value optimized out>, firstRuleIndex=@0x7fff1baf765c, lastRuleIndex=@0x7fff1baf7658) at ./WebCore/platform/text/AtomicString.h:62 rule = (class WebCore::CSSStyleRule *) 0x7f0fb680ec80 d = (class WebCore::CSSRuleData *) 0x7f0fb6b28d40 #6 0x00007f0fd0575138 in WebCore::CSSStyleSelector::matchRules ( this=0x7f0fb6e22b00, rules=0x7f0fb6ce52c0, firstRuleIndex=@0x7fff1baf765c, lastRuleIndex=@0x7fff1baf7658) at WebCore/css/CSSStyleSelector.cpp:665 No locals. #7 0x00007f0fd05881e6 in WebCore::CSSStyleSelector::styleForElement ( this=0x7f0fb6e22b00, e=0x7f0fbb178690, defaultParent=<value optimized out>, allowSharing=<value optimized out>, resolveForRootDefault=false) at WebCore/css/CSSStyleSelector.cpp:1198 firstUARule = 0 lastUARule = 0 firstUserRule = -1 lastUserRule = -1 firstAuthorRule = 1 lastAuthorRule = 4 loadedSVGUserAgentSheet = false loadedMediaStyleSheet = false #8 0x00007f0fd05caa21 in WebCore::Element::recalcStyle (this=0x7f0fbb178690, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:781 ch = <value optimized out> currentStyle = (class WebCore::RenderStyle *) 0x7f0fbb128ea0 hasParentStyle = true hasPositionalRules = false hasDirectAdjacentRules = false forceCheckOfNextElementSibling = <value optimized out> #9 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fbae87540, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 childRulesChanged = true n = (class WebCore::Node *) 0x7f0fbb178690 currentStyle = <value optimized out> hasParentStyle = true hasPositionalRules = false hasDirectAdjacentRules = false forceCheckOfNextElementSibling = false #10 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fb4f41af0, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 childRulesChanged = false n = (class WebCore::Node *) 0x7f0fbae87540 currentStyle = <value optimized out> hasParentStyle = true hasPositionalRules = false hasDirectAdjacentRules = false forceCheckOfNextElementSibling = false #11 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fbae874d0, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 childRulesChanged = false n = (class WebCore::Node *) 0x7f0fb4f41af0 currentStyle = <value optimized out> hasParentStyle = true hasPositionalRules = false hasDirectAdjacentRules = false forceCheckOfNextElementSibling = false #12 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fb6698380, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 childRulesChanged = false n = (class WebCore::Node *) 0x7f0fbae874d0 currentStyle = <value optimized out> hasParentStyle = true hasPositionalRules = false hasDirectAdjacentRules = false forceCheckOfNextElementSibling = false #13 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fbae872a0, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 childRulesChanged = false n = (class WebCore::Node *) 0x7f0fb6698380 currentStyle = <value optimized out> hasParentStyle = true hasPositionalRules = false hasDirectAdjacentRules = false forceCheckOfNextElementSibling = false #14 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fbae87230, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 childRulesChanged = false n = (class WebCore::Node *) 0x7f0fbae872a0 currentStyle = <value optimized out> hasParentStyle = true hasPositionalRules = false hasDirectAdjacentRules = false forceCheckOfNextElementSibling = false #15 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fbae871c0, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 childRulesChanged = false n = (class WebCore::Node *) 0x7f0fbae87230 currentStyle = <value optimized out> hasParentStyle = true hasPositionalRules = false hasDirectAdjacentRules = false forceCheckOfNextElementSibling = false #16 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fb6bf49a0, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 childRulesChanged = false n = (class WebCore::Node *) 0x7f0fbae871c0 currentStyle = <value optimized out> hasParentStyle = true hasPositionalRules = false hasDirectAdjacentRules = false forceCheckOfNextElementSibling = false #17 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fb5570168, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 childRulesChanged = false n = (class WebCore::Node *) 0x7f0fb6bf49a0 currentStyle = <value optimized out> hasParentStyle = true hasPositionalRules = false hasDirectAdjacentRules = false forceCheckOfNextElementSibling = false #18 0x00007f0fd05cab4f in WebCore::Element::recalcStyle (this=0x7f0fb6bf45b0, change=WebCore::Node::NoChange) at WebCore/dom/Element.cpp:845 childRulesChanged = false n = (class WebCore::Node *) 0x7f0fb5570168 currentStyle = <value optimized out> hasParentStyle = true hasPositionalRules = false hasDirectAdjacentRules = false forceCheckOfNextElementSibling = false #19 0x00007f0fd05b44bf in WebCore::Document::recalcStyle ( this=0x7f0fb7d1f000, change=WebCore::Node::NoChange) at WebCore/dom/Document.cpp:1192 n = (class WebCore::Node *) 0x7f0fb6bf45b0 #20 0x00007f0fd05ac46f in WebCore::Document::updateStyleIfNeeded ( this=0x7f0fb7d1f000) at WebCore/dom/Document.cpp:1228 No locals. #21 0x00007f0fd05b07dc in WebCore::Document::updateStyleForAllDocuments () at WebCore/dom/Document.cpp:1245 doc = (class WebCore::Document *) 0x7f0fb7d1f000 #22 0x00007f0fd04fc02d in WebCore::JSEventListener::handleEvent ( this=0x7f0fb78a4a00, event=0x7f0fb633a2c0, isWindowEvent=false) at WebCore/bindings/js/JSEventListener.cpp:151 args = {<WTFNoncopyable::Noncopyable> = {<No data fields>}, static inlineCapacity = <optimized out>, m_buffer = 0x7fff1baf7fc0, m_size = 1, m_isUsingInlineBuffer = true, m_vector = {m_size = 1, m_buffer = {<WTF::VectorBufferBase<JSC::Register>> = {<WTFNoncopyable::Noncopyable> = {<No data fields>}, m_buffer = 0x7fff1baf7fc0, m_capacity = 8}, static m_inlineBufferSize = <optimized out>, m_inlineBuffer = { buffer = "\000¶(¹\017\177\000\000\036", '\0' <repeats 15 times>, "h\000?\000j\000o\000t\000.\000x\000t\000\000ñ\000µ\017\177\000\000`\200¯\033ÿ\177\000\000\000\000\000\000\000\000\000"}}}, m_markSet = 0x0} savedEvent = (class WebCore::Event *) 0x0 jsFunction = (class JSC::JSObject *) 0x7f0fb928b6c0 globalObject = (class WebCore::JSDOMGlobalObject *) 0x7f0fb76e8800 scriptExecutionContext = (class WebCore::ScriptExecutionContext *) 0x7f0fb7d1f058 exec = (class JSC::ExecState *) 0x7f0fb7e20d08 callData = {native = {function = 0x7f0fbb10c850}, js = { functionBody = 0x7f0fbb10c850, scopeChain = 0x7f0fb78a4fc8}} callType = JSC::CallTypeJS #23 0x00007f0fd08cf082 in WebCore::XMLHttpRequest::dispatchReadyStateChangeEvent (this=0x7f0fb500f000) at WebCore/xml/XMLHttpRequest.cpp:1143 ec = 0 #24 0x00007f0fd08cf0f7 in WebCore::XMLHttpRequest::callReadyStateChangeListener (this=0x7f0fb500f000) at WebCore/xml/XMLHttpRequest.cpp:284 No locals. #25 0x00007f0fd08d33d5 in WebCore::XMLHttpRequest::open (this=0x7f0fb500f000, method=@0x7fff1baf8250, url=@0x7fff1baf81c0, async=true, ec=<value optimized out>) at WebCore/xml/XMLHttpRequest.cpp:345 previousState = <value optimized out> methodUpper = {m_impl = {m_ptr = 0x7f0fb543d030}} #26 0x00007f0fd0517165 in WebCore::JSXMLHttpRequest::open ( this=0x7f0fb928b780, exec=0x7f0fb94097e8, args=@0x7fff1baf82e0) at WebCore/bindings/js/JSXMLHttpRequestCustom.cpp:100 method = {m_impl = {m_ptr = 0x7f0fb543d210}} async = 29 ec = 0 #27 0x00007f0fd0bd01e2 in WebCore::jsXMLHttpRequestPrototypeFunctionOpen ( exec=0x7f0fb94097e8, thisValue={m_ptr = 0x7f0fb928b780}, args=@0x7fff1baf82e0) at DerivedSources/JSXMLHttpRequest.cpp:345 No locals. #28 0x00007f0fbcb602f4 in ?? () No symbol table info available. #29 0x00007f0fb9409790 in ?? () No symbol table info available. #30 0x0000000000000003 in ?? () No symbol table info available. #31 0x0000000000000000 in ?? () No symbol table info available.
Attachments
Add attachment proposed patch, testcase, etc.
Jan Alonzo
Comment 1 2009-11-05 01:16:30 PST
Can you attach a reduction that can reproduce the crash? Also, what version of WebKitGtk?
Priit Laes (IRC: plaes)
Comment 2 2009-11-05 04:18:53 PST
(In reply to comment #1) > Can you attach a reduction that can reproduce the crash? Also, what version of > WebKitGtk? Unfortunately there were far too many tabs open :S And now when I am looking at the original bug report, I see it happened on 19th of June. So I'm marking this as obsolete...
Note You need to log in before you can comment on or make changes to this bug.