Bug 33718 – [Gtk] crash when loading youtube html5 demo

• Status: RESOLVED
• Resolution: FIXED
• Component: WebKitGTK

[Philippe Normand]

gst_mini_object_unref (mini_object=0xffffffffffffffff) at gstminiobject.c:359
359	  g_return_if_fail (mini_object->refcount > 0);
(gdb) t a a bt

Thread 9 (Thread 0x7fffe1c02910 (LWP 19472)):
#0  IA__g_str_hash (v=0x7ffff293e635) at gstring.c:102
#1  0x00007ffff407428d in g_hash_table_lookup_node (hash_table=0x6050a0, key=0x7ffff293e635)
    at ghash.c:195
#2  IA__g_hash_table_lookup (hash_table=0x6050a0, key=0x7ffff293e635) at ghash.c:784
#3  0x00007ffff406d012 in IA__g_quark_try_string (string=0x7ffff293e635 "restarted") at gdataset.c:611
#4  0x00007ffff475e260 in signal_parse_name (instance=0xfdbc50, 
    detailed_signal=0x7ffff293e635 "restarted", c_handler=0x7ffff2931070 <request_restarted>, 
    data=<value optimized out>, destroy_data=<value optimized out>, 
    connect_flags=<value optimized out>) at gsignal.c:983
#5  IA__g_signal_connect_data (instance=0xfdbc50, detailed_signal=0x7ffff293e635 "restarted", 
    c_handler=0x7ffff2931070 <request_restarted>, data=<value optimized out>, 
    destroy_data=<value optimized out>, connect_flags=<value optimized out>) at gsignal.c:2245
#6  0x00007ffff2930d04 in queue_message (session=0xe3a800, req=0xfdbc50, 
    callback=<value optimized out>, user_data=0x1030180) at soup-session-async.c:427
#7  0x00007fffe2f8dc93 in gst_soup_http_src_queue_message (psrc=<value optimized out>, 
    outbuf=0x7fffe1c01ed8) at gstsouphttpsrc.c:577
#8  gst_soup_http_src_create (psrc=<value optimized out>, outbuf=0x7fffe1c01ed8)
    at gstsouphttpsrc.c:1195
#9  0x00007ffff306eba2 in gst_base_src_get_range (src=0x1030180, offset=<value optimized out>, 
    length=<value optimized out>, buf=0x7fffe1c01ed8) at gstbasesrc.c:2042
#10 0x00007ffff3070953 in gst_base_src_loop (pad=0xe52240) at gstbasesrc.c:2295
#11 0x00007ffff2dfb537 in gst_task_func (task=0x1042070) at gsttask.c:238
#12 0x00007ffff40ae122 in g_thread_pool_thread_proxy (data=<value optimized out>) at gthreadpool.c:265
#13 0x00007ffff40ac204 in g_thread_create_proxy (data=0x103db30) at gthread.c:635
#14 0x00007ffff3e31a04 in start_thread (arg=<value optimized out>) at pthread_create.c:300
#15 0x00007ffff3b9b80d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#16 0x0000000000000000 in ?? ()

Thread 8 (Thread 0x7fffe3fff910 (LWP 19471)):
#0  pthread_cond_timedwait@@GLIBC_2.3.2 ()
    at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:220
#1  0x00007ffff45365d2 in g_cond_timed_wait_posix_impl (cond=0xe2abc4, entered_mutex=0x80, 
    abs_time=<value optimized out>) at gthread-posix.c:242
#2  0x00007ffff405e2c1 in g_async_queue_pop_intern_unlocked (queue=0x6c5a60, try=0, 
    end_time=0x7fffe3ffef90) at gasyncqueue.c:365
#3  0x00007ffff40adfa0 in g_thread_pool_wait_for_new_task (data=<value optimized out>)
    at gthreadpool.c:220
#4  g_thread_pool_thread_proxy (data=<value optimized out>) at gthreadpool.c:254
#5  0x00007ffff40ac204 in g_thread_create_proxy (data=0xfd7670) at gthread.c:635
#6  0x00007ffff3e31a04 in start_thread (arg=<value optimized out>) at pthread_create.c:300
#7  0x00007ffff3b9b80d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#8  0x0000000000000000 in ?? ()

---Type <return> to continue, or q <return> to quit---
Thread 7 (Thread 0x7fffe89dc910 (LWP 19470)):
#0  pthread_cond_timedwait@@GLIBC_2.3.2 ()
    at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:220
#1  0x00007ffff45365d2 in g_cond_timed_wait_posix_impl (cond=0xe2abc4, entered_mutex=0x80, 
    abs_time=<value optimized out>) at gthread-posix.c:242
#2  0x00007ffff405e2c1 in g_async_queue_pop_intern_unlocked (queue=0x6c5a60, try=0, 
    end_time=0x7fffe89dbf90) at gasyncqueue.c:365
#3  0x00007ffff40adfa0 in g_thread_pool_wait_for_new_task (data=<value optimized out>)
    at gthreadpool.c:220
#4  g_thread_pool_thread_proxy (data=<value optimized out>) at gthreadpool.c:254
#5  0x00007ffff40ac204 in g_thread_create_proxy (data=0xe490f0) at gthread.c:635
#6  0x00007ffff3e31a04 in start_thread (arg=<value optimized out>) at pthread_create.c:300
#7  0x00007ffff3b9b80d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#8  0x0000000000000000 in ?? ()
Current language:  auto
The current source language is "auto; currently asm".

Thread 6 (Thread 0x7fffeac5a910 (LWP 19469)):
#0  pthread_cond_timedwait@@GLIBC_2.3.2 ()
    at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:220
#1  0x00007ffff45365d2 in g_cond_timed_wait_posix_impl (cond=0xe2abc4, entered_mutex=0x80, 
    abs_time=<value optimized out>) at gthread-posix.c:242
#2  0x00007ffff405e2c1 in g_async_queue_pop_intern_unlocked (queue=0x6c5a60, try=0, 
    end_time=0x7fffeac59f90) at gasyncqueue.c:365
#3  0x00007ffff40adfa0 in g_thread_pool_wait_for_new_task (data=<value optimized out>)
    at gthreadpool.c:220
#4  g_thread_pool_thread_proxy (data=<value optimized out>) at gthreadpool.c:254
#5  0x00007ffff40ac204 in g_thread_create_proxy (data=0xfd3f30) at gthread.c:635
#6  0x00007ffff3e31a04 in start_thread (arg=<value optimized out>) at pthread_create.c:300
#7  0x00007ffff3b9b80d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#8  0x0000000000000000 in ?? ()

Thread 3 (Thread 0x7fffeb45b910 (LWP 19466)):
#0  pthread_cond_wait@@GLIBC_2.3.2 ()
    at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:261
#1  0x00007ffff7180078 in WebCore::IconDatabase::syncThreadMainLoop() ()
   from /home/phil/gst/jhbuild/build/WebKit/.libs/libwebkit-1.0.so.2
#2  0x00007ffff7181761 in WebCore::IconDatabase::iconDatabaseSyncThread() ()
   from /home/phil/gst/jhbuild/build/WebKit/.libs/libwebkit-1.0.so.2
#3  0x00007ffff3e31a04 in start_thread (arg=<value optimized out>) at pthread_create.c:300
#4  0x00007ffff3b9b80d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#5  0x0000000000000000 in ?? ()

Thread 2 (Thread 0x7fffebd74910 (LWP 19465)):
#0  pthread_cond_wait@@GLIBC_2.3.2 ()
    at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:261
---Type <return> to continue, or q <return> to quit---
#1  0x00007ffff752db46 in WTF::TCMalloc_PageHeap::scavengerThread() ()
   from /home/phil/gst/jhbuild/build/WebKit/.libs/libwebkit-1.0.so.2
#2  0x00007ffff752db69 in WTF::TCMalloc_PageHeap::runScavengerThread(void*) ()
   from /home/phil/gst/jhbuild/build/WebKit/.libs/libwebkit-1.0.so.2
#3  0x00007ffff3e31a04 in start_thread (arg=<value optimized out>) at pthread_create.c:300
#4  0x00007ffff3b9b80d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#5  0x0000000000000000 in ?? ()

Thread 1 (Thread 0x7ffff7fbb7f0 (LWP 19462)):
#0  gst_mini_object_unref (mini_object=0xffffffffffffffff) at gstminiobject.c:359
#1  0x00007ffff2dcc65c in gst_value_mini_object_collect (value=0xffffffffffffffff, 
    n_collect_values=<value optimized out>, collect_values=0x100dc40, collect_flags=0)
    at gstminiobject.c:450
#2  0x00007ffff475c229 in IA__g_signal_emit_valist (instance=<value optimized out>, 
    signal_id=<value optimized out>, detail=<value optimized out>, var_args=0x7fffffffd700)
    at gsignal.c:2951
#3  0x00007ffff475caa3 in IA__g_signal_emit (instance=0xffffffffffffffff, signal_id=4294967295, 
    detail=16833600) at gsignal.c:3033
#4  0x00007ffff2daafd2 in gst_bus_async_signal_func (bus=0x672630, message=0x100dc40, 
    data=<value optimized out>) at gstbus.c:1099
#5  0x00007ffff2dac644 in gst_bus_source_dispatch (source=0x6bb420, 
    callback=0x7ffff2daaf50 <gst_bus_async_signal_func>, user_data=<value optimized out>)
    at gstbus.c:762
#6  0x00007ffff4082fb0 in g_main_dispatch (context=0x6455b0) at gmain.c:1960
#7  IA__g_main_context_dispatch (context=0x6455b0) at gmain.c:2513
#8  0x00007ffff4086de8 in g_main_context_iterate (context=0x6455b0, block=<value optimized out>, 
    dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2591
#9  0x00007ffff408732d in IA__g_main_loop_run (loop=0xe24010) at gmain.c:2799
#10 0x00007ffff645bc57 in IA__gtk_main () at gtkmain.c:1219
#11 0x000000000040230d in main ()

[Philippe Normand]

It turns out reverting glib commit 0f25115f fixes the issue. A bug was opened for GStreamer too: https://bugzilla.gnome.org/show_bug.cgi?id=607283

[Philippe Normand]

The GStreamer bug has been fixed in git master. Closing this one.