Bug 36707 – Crash in JavascriptCore regular expression matcher

• Status: RESOLVED
• Resolution: WORKSFORME
• Component: JavaScriptCore

[Priit Laes (IRC: plaes)]

Platform: amd64, webkit-gtk-1.1.90

Traceback (most recent call last):
  File "/usr/share/gdb/auto-load/usr/lib64/libgobject-2.0.so.0.2306.0-gdb.py", line 9, in <module>
    from gobject import register
  File "/usr/share/glib-2.0/gdb/gobject.py", line 3, in <module>
    import gdb.backtrace
ImportError: No module named backtrace
[Thread debugging using libthread_db enabled]
[New Thread 0x7fb7f5772710 (LWP 17631)]
[New Thread 0x7fb7f6073710 (LWP 17630)]
0x00007fb80a3c0bcd in __libc_waitpid (pid=17686, stat_loc=<value optimized out>, options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:41
	in ../sysdeps/unix/sysv/linux/waitpid.c
#0  0x00007fb80a3c0bcd in __libc_waitpid (pid=17686, stat_loc=<value optimized out>, options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:41
#1  0x00007fb80ab8c301 in IA__g_spawn_sync (working_directory=<value optimized out>, argv=<value optimized out>, envp=<value optimized out>, 
    flags=<value optimized out>, child_setup=<value optimized out>, user_data=<value optimized out>, standard_output=0x0, standard_error=0x0, 
    exit_status=0x0, error=0x7fff01d7a1b8) at gspawn.c:386
#2  0x00007fb80ab8c619 in IA__g_spawn_command_line_sync (command_line=<value optimized out>, standard_output=0x0, standard_error=0x0, exit_status=0x0, 
    error=0x7fff01d7a1b8) at gspawn.c:700
#3  0x00007fb7f9084d61 in run_bug_buddy (signum=<value optimized out>) at gnome-breakpad.cc:369
#4  check_if_gdb (signum=<value optimized out>) at gnome-breakpad.cc:440
#5  bugbuddy_segv_handle (signum=<value optimized out>) at gnome-breakpad.cc:223
#6  <signal handler called>
#7  match (subjectPtr=<value optimized out>, instructionPtr=<value optimized out>, offsetTop=<value optimized out>, md=...)
    at JavaScriptCore/pcre/pcre_exec.cpp:1544
#8  0x00007fb80ed438f4 in jsRegExpExecute (re=<value optimized out>, subject=<value optimized out>, length=<value optimized out>, 
    start_offset=<value optimized out>, offsets=<value optimized out>, offsetCount=<value optimized out>) at JavaScriptCore/pcre/pcre_exec.cpp:2072
#9  0x00007fb80ee018c9 in executeRegex (this=0x7fb7eed8ab40, s=..., startOffset=0, ovector=0x7fb7f4348c78) at ./JavaScriptCore/yarr/RegexJIT.h:87
#10 JSC::RegExp::match (this=0x7fb7eed8ab40, s=..., startOffset=0, ovector=0x7fb7f4348c78) at JavaScriptCore/runtime/RegExp.cpp:137
#11 0x00007fb80ee06dec in JSC::RegExpConstructor::performMatch (this=0x7fb7f47aae40, exec=<value optimized out>, args=<value optimized out>)
    at JavaScriptCore/runtime/RegExpConstructor.h:114
#12 JSC::RegExpObject::match (this=0x7fb7f47aae40, exec=<value optimized out>, args=<value optimized out>)
    at JavaScriptCore/runtime/RegExpObject.cpp:152
#13 0x00007fb80ee072e9 in JSC::RegExpObject::exec (this=0x7fb80f1a2e50, exec=0x1, args=...) at JavaScriptCore/runtime/RegExpObject.cpp:122
#14 0x00007fb80ee07c44 in regExpProtoFuncExec (exec=0x7fb7ef93c4f0, thisValue=..., args=...) at JavaScriptCore/runtime/RegExpPrototype.cpp:72
#15 0x00007fb7f60df1b4 in ?? ()
#16 0x00007fb7ef93c4a8 in ?? ()
#17 0x0000000000000001 in ?? ()
#18 0x0000000000000001 in ?? ()
#19 0x00007fb7f47aae40 in ?? ()
#20 0x00007fb7eed8eaf8 in ?? ()
#21 0xffff000000000003 in ?? ()
#22 0x00007fb7eec3ac91 in ?? ()
#23 0x00007fb800000002 in ?? ()
#24 0x00007fb7eed082c0 in ?? ()
#25 0x00007fb80ff2f478 in ?? ()
#26 0x00007fb7eee28000 in ?? ()
#27 0x00007fb7f409f518 in ?? ()
#28 0x00007fb7f5838ac0 in ?? ()
#29 0x00007fb7ef93c490 in ?? ()
#30 0x00007fff01d7b430 in ?? ()
#31 0x00007fb80f69af30 in JSC::Profiler::s_sharedProfiler () from /usr/lib64/libwebkit-1.0.so.2
#32 0x00007fb7f5804a00 in ?? ()
#33 0x00007fb7f5838aa8 in ?? ()
#34 0x00007fb7f4346600 in ?? ()
#35 0x00007fb7f48f6748 in ?? ()
#36 0x00007fb7ef93c000 in ?? ()
#37 0x00007fb7ef93c048 in ?? ()
#38 0x00007fb7eed0acb8 in ?? ()
#39 0x00007fb80ed2902e in JSC::JITCode::execute (this=0x7fb7eee5e190, program=0x7fff01d7b370, callFrame=0xffff000000000000, scopeChain=
    0xffff000000000002, thisObj=<value optimized out>, exception=<value optimized out>) at ./JavaScriptCore/jit/JITCode.h:77
#40 JSC::Interpreter::execute (this=0x7fb7eee5e190, program=0x7fff01d7b370, callFrame=0xffff000000000000, scopeChain=0xffff000000000002, 
    thisObj=<value optimized out>, exception=<value optimized out>) at JavaScriptCore/interpreter/Interpreter.cpp:621
#41 0x00007fb80edd37aa in JSC::evaluate (exec=0x7fb7f48f6748, scopeChain=..., source=<value optimized out>, thisValue=...)
    at JavaScriptCore/runtime/Completion.cpp:62
#42 0x00007fb80e6a7590 in WebCore::ScriptController::evaluateInWorld (this=0x7fb7f5822bb0, sourceCode=..., world=<value optimized out>)
    at WebCore/bindings/js/ScriptController.cpp:127
#43 0x00007fb80e6a77b2 in WebCore::ScriptController::evaluate (this=0x7fb7f5822bb0, sourceCode=...) at WebCore/bindings/js/ScriptController.cpp:153
#44 0x00007fb80e6bd50f in WebCore::ScriptController::executeScript (this=0x7fb7f5822bb0, sourceCode=...)
    at WebCore/bindings/ScriptControllerBase.cpp:60
#45 0x00007fb80e88f17c in WebCore::HTMLTokenizer::scriptExecution (this=0x7fb7eef54000, sourceCode=..., state=<value optimized out>)
    at WebCore/html/HTMLTokenizer.cpp:580
#46 0x00007fb80e894f40 in WebCore::HTMLTokenizer::scriptHandler (this=0x7fb7eef54000, state=<value optimized out>)
    at WebCore/html/HTMLTokenizer.cpp:522
#47 0x00007fb80e8958c0 in WebCore::HTMLTokenizer::parseNonHTMLText (this=0x7fb7eef54000, src=..., state=<value optimized out>)
    at WebCore/html/HTMLTokenizer.cpp:361
#48 0x00007fb80e897de5 in WebCore::HTMLTokenizer::parseTag (this=0x7fb7eef54000, src=..., state=<value optimized out>)
    at WebCore/html/HTMLTokenizer.cpp:1539
#49 0x00007fb80e8985ff in WebCore::HTMLTokenizer::write (this=0x7fb7eef54000, str=<value optimized out>, appendData=<value optimized out>)
    at WebCore/html/HTMLTokenizer.cpp:1772
#50 0x00007fb80e890721 in WebCore::HTMLTokenizer::executeExternalScriptsIfReady (this=0x7fb7eef54000) at WebCore/html/HTMLTokenizer.cpp:2103
#51 0x00007fb80e8d8a2c in WebCore::CachedScript::checkNotify (this=0x7fb7eef5f200) at WebCore/loader/CachedScript.cpp:106
#52 0x00007fb80e930414 in WebCore::Loader::Host::didFinishLoading (this=0x7fb7f47663c0, loader=<value optimized out>) at WebCore/loader/loader.cpp:398
#53 0x00007fb80e9208f5 in WebCore::SubresourceLoader::didFinishLoading (this=0x7fb7f4702900) at WebCore/loader/SubresourceLoader.cpp:184
#54 0x00007fb80ec714d6 in finishedCallback (session=<value optimized out>, msg=0x2305430, data=<value optimized out>)
    at WebCore/platform/network/soup/ResourceHandleSoup.cpp:326
#55 0x00007fb80c5a2ead in final_finished (req=0x2305430, user_data=<value optimized out>) at soup-session-async.c:384
#56 0x00007fb80b2184aa in IA__g_closure_invoke (closure=0x22ef440, return_value=0x0, n_param_values=<value optimized out>, param_values=0x22edda0, 
    invocation_hint=0x7fff01d7c410) at gclosure.c:767
#57 0x00007fb80b22d7c4 in signal_emit_unlocked_R (node=0x2248770, detail=<value optimized out>, instance=<value optimized out>, 
    emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3318
#58 0x00007fb80b22eac5 in IA__g_signal_emit_valist (instance=0x2305430, signal_id=<value optimized out>, detail=0, var_args=0x7fff01d7c600)
    at gsignal.c:2981
#59 0x00007fb80b22f303 in IA__g_signal_emit (instance=0x7fb80f1a2e50, signal_id=1, detail=248785367) at gsignal.c:3038
#60 0x00007fb80c598d6f in soup_message_io_finished (msg=0x2305430) at soup-message-io.c:177
#61 0x00007fb80b2184aa in IA__g_closure_invoke (closure=0x2300d70, return_value=0x0, n_param_values=<value optimized out>, param_values=0x2300920, 
    invocation_hint=0x7fff01d7c830) at gclosure.c:767
#62 0x00007fb80b22d3d1 in signal_emit_unlocked_R (node=0x164b730, detail=<value optimized out>, instance=<value optimized out>, 
    emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3248
#63 0x00007fb80b22eac5 in IA__g_signal_emit_valist (instance=0x2309a30, signal_id=<value optimized out>, detail=0, var_args=0x7fff01d7ca20)
    at gsignal.c:2981
#64 0x00007fb80b22f303 in IA__g_signal_emit (instance=0x7fb80f1a2e50, signal_id=1, detail=248785367) at gsignal.c:3038
#65 0x00007fb80c5a4fb1 in socket_read_watch (chan=<value optimized out>, cond=0, user_data=<value optimized out>) at soup-socket.c:1245
#66 0x00007fb80ab4803f in g_main_dispatch (context=0xde4110) at gmain.c:1960
#67 IA__g_main_context_dispatch (context=0xde4110) at gmain.c:2513
#68 0x00007fb80ab4be78 in g_main_context_iterate (context=0xde4110, block=<value optimized out>, dispatch=<value optimized out>, 
    self=<value optimized out>) at gmain.c:2591
#69 0x00007fb80ab4c38d in IA__g_main_loop_run (loop=0xe14080) at gmain.c:2799
#70 0x00007fb80dbb0d67 in IA__gtk_main () at gtkmain.c:1219
#71 0x0000000000435653 in main (argc=1, argv=0x7fff01d7dee8) at ephy-main.c:739

Thread 3 (Thread 0x7fb7f6073710 (LWP 17630)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
No locals.
#1  0x00007fb80ee176d4 in WTF::TCMalloc_PageHeap::scavengerThread (this=0x7fb80f69b080) at JavaScriptCore/wtf/FastMalloc.cpp:2378
No locals.
#2  0x00007fb80ee176f9 in WTF::TCMalloc_PageHeap::runScavengerThread (context=0x7fb80f6a9154) at JavaScriptCore/wtf/FastMalloc.cpp:1497
No locals.
#3  0x00007fb80a3b8894 in start_thread (arg=<value optimized out>) at pthread_create.c:297
        __res = <value optimized out>
        pd = 0x7fb7f6073710
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140428083410704, -8582251039352062575, 140428422426560, 0, 140428520259584, 3, 
    8613789771813191057, 8616982928393862545}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, 
              canceltype = 0}}}
        not_first_call = <value optimized out>
        robust = <value optimized out>
        freesize = <value optimized out>
        __PRETTY_FUNCTION__ = "start_thread"
#4  0x00007fb80a129f9d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
No locals.
#5  0x0000000000000000 in ?? ()
No symbol table info available.

Thread 2 (Thread 0x7fb7f5772710 (LWP 17631)):
#0  pthread_cond_wait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
No locals.
#1  0x00007fb80eb11c58 in WebCore::IconDatabase::syncThreadMainLoop (this=0x7fb7f578aa00) at WebCore/loader/icon/IconDatabase.cpp:1412
        didAnyWork = <value optimized out>
#2  0x00007fb80eb11d21 in WebCore::IconDatabase::iconDatabaseSyncThread (this=0x7fb7f578aa00) at WebCore/loader/icon/IconDatabase.cpp:1030
        journalFilename = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7fb7f5791f20}}
#3  0x00007fb80a3b8894 in start_thread (arg=<value optimized out>) at pthread_create.c:297
        __res = <value optimized out>
        pd = 0x7fb7f5772710
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140428073969424, -8582251039352062575, 140428422426560, 0, 140428520259584, 3, 
    8613788259447831953, 8616982928393862545}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, 
              canceltype = 0}}}
        not_first_call = <value optimized out>
        robust = <value optimized out>
        freesize = <value optimized out>
        __PRETTY_FUNCTION__ = "start_thread"
#4  0x00007fb80a129f9d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
No locals.
#5  0x0000000000000000 in ?? ()
No symbol table info available.

Thread 1 (Thread 0x7fb8100b8780 (LWP 17628)):
#0  0x00007fb80a3c0bcd in __libc_waitpid (pid=17686, stat_loc=<value optimized out>, options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:41
        _a3 = 0
        _a1 = 17686
        resultvar = <value optimized out>
        _a4 = 0
        _a2 = 140733224296480
        oldtype = 0
        result = <value optimized out>
#1  0x00007fb80ab8c301 in IA__g_spawn_sync (working_directory=<value optimized out>, argv=<value optimized out>, envp=<value optimized out>, 
    flags=<value optimized out>, child_setup=<value optimized out>, user_data=<value optimized out>, standard_output=0x0, standard_error=0x0, 
    exit_status=0x0, error=0x7fff01d7a1b8) at gspawn.c:386
        outpipe = -1
        errpipe = -1
        pid = 17686
        fds = {__fds_bits = {0, 16, 16, 0, 39092712, 140733224296888, 39039136, 39092688, 3, 0, 39092712, 140428430427869, 140733224296488, 
    140733224296480, 140733224296600, 0}}
        ret = <value optimized out>
        outstr = 0x0
        errstr = 0x0
        failed = 0
        status = <value optimized out>
        __PRETTY_FUNCTION__ = "IA__g_spawn_sync"
#2  0x00007fb80ab8c619 in IA__g_spawn_command_line_sync (command_line=<value optimized out>, standard_output=0x0, standard_error=0x0, exit_status=0x0, 
    error=0x7fff01d7a1b8) at gspawn.c:700
        retval = 0
        argv = 0x25481d0
        __PRETTY_FUNCTION__ = "IA__g_spawn_command_line_sync"
#3  0x00007fb7f9084d61 in run_bug_buddy (signum=<value optimized out>) at gnome-breakpad.cc:369
        res = <value optimized out>
        warning_file = 0x0
        exec_str = 0x2329a10 "bug-buddy --appname=\"epiphany\" --pid=17628"
        args_str = <value optimized out>
        error = 0x0
#4  check_if_gdb (signum=<value optimized out>) at gnome-breakpad.cc:440
        gdb = 0x231f420 "/usr/bin/gdb"
        pid = 17628
        mypath = 0x2548800 "\030\340:\n\270\177"
        has_debug_symbols = <value optimized out>
        appname = 0xdaf110 "epiphany"
#5  bugbuddy_segv_handle (signum=<value optimized out>) at gnome-breakpad.cc:223
        in_segv = 1
#6  <signal handler called>
No symbol table info available.
#7  match (subjectPtr=<value optimized out>, instructionPtr=<value optimized out>, offsetTop=<value optimized out>, md=...)
    at JavaScriptCore/pcre/pcre_exec.cpp:1544
        i = 1
        isMatch = false
        minimize = false
        min = 1
        remainingMatchCount = 999968
        othercase = <value optimized out>
        stack = {frames = {{<WTF::FastAllocBase> = {<No data fields>}, returnLocation = 0x7fb80ed40ce8, previousFrame = 0x7fb80ecf9af8, args = {
                subjectPtr = 0x1, instructionPtr = 0x7fb7eed2b332 ":", offsetTop = 2, bracketChain = 0x7fff01d7a700}, locals = {data = 
    0x7fb7eeefd8ce "", startOfRepeatingBracket = 0x7fb80ecf9fae "Hc\203\f\001", subjectPtrAtStartOfInstruction = 0x7fff01d7aee0, 
                instructionPtrAtStartOfOnce = 0x7fb7eed4d1c0 "X", repeatOthercase = 2, ctype = 0, fc = 249006192, fi = 32696, length = 0, max = 1, 
                number = 1, offset = 2, saveOffset1 = -1, saveOffset2 = -1, saveOffset3 = -1, bracketChainNode = {previousBracket = 0x0, 
                  bracketStart = 0x1}}}, {<WTF::FastAllocBase> = {<No data fields>}, returnLocation = 0x7fb80ed40b08, previousFrame = 0x7fff01d7a680, 
              args = {subjectPtr = 0xffffffffffffffff, instructionPtr = 0x7fb7eed2b338 "'\b%\006\020=\020>:", offsetTop = 2, bracketChain = 
    0x7fff01d7a790}, locals = {data = 0x7fb7eed2b18c "", startOfRepeatingBracket = 0x7fb7eed2b322 ";", subjectPtrAtStartOfInstruction = 0x1, 
                instructionPtrAtStartOfOnce = 0x7fb7eed2b00c "D", repeatOthercase = -287111176, ctype = 8, fc = 45, fi = 32767, length = 1, max = 1, 
                number = 9, offset = 18, saveOffset1 = -1, saveOffset2 = -1, saveOffset3 = -1, bracketChainNode = {previousBracket = 0x7fff01d7a700, 
                  bracketStart = 0x1}}}, {<WTF::FastAllocBase> = {<No data fields>}, returnLocation = 0x7fb80ed40f30, previousFrame = 0x7fff01d7a710, 
              args = {subjectPtr = 0xffffffffffffffff, instructionPtr = 0x7fb7eed2b33a "%\006\020=\020>:", offsetTop = 2, bracketChain = 
    0x7fff01d7a790}, locals = {data = 0x7fb7eed2b114 "", startOfRepeatingBracket = 0x7fb80ecf9af8 "A\203\374\a\177\nA\203\375\a\017\216\220", 
                subjectPtrAtStartOfInstruction = 0x7fb7eeed3278, instructionPtrAtStartOfOnce = 0x7fb7eed2b2ab "L", repeatOthercase = 1, ctype = 8, 
                fc = 30912224, fi = 32767, length = 796, max = 2147483647, number = 12, offset = 24, saveOffset1 = -1, saveOffset2 = -1, saveOffset3 = 
    -1, bracketChainNode = {previousBracket = 0x7fff01d7a790, bracketStart = 0x1}}}, {<WTF::FastAllocBase> = {<No data fields>}, returnLocation = 
    0x7fb80ed40b08, previousFrame = 0x7fff01d7a7a0, args = {subjectPtr = 0x1, instructionPtr = 0x7fb7eed2b31e "\020q\020r;", offsetTop = 2, 
                bracketChain = 0x7fff01d7a8b0}, locals = {data = 0x10 <Address 0x10 out of bounds>, startOfRepeatingBracket = 
    0x2c2000002b4 <Address 0x2c2000002b4 out of bounds>, subjectPtrAtStartOfInstruction = 0x7fb7eeed3278, instructionPtrAtStartOfOnce = 
    0x7fb7eed2b314 "O", repeatOthercase = 864, ctype = 6, fc = 900, fi = 923, length = 0, max = 2147483647, number = 12, offset = 24, saveOffset1 = 0, 
                saveOffset2 = 0, saveOffset3 = 249682169, bracketChainNode = {previousBracket = 0x7fff01d7a820, bracketStart = 0x1}}}, 
    {<WTF::FastAllocBase> = {<No data fields>}, returnLocation = 0x7fb80ed41110, previousFrame = 0x7fff01d7a830, args = {subjectPtr = 0x7fb7eeed3278, 
                instructionPtr = 0x7fb7eed2b33c "\020=\020>:", offsetTop = 2, bracketChain = 0x7fff01d7a790}, locals = {data = 
    0x7fff00000253 <Address 0x7fff00000253 out of bounds>, startOfRepeatingBracket = 0x7fb7f47a4e00 "\360\063d\017\270\177", 
                subjectPtrAtStartOfInstruction = 0x7fb7ef93c2d8, instructionPtrAtStartOfOnce = 
    0x7fff01d7aee0 "UH\211\345SVH\203\354\020\203\306\002\071\326\017@!\277\356\267\177", repeatOthercase = 131, ctype = 0, fc = 248486648, fi = 
    32696, length = 16, max = 0, number = 30912224, offset = 32767, saveOffset1 = 255, saveOffset2 = 0, saveOffset3 = 248488320, bracketChainNode = {
                  previousBracket = 0x7fff01d7aee0, bracketStart = 0x7fff01d7aac0}}}, {<WTF::FastAllocBase> = {<No data fields>}, returnLocation = 
    0x7fff01d7aad8, previousFrame = 0x0, args = {subjectPtr = 0x7fff01d7aa50, instructionPtr = 
    0x7fb80ed7eab4 "H\213|$@1\300\061\322H\205\377t9f\017\037D", offsetTop = 768, bracketChain = 0x7fb800000306}, locals = {data = 
    0x10 <Address 0x10 out of bounds>, startOfRepeatingBracket = 0x2 <Address 0x2 out of bounds>, subjectPtrAtStartOfInstruction = 0x7fff01d7a9b0, 
                instructionPtrAtStartOfOnce = 0x7fff01d7aaf0 "4\003", repeatOthercase = 30910920, ctype = 32767, fc = 30912504, fi = 32767, length = 
    0, max = 0, number = 30910920, offset = 32767, saveOffset1 = 1296, saveOffset2 = 0, saveOffset3 = 249679211, bracketChainNode = {previousBracket = 
    0x510, bracketStart = 0x7fb80ee1d8f9}}}, {<WTF::FastAllocBase> = {<No data fields>}, returnLocation = 0x300, previousFrame = 0x7fb7eed67, args = {
                subjectPtr = 0xd67, instructionPtr = 0x7fb7eee9a100 "", offsetTop = 30911120, bracketChain = 0x0}, locals = {data = 
    0x580 <Address 0x580 out of bounds>, startOfRepeatingBracket = 0x7fb7eee2e548 "hP\317\355\267\177", subjectPtrAtStartOfInstruction = 0x40, 
                instructionPtrAtStartOfOnce = 0x7fb80ee1c3a3 "H\205\300\017\204\v\377\377\377H\201", <incomplete sequence \373>, repeatOthercase = 0, 
                ctype = 1, fc = 0, fi = 32696, length = 4, max = 0, number = -287933440, offset = 32695, saveOffset1 = 30912224, saveOffset2 = 32767, 
                saveOffset3 = 30911728, bracketChainNode = {previousBracket = 0x0, bracketStart = 0x7fff01d7aaf0}}}, {<WTF::FastAllocBase> = 
    {<No data fields>}, returnLocation = 0x357, previousFrame = 0x7fb80ed7822f, args = {subjectPtr = 0x7fff01d7aee0, instructionPtr = 
    0x7fb7eed9a300 "", offsetTop = 30911728, bracketChain = 0x7fb80ed7f4ba}, locals = {data = 0xfffffffe <Address 0xfffffffe out of bounds>, 
                startOfRepeatingBracket = 0x7fb80ee1002a "\377H\213\a\377PxH\205\300\017\037@", subjectPtrAtStartOfInstruction = 0x100000000, 
                instructionPtrAtStartOfOnce = 0xffffffff00000334 <Address 0xffffffff00000334 out of bounds>, repeatOthercase = -290666696, ctype = 
    32695, fc = 2, fi = 3, length = 2, max = 32767, number = 0, offset = 0, saveOffset1 = 30911216, saveOffset2 = 32767, saveOffset3 = 16, 
                bracketChainNode = {previousBracket = 0x1ad00000334, bracketStart = 0x28b00000258}}}, {<WTF::FastAllocBase> = {<No data fields>}, 
              returnLocation = 0x7fff000002e8, previousFrame = 0x7fff01d7ad10, args = {subjectPtr = 0x7fff01d7ad20, instructionPtr = 
    0x7fb80ed6de3b "\270\001", offsetTop = 2, bracketChain = 0x7fff01d7ae00}, locals = {data = 0x7f0000000334 <Address 0x7f0000000334 out of bounds>, 
                startOfRepeatingBracket = 0x0, subjectPtrAtStartOfInstruction = 0x30, instructionPtrAtStartOfOnce = 
    0x7fff01d7acf0 "\030Ϭ\356\267\177", repeatOthercase = 30912224, ctype = 32767, fc = 30911776, fi = 32767, length = -287726848, max = 32695, 
                number = -290679584, offset = 32695, saveOffset1 = 30911880, saveOffset2 = 32767, saveOffset3 = 249019894, bracketChainNode = {
                  previousBracket = 0x100000000, bracketStart = 0x7fff01d7ad10}}}, {<WTF::FastAllocBase> = {<No data fields>}, returnLocation = 
    0x7fff01d7ad20, previousFrame = 0x7fff01d7ad80, args = {subjectPtr = 0x7fb7eee2c8c0, instructionPtr = 0x7fff01d7ad8c "\267\177", offsetTop = 
    30911888, bracketChain = 0x7fb80ee1b88b}, locals = {data = 0x7fff01d7ad20 "W\003", startOfRepeatingBracket = 0x7fb80ed71a85 "\270\001", 
                subjectPtrAtStartOfInstruction = 0x30, instructionPtrAtStartOfOnce = 0x7fb80000007a "", repeatOthercase = 30912122, ctype = 32767, 
                fc = 2625, fi = 32696, length = 30911792, max = 32767, number = 30911728, offset = 32767, saveOffset1 = -176010688, saveOffset2 = 
    32695, saveOffset3 = -275528104, bracketChainNode = {previousBracket = 0x7fb7eebf2140, bracketStart = 0x5b}}}, {<WTF::FastAllocBase> = 
    {<No data fields>}, returnLocation = 0x7fb7ef93c658, previousFrame = 0xffff000000000000, args = {subjectPtr = 0x7fb7eed5d8e2, instructionPtr = 
    0x7fb80ede9c80 "H\213D$0H\205\300\017\205\341\376\377\377\213} \205\377\017\204", <incomplete sequence \311>, offsetTop = 30911884, bracketChain = 
    0x7fff01d7aee0}, locals = {data = 0x83 <Address 0x83 out of bounds>, startOfRepeatingBracket = 
    0x7fff01d7aee0 "UH\211\345SVH\203\354\020\203\306\002\071\326\017@!\277\356\267\177", subjectPtrAtStartOfInstruction = 0x5b00000083, 
                instructionPtrAtStartOfOnce = 0x7fb7eed5d8e0 "/", repeatOthercase = 0, ctype = 0, fc = 30911624, fi = 32767, length = 32, max = 0, 
                number = -277018136, offset = 32695, saveOffset1 = -290611488, saveOffset2 = 32695, saveOffset3 = 30912224, bracketChainNode = {
                  previousBracket = 0x18, bracketStart = 0x7fff01d7ad20}}}, {<WTF::FastAllocBase> = {<No data fields>}, returnLocation = 
    0x7fff01d7acf0, previousFrame = 0x7fb80ed7de6e, args = {subjectPtr = 0x7fb7f4348c78, instructionPtr = 
    0x7fb7f4348c90 "\377\377\377\377\377\377\377\377\377\377\377\377Z", offsetTop = 0, bracketChain = 0x7fb7f4348c78}, locals = {data = 
    0x7fb7f4348c90 "\377\377\377\377\377\377\377\377\377\377\377\377Z", startOfRepeatingBracket = 
    0x7fb80ee01a03 "\351\323\376\377\377\220\220\220\220\220\220\220\220H\211\\$\330H\211l$\340L\211d$\350L\211l$\360L\211t$\370H\211\373H\203\354(H\211\365L\213\067I9\366s.H\213G\020H9\306v%H\211\302H\301\352\002L\215l\020\001\272\020", subjectPtrAtStartOfInstruction = 0x7fb7eeaccf18, 
                instructionPtrAtStartOfOnce = 0x100000003 <Address 0x100000003 out of bounds>, repeatOthercase = 0, ctype = 0, fc = 30911768, fi = 
    32767, length = 32, max = 0, number = 16, offset = 0, saveOffset1 = 855, saveOffset2 = 32696, saveOffset3 = 248953513, bracketChainNode = {
                  previousBracket = 0x0, bracketStart = 0x7fb7eed820f0}}}, {<WTF::FastAllocBase> = {<No data fields>}, returnLocation = 
    0x7fff01d7ae00, previousFrame = 0x7fff01d7b020, args = {subjectPtr = 0x201d7b030, instructionPtr = 0x7fff01d7ada8 "\250\003\331\356\267\177", 
                offsetTop = 831, bracketChain = 0x1eed820f0}, locals = {data = 0x0, startOfRepeatingBracket = 0x7fff01d7ad88 "\025", 
                subjectPtrAtStartOfInstruction = 0x10, instructionPtrAtStartOfOnce = 0x7fb700000015 <Address 0x7fb700000015 out of bounds>, 
                repeatOthercase = 0, ctype = 0, fc = 0, fi = 0, length = 0, max = 0, number = -287767640, offset = 32695, saveOffset1 = -287767640, 
                saveOffset2 = 32695, saveOffset3 = 30912576, bracketChainNode = {previousBracket = 0x7fb7ef93c648, bracketStart = 
    0xffff000000000000}}}, {<WTF::FastAllocBase> = {<No data fields>}, returnLocation = 0x7fb7f4348c90, previousFrame = 0x7fb80ee10f2c, args = {
                subjectPtr = 0x6, instructionPtr = 0x7fb80ff2f478 "`\243\025", offsetTop = 16, bracketChain = 0x7fb7ef93c648}, locals = {data = 
    0xffffffff <Address 0xffffffff out of bounds>, startOfRepeatingBracket = 0x7fb7f47a6c40 "p\020`\017\270\177", subjectPtrAtStartOfInstruction = 
    0x7fb7eebf2140, instructionPtrAtStartOfOnce = 0x7fff01d7b070 "\220\214\064\364\001", repeatOthercase = 30912224, ctype = 0, fc = 30912992, fi = 
    32767, length = -287716080, max = 32695, number = -287716072, offset = 32695, saveOffset1 = -275528176, saveOffset2 = 32695, saveOffset3 = 
    30913024, bracketChainNode = {previousBracket = 0x7fb7eed8f518, bracketStart = 0xb5671063eeacc738}}}, {<WTF::FastAllocBase> = {<No data fields>}, 
              returnLocation = 0x1007fff9311d01f, previousFrame = 0x7fff01d7b140, args = {subjectPtr = 0x7fff01d7b150, instructionPtr = 
    0x7fff01d7b1f0 "\300Ǿ\356\267\177", offsetTop = 30912976, bracketChain = 0x7fff01d7b250}, locals = {data = 0x7fff01d7afa0 "", 
                startOfRepeatingBracket = 0x7fff01d7af18 "\200\261\327\001\377\177", subjectPtrAtStartOfInstruction = 0x7fff01d7afb8, 
                instructionPtrAtStartOfOnce = 0x7fff01d7af00 "", repeatOthercase = 1, ctype = 0, fc = 249008344, fi = 32696, length = 0, max = 0, 
                number = -176141824, offset = 32695, saveOffset1 = 4, saveOffset2 = 16777216, saveOffset3 = 30912224, bracketChainNode = {
                  previousBracket = 0x83485653e5894855, bracketStart = 0xfd63902c68310ec}}}, {<WTF::FastAllocBase> = {<No data fields>}, 
              returnLocation = 0x7fb7eebf2140, previousFrame = 0xc683084189fec083, args = {subjectPtr = 0x0, instructionPtr = 
    0x7fff01d7af18 "\200\261\327\001\377\177", offsetTop = 16, bracketChain = 0x7fff01d7b180}, locals = {data = 0x7fb7eebf2040 "P\376_\017\270\177", 
                startOfRepeatingBracket = 0x7fb80ede8b9f "L\213t$@H\307D$@", subjectPtrAtStartOfInstruction = 0x85840f00001680f8, 
                instructionPtrAtStartOfOnce = 0x1180ef800000000 <Address 0x1180ef800000000 out of bounds>, repeatOthercase = 3, ctype = 0, fc = 
    30912376, fi = 32767, length = -2130706432, max = 2107896, number = 1636044544, offset = -2130706432, saveOffset1 = 2109432, saveOffset2 = 
    1434717952, saveOffset3 = -2130706432, bracketChainNode = {previousBracket = 0x0, bracketStart = 0x1}}}}, framesEnd = 0x7fff01d7af80, 
          currentFrame = 0x7fff01d7a7a0, size = 3}
#8  0x00007fb80ed438f4 in jsRegExpExecute (re=<value optimized out>, subject=<value optimized out>, length=<value optimized out>, 
    start_offset=<value optimized out>, offsets=<value optimized out>, offsetCount=<value optimized out>) at JavaScriptCore/pcre/pcre_exec.cpp:2072
        returnCode = <value optimized out>
        usingTemporaryOffsets = false
        reqByteIsCaseless = false
        reqBytePtr = 0xffffffffffffffff
        matchBlock = {offsetVector = 0x7fb7eee2d210, offsetEnd = 42, offsetMax = 28, offsetOverflow = false, startSubject = 0x1, endSubject = 0x1, 
          endMatchPtr = 0x7fb7f4348c90, endOffsetTop = -197882736, multiline = true, ignoreCase = false}
        firstByteIsCaseless = false
        reqByte2 = <value optimized out>
        ocount = <value optimized out>
        resetCount = <value optimized out>
        firstByte = <value optimized out>
        reqByte = -1
        startMatch = 0x1
#9  0x00007fb80ee018c9 in executeRegex (this=0x7fb7eed8ab40, s=..., startOffset=0, ovector=0x7fb7f4348c78) at ./JavaScriptCore/yarr/RegexJIT.h:87
        fallback = 0xffffffffffffffff
#10 JSC::RegExp::match (this=0x7fb7eed8ab40, s=..., startOffset=0, ovector=0x7fb7f4348c78) at JavaScriptCore/runtime/RegExp.cpp:137
        offsetVectorSize = <value optimized out>
        offsetVector = 0x7fb7eee2d210
        nonReturnedOvector = {<WTF::FastAllocBase> = {<No data fields>}, m_size = 0, m_buffer = {<WTF::VectorBufferBase<int>> = 
    {<WTFNoncopyable::Noncopyable> = {<WTF::FastAllocBase> = {<No data fields>}, <No data fields>}, m_buffer = 0x7fff01d7b0e8, m_capacity = 32}, 
            static m_inlineBufferSize = <optimized out>, m_inlineBuffer = {buffer = 
    "cG\335\016\270\177\000\000\060b\200\365\267\177\000\000@ \277\356\267\177\000\000\003\000\000\000\000\000\000\000Ó\341\016\270\177\000\000\000\237\255\356\267\177\000\000x\364\362\017\270\177\000\000\000J\200\365\267\177\000\000XÄ\357\267\177\000\000\000 \277\356\267\177\000\000j:\340\016\000\000\000\000\003\000\000\000\000\000\000\000Ó\341\016\270\177\000\000\000\000\000\000\000\000\000\000x\364\362\017\270\177\000\000\006\000\000\000\000\000\000"}}}
        result = <value optimized out>
#11 0x00007fb80ee06dec in JSC::RegExpConstructor::performMatch (this=0x7fb7f47aae40, exec=<value optimized out>, args=<value optimized out>)
    at JavaScriptCore/runtime/RegExpConstructor.h:114
No locals.
#12 JSC::RegExpObject::match (this=0x7fb7f47aae40, exec=<value optimized out>, args=<value optimized out>)
    at JavaScriptCore/runtime/RegExpObject.cpp:152
        position = <value optimized out>
        regExpConstructor = 0x7fb7f47a6c40
        input = {static NotFound = <optimized out>, m_rep = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7fb7f57743e0}, static s_nullRep = 
    0x7fb7f57743c0, static s_nullUString = 0x7fb7f57750f8}
        position = <value optimized out>
#13 0x00007fb80ee072e9 in JSC::RegExpObject::exec (this=0x7fb80f1a2e50, exec=0x1, args=...) at JavaScriptCore/runtime/RegExpObject.cpp:122
No locals.
#14 0x00007fb80ee07c44 in regExpProtoFuncExec (exec=0x7fb7ef93c4f0, thisValue=..., args=...) at JavaScriptCore/runtime/RegExpPrototype.cpp:72
No locals.
#15 0x00007fb7f60df1b4 in ?? ()
No symbol table info available.
#16 0x00007fb7ef93c4a8 in ?? ()
No symbol table info available.
#17 0x0000000000000001 in ?? ()
No symbol table info available.
#18 0x0000000000000001 in ?? ()
No symbol table info available.
#19 0x00007fb7f47aae40 in ?? ()
No symbol table info available.
#20 0x00007fb7eed8eaf8 in ?? ()
No symbol table info available.
#21 0xffff000000000003 in ?? ()
No symbol table info available.
#22 0x00007fb7eec3ac91 in ?? ()
No symbol table info available.
#23 0x00007fb800000002 in ?? ()
No symbol table info available.
#24 0x00007fb7eed082c0 in ?? ()
No symbol table info available.
#25 0x00007fb80ff2f478 in ?? ()
No symbol table info available.
#26 0x00007fb7eee28000 in ?? ()
No symbol table info available.
#27 0x00007fb7f409f518 in ?? ()
No symbol table info available.
#28 0x00007fb7f5838ac0 in ?? ()
No symbol table info available.
#29 0x00007fb7ef93c490 in ?? ()
No symbol table info available.
#30 0x00007fff01d7b430 in ?? ()
No symbol table info available.
#31 0x00007fb80f69af30 in JSC::Profiler::s_sharedProfiler () from /usr/lib64/libwebkit-1.0.so.2
No symbol table info available.
#32 0x00007fb7f5804a00 in ?? ()
No symbol table info available.
#33 0x00007fb7f5838aa8 in ?? ()
No symbol table info available.
#34 0x00007fb7f4346600 in ?? ()
No symbol table info available.
#35 0x00007fb7f48f6748 in ?? ()
No symbol table info available.
#36 0x00007fb7ef93c000 in ?? ()
No symbol table info available.
#37 0x00007fb7ef93c048 in ?? ()
No symbol table info available.
#38 0x00007fb7eed0acb8 in ?? ()
No symbol table info available.
#39 0x00007fb80ed2902e in JSC::JITCode::execute (this=0x7fb7eee5e190, program=0x7fff01d7b370, callFrame=0xffff000000000000, scopeChain=
    0xffff000000000002, thisObj=<value optimized out>, exception=<value optimized out>) at ./JavaScriptCore/jit/JITCode.h:77
No locals.
#40 JSC::Interpreter::execute (this=0x7fb7eee5e190, program=0x7fff01d7b370, callFrame=0xffff000000000000, scopeChain=0xffff000000000002, 
    thisObj=<value optimized out>, exception=<value optimized out>) at JavaScriptCore/interpreter/Interpreter.cpp:621
        oldEnd = 0x7fb7ef93c4f0
        lastGlobalObject = 0x7fb7f47a4e00
        globalObject = 0x7fb7f47a4e00
        newEnd = <value optimized out>
        newCallFrame = 0x504ef
#41 0x00007fb80edd37aa in JSC::evaluate (exec=0x7fb7f48f6748, scopeChain=..., source=<value optimized out>, thisValue=...)
    at JavaScriptCore/runtime/Completion.cpp:62
        thisObj = 0x1
        exception = {m_ptr = 0x0}
        lock = {<WTFNoncopyable::Noncopyable> = {<WTF::FastAllocBase> = {<No data fields>}, <No data fields>}, m_lockBehavior = 
    JSC::SilenceAssertionsOnly}
        error = <value optimized out>
        result = <value optimized out>
#42 0x00007fb80e6a7590 in WebCore::ScriptController::evaluateInWorld (this=0x7fb7f5822bb0, sourceCode=..., world=<value optimized out>)
    at WebCore/bindings/js/ScriptController.cpp:127
        sourceURL = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7fb7f48f10c0}}
        shell = 0x7fb7ef8fac40
        exec = 0x7fb7f48f6748
        savedSourceURL = 0x0
        comp = {m_type = 115, m_value = {m_ptr = 0x7fb80498cb05}}
#43 0x00007fb80e6a77b2 in WebCore::ScriptController::evaluate (this=0x7fb7f5822bb0, sourceCode=...) at WebCore/bindings/js/ScriptController.cpp:153
No locals.
#44 0x00007fb80e6bd50f in WebCore::ScriptController::executeScript (this=0x7fb7f5822bb0, sourceCode=...)
    at WebCore/bindings/ScriptControllerBase.cpp:60
        wasInExecuteScript = false
        result = {_vptr.ScriptValue = 0x0, m_value = {m_value = {m_ptr = 0x0}}}
#45 0x00007fb80e88f17c in WebCore::HTMLTokenizer::scriptExecution (this=0x7fb7eef54000, sourceCode=..., state=<value optimized out>)
    at WebCore/html/HTMLTokenizer.cpp:580
        savedPrependingSrc = 0x7fff01d7b940
        prependingSrc = {m_pushedChar1 = 0, m_pushedChar2 = 0, m_currentString = {m_length = 0, m_current = 0x0, m_string = {m_impl = 
    {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x0}}, m_doNotExcludeLineNumbers = true}, m_currentChar = 0x0, m_substrings = 
    {<WTF::FastAllocBase> = {<No data fields>}, m_start = 0, m_end = 0, m_buffer = {<WTF::VectorBufferBase<WebCore::SegmentedSubstring>> = 
    {<WTFNoncopyable::Noncopyable> = {<WTF::FastAllocBase> = {<No data fields>}, <No data fields>}, m_buffer = 0x0, m_capacity = 
    0}, <No data fields>}}, m_composite = false}
#46 0x00007fb80e894f40 in WebCore::HTMLTokenizer::scriptHandler (this=0x7fb7eef54000, state=<value optimized out>)
    at WebCore/html/HTMLTokenizer.cpp:522
        cs = <value optimized out>
        scriptString = {m_impl = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7fb7eecfce70}}
        doScriptExec = <value optimized out>
        startLine = <value optimized out>
        followingFrameset = false
        savedPrependingSrc = 0x0
        prependingSrc = {m_pushedChar1 = 0, m_pushedChar2 = 0, m_currentString = {m_length = 0, m_current = 0x0, m_string = {m_impl = 
    {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x0}}, m_doNotExcludeLineNumbers = true}, m_currentChar = 0x0, m_substrings = 
    {<WTF::FastAllocBase> = {<No data fields>}, m_start = 0, m_end = 0, m_buffer = {<WTF::VectorBufferBase<WebCore::SegmentedSubstring>> = 
    {<WTFNoncopyable::Noncopyable> = {<WTF::FastAllocBase> = {<No data fields>}, <No data fields>}, m_buffer = 0x0, m_capacity = 
    0}, <No data fields>}}, m_composite = false}
#47 0x00007fb80e8958c0 in WebCore::HTMLTokenizer::parseNonHTMLText (this=0x7fb7eef54000, src=..., state=<value optimized out>)
    at WebCore/html/HTMLTokenizer.cpp:361
        ch = <value optimized out>
        lastDecodedEntityPosition = -1
#48 0x00007fb80e897de5 in WebCore::HTMLTokenizer::parseTag (this=0x7fb7eef54000, src=..., state=<value optimized out>)
    at WebCore/html/HTMLTokenizer.cpp:1539
        savedSrc = {m_pushedChar1 = 0, m_pushedChar2 = 0, m_currentString = {m_length = 33, m_current = 0x7fb7eef6a9a4, m_string = {m_impl = 
    {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7fb7eef3da40}}, m_doNotExcludeLineNumbers = true}, m_currentChar = 0x7fb7eef6a9a4, 
          m_substrings = {<WTF::FastAllocBase> = {<No data fields>}, m_start = 1, m_end = 1, m_buffer = 
    {<WTF::VectorBufferBase<WebCore::SegmentedSubstring>> = {<WTFNoncopyable::Noncopyable> = {<WTF::FastAllocBase> = 
    {<No data fields>}, <No data fields>}, m_buffer = 0x7fb7eee29a00, m_capacity = 16}, <No data fields>}}, m_composite = false}
        isSelfClosingScript = false
        beginTag = true
        cBufferPos = 0
        lastIsSlash = <value optimized out>
#49 0x00007fb80e8985ff in WebCore::HTMLTokenizer::write (this=0x7fb7eef54000, str=<value optimized out>, appendData=<value optimized out>)
    at WebCore/html/HTMLTokenizer.cpp:1772
        cc = 65535
        startTime = 1269716307.177433
        frame = 0x7fb7f5822800
        state = <value optimized out>
        source = {m_pushedChar1 = 0, m_pushedChar2 = 0, m_currentString = {m_length = 2066, m_current = 0x7fb7eddb4c6a, m_string = {m_impl = 
    {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7fb7f5774840}}, m_doNotExcludeLineNumbers = true}, m_currentChar = 0x7fb7eddb4c6a, 
          m_substrings = {<WTF::FastAllocBase> = {<No data fields>}, m_start = 0, m_end = 9, m_buffer = 
    {<WTF::VectorBufferBase<WebCore::SegmentedSubstring>> = {<WTFNoncopyable::Noncopyable> = {<WTF::FastAllocBase> = 
    {<No data fields>}, <No data fields>}, m_buffer = 0x7fb7eecd5c00, m_capacity = 16}, <No data fields>}}, m_composite = true}
        wasInWrite = false
        processedCount = 946
#50 0x00007fb80e890721 in WebCore::HTMLTokenizer::executeExternalScriptsIfReady (this=0x7fb7eef54000) at WebCore/html/HTMLTokenizer.cpp:2103
        rest = {m_pushedChar1 = 0, m_pushedChar2 = 0, m_currentString = {m_length = 2066, m_current = 0x7fb7eddb4c6a, m_string = {m_impl = 
    {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7fb7f5774840}}, m_doNotExcludeLineNumbers = true}, m_currentChar = 0x7fb7eddb4c6a, 
          m_substrings = {<WTF::FastAllocBase> = {<No data fields>}, m_start = 0, m_end = 9, m_buffer = 
    {<WTF::VectorBufferBase<WebCore::SegmentedSubstring>> = {<WTFNoncopyable::Noncopyable> = {<WTF::FastAllocBase> = 
    {<No data fields>}, <No data fields>}, m_buffer = 0x7fb7f585b800, m_capacity = 16}, <No data fields>}}, m_composite = true}
        cs = <value optimized out>
        sourceCode = {m_provider = {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x7fb7f4346d80}, m_code = {m_provider = {<WTF::FastAllocBase> = 
    {<No data fields>}, m_ptr = 0x7fb7f4346d80}, m_startChar = 0, m_endChar = 108846, m_firstLine = 1}, m_url = {m_string = {m_impl = 
    {<WTF::FastAllocBase> = {<No data fields>}, m_ptr = 0x0}}, m_isValid = false, m_protocolInHTTPFamily = false, m_schemeEnd = 0, m_userStart = 0, 
            m_userEnd = 0, m_passwordEnd = 0, m_hostEnd = 0, m_portEnd = 0, m_pathAfterLastSlash = 0, m_pathEnd = 0, m_queryEnd = 0, m_fragmentEnd = 
    0}}
        errorOccurred = <value optimized out>
        finished = true
        startTime = 1269716307.093822
#51 0x00007fb80e8d8a2c in WebCore::CachedScript::checkNotify (this=0x7fb7eef5f200) at WebCore/loader/CachedScript.cpp:106
        c = 0xffffffffffffffff
        w = {m_clientSet = @0x7fb7eef5f208, m_clientVector = {<WTF::FastAllocBase> = {<No data fields>}, m_size = 1, m_buffer = 
    {<WTF::VectorBufferBase<WebCore::CachedResourceClient*>> = {<WTFNoncopyable::Noncopyable> = {<WTF::FastAllocBase> = 
    {<No data fields>}, <No data fields>}, m_buffer = 0x7fb7edcef068, m_capacity = 1}, <No data fields>}}, m_index = 1}
#52 0x00007fb80e930414 in WebCore::Loader::Host::didFinishLoading (this=0x7fb7f47663c0, loader=<value optimized out>) at WebCore/loader/loader.cpp:398
        request = 0x7fb7f4759d80
        docLoader = 0x7fb7f417e280
        resource = 0x7fb7eef5f200
#53 0x00007fb80e9208f5 in WebCore::SubresourceLoader::didFinishLoading (this=0x7fb7f4702900) at WebCore/loader/SubresourceLoader.cpp:184
No locals.
#54 0x00007fb80ec714d6 in finishedCallback (session=<value optimized out>, msg=0x2305430, data=<value optimized out>)
    at WebCore/platform/network/soup/ResourceHandleSoup.cpp:326
        d = 0x7fb7eef65800
        client = 0x7fb7f4702900
#55 0x00007fb80c5a2ead in final_finished (req=0x2305430, user_data=<value optimized out>) at soup-session-async.c:384
        item = 0x22df120
        session = 0x16a59b0
#56 0x00007fb80b2184aa in IA__g_closure_invoke (closure=0x22ef440, return_value=0x0, n_param_values=<value optimized out>, param_values=0x22edda0, 
    invocation_hint=0x7fff01d7c410) at gclosure.c:767
        marshal = 0x7fb80b225350 <IA__g_cclosure_marshal_VOID__VOID>
        marshal_data = 0x2a
        __PRETTY_FUNCTION__ = "IA__g_closure_invoke"
#57 0x00007fb80b22d7c4 in signal_emit_unlocked_R (node=0x2248770, detail=<value optimized out>, instance=<value optimized out>, 
    emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3318
        tmp = <value optimized out>
        handler = 0x2324a90
        accumulator = 0x0
        emission = {next = 0x7fff01d7c820, instance = 0x2305430, ihint = {signal_id = 414, detail = 0, run_type = G_SIGNAL_RUN_LAST}, state = 
    EMISSION_RUN, chain_type = 4}
        class_closure = 0x2248700
        handler_list = 0x2300090
        return_accu = <value optimized out>
        accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 
    0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        signal_id = 414
        max_sequential_handler_number = 3886
        return_value_altered = 1
#58 0x00007fb80b22eac5 in IA__g_signal_emit_valist (instance=0x2305430, signal_id=<value optimized out>, detail=0, var_args=0x7fff01d7c600)
    at gsignal.c:2981
        signal_return_type = 4
        param_values = <value optimized out>
        node = 0x2248770
        i = <value optimized out>
        n_params = <value optimized out>
        __PRETTY_FUNCTION__ = "IA__g_signal_emit_valist"
#59 0x00007fb80b22f303 in IA__g_signal_emit (instance=0x7fb80f1a2e50, signal_id=1, detail=248785367) at gsignal.c:3038
        var_args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fff01d7c6e0, reg_save_area = 0x7fff01d7c620}}
#60 0x00007fb80c598d6f in soup_message_io_finished (msg=0x2305430) at soup-message-io.c:177
No locals.
#61 0x00007fb80b2184aa in IA__g_closure_invoke (closure=0x2300d70, return_value=0x0, n_param_values=<value optimized out>, param_values=0x2300920, 
    invocation_hint=0x7fff01d7c830) at gclosure.c:767
        marshal = 0x7fb80b225350 <IA__g_cclosure_marshal_VOID__VOID>
        marshal_data = 0x2a
        __PRETTY_FUNCTION__ = "IA__g_closure_invoke"
#62 0x00007fb80b22d3d1 in signal_emit_unlocked_R (node=0x164b730, detail=<value optimized out>, instance=<value optimized out>, 
    emission_return=<value optimized out>, instance_and_params=<value optimized out>) at gsignal.c:3248
        tmp = <value optimized out>
        handler = 0x22c8950
        accumulator = 0x0
        emission = {next = 0x0, instance = 0x2309a30, ihint = {signal_id = 417, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, 
          chain_type = 4}
        class_closure = 0x164b6a0
        handler_list = 0x22c8950
        return_accu = <value optimized out>
        accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 
    0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        signal_id = 417
        max_sequential_handler_number = 3886
        return_value_altered = 0
#63 0x00007fb80b22eac5 in IA__g_signal_emit_valist (instance=0x2309a30, signal_id=<value optimized out>, detail=0, var_args=0x7fff01d7ca20)
    at gsignal.c:2981
        signal_return_type = 4
        param_values = <value optimized out>
        node = 0x164b730
        i = <value optimized out>
        n_params = <value optimized out>
        __PRETTY_FUNCTION__ = "IA__g_signal_emit_valist"
#64 0x00007fb80b22f303 in IA__g_signal_emit (instance=0x7fb80f1a2e50, signal_id=1, detail=248785367) at gsignal.c:3038
        var_args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fff01d7cb00, reg_save_area = 0x7fff01d7ca40}}
#65 0x00007fb80c5a4fb1 in socket_read_watch (chan=<value optimized out>, cond=0, user_data=<value optimized out>) at soup-socket.c:1245
        sock = 0x2309a30
#66 0x00007fb80ab4803f in g_main_dispatch (context=0xde4110) at gmain.c:1960
        dispatch = 0x7fb80ab8a0b0 <g_io_unix_dispatch>
        user_data = 0x2309a30
        callback = 0x7fb80c5a4f50 <socket_read_watch>
        cb_funcs = 0x7fb80ae015f0
        cb_data = 0x17eebe0
        current_source_link = {data = 0x23273d0, next = 0x0}
        source = 0x23273d0
        current = 0xe108a0
        i = 0
#67 IA__g_main_context_dispatch (context=0xde4110) at gmain.c:2513
No locals.
#68 0x00007fb80ab4be78 in g_main_context_iterate (context=0xde4110, block=<value optimized out>, dispatch=<value optimized out>, 
    self=<value optimized out>) at gmain.c:2591
        max_priority = 2147483647
        timeout = 17
        some_ready = 1
        nfds = 16
        allocated_nfds = 179670192
        fds = <value optimized out>
        __PRETTY_FUNCTION__ = "g_main_context_iterate"
#69 0x00007fb80ab4c38d in IA__g_main_loop_run (loop=0xe14080) at gmain.c:2799
        self = 0xdaade0
        __PRETTY_FUNCTION__ = "IA__g_main_loop_run"
#70 0x00007fb80dbb0d67 in IA__gtk_main () at gtkmain.c:1219
        tmp_list = 0xe2a980 = {0xe3e800, A debugging session is active.

[Mark Rowe (bdash)]

A suggestion for the future:  put massive backtraces in a text file and attach it to the bug.  Bugzilla wraps the lines to hell and makes them incredibly hard to read.

[Alexey Proskuryakov]

Doesn't happen for me on Mac OS X, r56669.

[Priit Laes (IRC: plaes)]

Closing old stuff...