Bug 36728 – Konqueror crashed by refreshing facebook web site

• Status: RESOLVED
• Resolution: INVALID
• Component: JavaScriptCore

[zuargo]

I reported this crash on kde bugtracker, here: https://bugs.kde.org/show_bug.cgi?id=232043. There they say me this bug looks a crash in webkit and ask me, please, to report it here.

I use archlinux, kernel 2.6.32-ARCH.

I compiled the svn version of webkit from the AUR: http://aur.archlinux.org/packages.php?ID=34417

I don't know which webkit version I am using, so I put 528+ (nightly build, I don't know what means "nightly")

This is the backtrace:

 -- Backtrace:
Application: Konqueror (kdeinit4), signal: Segmentation fault
[Current thread is 1 (Thread 0xb54ad710 (LWP 7416))]

Thread 7 (Thread 0xacdffb70 (LWP 27215)):
#0  0xb78dd424 in __kernel_vsyscall ()
#1  0xb6c40e55 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#2  0xafbd0f17 in QTWTF::TCMalloc_PageHeap::scavengerThread (this=0xafca8ba0)
at ../3rdparty/javascriptcore/JavaScriptCore/wtf/FastMalloc.cpp:2304
#3  0xafbd0f61 in QTWTF::TCMalloc_PageHeap::runScavengerThread
(context=0xafca8ba0) at
../3rdparty/javascriptcore/JavaScriptCore/wtf/FastMalloc.cpp:1438
#4  0xb6c3c8ac in start_thread () from /lib/libpthread.so.0
#5  0xb605b01e in clone () from /lib/libc.so.6

Thread 6 (Thread 0xac022b70 (LWP 27217)):
#0  0xb78dd424 in __kernel_vsyscall ()
#1  0xb6c40e55 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#2  0xb42b0157 in WTF::TCMalloc_PageHeap::scavengerThread (this=0xb501ca60) at
../JavaScriptCore/wtf/FastMalloc.cpp:2299
#3  0xb42b01a1 in WTF::TCMalloc_PageHeap::runScavengerThread
(context=0xb501ca60) at ../JavaScriptCore/wtf/FastMalloc.cpp:1433
#4  0xb6c3c8ac in start_thread () from /lib/libpthread.so.0
#5  0xb605b01e in clone () from /lib/libc.so.6

Thread 5 (Thread 0xa1170b70 (LWP 16186)):
#0  0xb78dd424 in __kernel_vsyscall ()
#1  0xb6c40e55 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#2  0xa935e79f in ?? () from /usr/lib/mozilla/plugins/libflashplayer.so
#3  0xa94917ff in ?? () from /usr/lib/mozilla/plugins/libflashplayer.so
#4  0xa935ec5d in ?? () from /usr/lib/mozilla/plugins/libflashplayer.so
#5  0xb6c3c8ac in start_thread () from /lib/libpthread.so.0
#6  0xb605b01e in clone () from /lib/libc.so.6

Thread 4 (Thread 0xa30a9b70 (LWP 16187)):
#0  0xb78dd424 in __kernel_vsyscall ()
#1  0xb6c40e55 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
#2  0xa935e79f in ?? () from /usr/lib/mozilla/plugins/libflashplayer.so
#3  0xa94917ff in ?? () from /usr/lib/mozilla/plugins/libflashplayer.so
#4  0xa935ec5d in ?? () from /usr/lib/mozilla/plugins/libflashplayer.so
#5  0xb6c3c8ac in start_thread () from /lib/libpthread.so.0
#6  0xb605b01e in clone () from /lib/libc.so.6

Thread 3 (Thread 0xa1971b70 (LWP 16205)):
#0  0xb78dd424 in __kernel_vsyscall ()
#1  0xb6c41182 in pthread_cond_timedwait@@GLIBC_2.3.2 () from
/lib/libpthread.so.0
#2  0xb6cb630f in QWaitConditionPrivate::wait (this=0xa391c1c, mutex=0xa391c18,
time=30000) at thread/qwaitcondition_unix.cpp:85
#3  QWaitCondition::wait (this=0xa391c1c, mutex=0xa391c18, time=30000) at
thread/qwaitcondition_unix.cpp:159
#4  0xb6cab0ab in QThreadPoolThread::run (this=0x9f89e10) at
concurrent/qthreadpool.cpp:140
#5  0xb6cb544e in QThreadPrivate::start (arg=0x9f89e10) at
thread/qthread_unix.cpp:248
#6  0xb6c3c8ac in start_thread () from /lib/libpthread.so.0
#7  0xb605b01e in clone () from /lib/libc.so.6

Thread 2 (Thread 0xa08a4b70 (LWP 16206)):
#0  0xb78dd424 in __kernel_vsyscall ()
#1  0xb6c41182 in pthread_cond_timedwait@@GLIBC_2.3.2 () from
/lib/libpthread.so.0
#2  0xb6cb630f in QWaitConditionPrivate::wait (this=0xa391c1c, mutex=0xa391c18,
time=30000) at thread/qwaitcondition_unix.cpp:85
#3  QWaitCondition::wait (this=0xa391c1c, mutex=0xa391c18, time=30000) at
thread/qwaitcondition_unix.cpp:159
#4  0xb6cab0ab in QThreadPoolThread::run (this=0xb07c720) at
concurrent/qthreadpool.cpp:140
#5  0xb6cb544e in QThreadPrivate::start (arg=0xb07c720) at
thread/qthread_unix.cpp:248
#6  0xb6c3c8ac in start_thread () from /lib/libpthread.so.0
#7  0xb605b01e in clone () from /lib/libc.so.6

Thread 1 (Thread 0xb54ad710 (LWP 7416)):
[KCrash Handler]
#6  0x00000000 in ?? ()
#7  0xaec53ffb in ?? ()
#8  0xb41ebb81 in JSC::JITCode::execute (this=0xab763c30,
functionExecutable=0x9fd9a360, callFrame=0x9b23e84, function=0xab1e78c0,
thisObj=0xaf440000, args=..., scopeChain=0xa638dbd0, 
    exception=0xab742d0c) at ../JavaScriptCore/jit/JITCode.h:79
#9  JSC::Interpreter::execute (this=0xab763c30, functionExecutable=0x9fd9a360,
callFrame=0x9b23e84, function=0xab1e78c0, thisObj=0xaf440000, args=...,
scopeChain=0xa638dbd0, exception=0xab742d0c)
    at ../JavaScriptCore/interpreter/Interpreter.cpp:679
#10 0xb424e32d in JSC::JSFunction::call (this=0xab1e78c0, exec=0x9b23e84,
thisValue=..., args=...) at ../JavaScriptCore/runtime/JSFunction.cpp:120
#11 0xb422334e in JSC::call (exec=0x9b23e84, functionObject=<value optimized
out>, callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at
../JavaScriptCore/runtime/CallData.cpp:39
#12 0xb4314bc3 in WebCore::callInWorld (exec=0x9b23e84, function=...,
callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...,
isolatedWorld=0x9655230) at bindings/js/JSDOMBinding.cpp:822
#13 0xb43281e1 in WebCore::ScheduledAction::executeFunctionInContext
(this=0xa7ac4e8, globalObject=0xa7869600, thisValue=...) at
bindings/js/ScheduledAction.cpp:106
#14 0xb4328a0b in WebCore::ScheduledAction::execute (this=0xa7ac4e8,
document=0xa7b3f000) at bindings/js/ScheduledAction.cpp:126
#15 0xb45c03bd in WebCore::DOMTimer::fired (this=0xa6d6b828) at
page/DOMTimer.cpp:150
#16 0xb464843d in WebCore::ThreadTimers::sharedTimerFiredInternal
(this=0xab7282b8) at platform/ThreadTimers.cpp:112
#17 0xb4648492 in WebCore::ThreadTimers::sharedTimerFired () at
platform/ThreadTimers.cpp:90
#18 0xb475c4e6 in WebCore::SharedTimerQt::timerEvent (this=0x9164900,
ev=0xbfa48ff0) at platform/qt/SharedTimerQt.cpp:105
#19 0xb6dc7514 in QObject::event (this=0x9164900, e=0x3) at
kernel/qobject.cpp:1212
#20 0xb62fce4c in QApplicationPrivate::notify_helper (this=0x907fbb8,
receiver=0x9164900, e=0xbfa48ff0) at kernel/qapplication.cpp:4300
#21 0xb6303a5e in QApplication::notify (this=0xbfa494d4, receiver=0x9164900,
e=0xbfa48ff0) at kernel/qapplication.cpp:3704
#22 0xb70a90ca in KApplication::notify (this=0xbfa494d4, receiver=0x9164900,
event=0xbfa48ff0) at
/home/phil/kdemod/core/kdelibs/src/kdelibs-4.4.1/kdeui/kernel/kapplication.cpp:302
#23 0xb6db6e6b in QCoreApplication::notifyInternal (this=0xbfa494d4,
receiver=0x9164900, event=0xbfa48ff0) at kernel/qcoreapplication.cpp:704
#24 0xb6de5de6 in QCoreApplication::sendEvent (this=0x90827ac) at
../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:215
#25 QTimerInfoList::activateTimers (this=0x90827ac) at
kernel/qeventdispatcher_unix.cpp:603
#26 0xb6de2af7 in timerSourceDispatch (source=0x9082c00) at
kernel/qeventdispatcher_glib.cpp:184
#27 idleTimerSourceDispatch (source=0x9082c00) at
kernel/qeventdispatcher_glib.cpp:231
#28 0xb5ad2398 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#29 0xb5ad5c10 in g_main_context_iterate () from /usr/lib/libglib-2.0.so.0
#30 0xb5ad5d43 in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#31 0xb6de27b5 in QEventDispatcherGlib::processEvents (this=0x9005330,
flags=...) at kernel/qeventdispatcher_glib.cpp:412
#32 0xb63b95c5 in QGuiEventDispatcherGlib::processEvents (this=0x9005330,
flags=...) at kernel/qguieventdispatcher_glib.cpp:204
#33 0xb6db54a9 in QEventLoop::processEvents (this=0xbfa492b4, flags=) at
kernel/qeventloop.cpp:149
#34 0xb6db58fa in QEventLoop::exec (this=0xbfa492b4, flags=...) at
kernel/qeventloop.cpp:201
#35 0xb6db9a6f in QCoreApplication::exec () at kernel/qcoreapplication.cpp:981
#36 0xb62fcee7 in QApplication::exec () at kernel/qapplication.cpp:3579
#37 0xb26d829e in kdemain (argc=3, argv=0x9068f30) at
/home/phil/kdemod/core/kdebase/src/kdebase-4.4.1/apps/konqueror/src/konqmain.cpp:271
#38 0x0804e012 in launch (argc=<value optimized out>, _name=<value optimized
out>, args=<value optimized out>, cwd=0x0, envc=0, envs=0x9068717 "",
reset_env=false, tty=0x0, avoid_loops=false, 
    startup_id_str=0x8051147 "0") at
/home/phil/kdemod/core/kdelibs/src/kdelibs-4.4.1/kinit/kinit.cpp:717
#39 0x0804eb4d in handle_launcher_request (sock=<value optimized out>,
who=<value optimized out>) at
/home/phil/kdemod/core/kdelibs/src/kdelibs-4.4.1/kinit/kinit.cpp:1209
#40 0x0804efe4 in handle_requests (waitForPid=<value optimized out>) at
/home/phil/kdemod/core/kdelibs/src/kdelibs-4.4.1/kinit/kinit.cpp:1402
#41 0x0804f87f in main (argc=4, argv=0xbfa4a174, envp=0xbfa4a188) at
/home/phil/kdemod/core/kdelibs/src/kdelibs-4.4.1/kinit/kinit.cpp:1841

Thanks a lot

[zuargo]

I forgot it, I am using the revision 1097989-1 of webkit

[Simon Hausmann]

Can you reproduce this crash using last week's build? https://trac.webkit.org/wiki/QtWebKitJournal#WeeklyBuildWeek12

[zuargo]

I upgradeed my wbekit svn version to revision 1108764-1.

I tried reproduce the crash but now it does not occurs.

However, if it ocurred, I will report it here.

Thanks a lot for your time.

[Andreas Kling]

Closing this, please re-open if it happens again.