Bug 75694 – Crash in toBoolean in 1.7.2 and 1.7.3 on docs.google.com and many other pages

• Status: RESOLVED
• Resolution: WORKSFORME
• Component: WebKitGTK

[Maciej Piechotka]

Starting program: /usr/bin/epiphany 
[Thread debugging using libthread_db enabled]
[New Thread 0x7fffe51ad700 (LWP 6384)]
[New Thread 0x7fffe49ac700 (LWP 6385)]
[New Thread 0x7fffda586700 (LWP 6386)]
[New Thread 0x7fffd9d85700 (LWP 6387)]
[New Thread 0x7fffd9584700 (LWP 6388)]
[New Thread 0x7fffd8d83700 (LWP 6389)]
[New Thread 0x7fff98580700 (LWP 6390)]
[New Thread 0x7fff96c38700 (LWP 6391)]
[New Thread 0x7fff95f00700 (LWP 6392)]
[Thread 0x7fff95f00700 (LWP 6392) exited]
[New Thread 0x7fff95f00700 (LWP 6393)]
[New Thread 0x7fff951b4700 (LWP 6394)]
[New Thread 0x7fff949b3700 (LWP 6395)]

Program received signal SIGSEGV, Segmentation fault.
toBoolean (this=0x7fff960380d8, exec=0x7fff96038138)
    at ./Source/JavaScriptCore/runtime/JSString.h:455
455	./Source/JavaScriptCore/runtime/JSString.h: No such file or directory.
	in ./Source/JavaScriptCore/runtime/JSString.h

Thread 13 (Thread 0x7fff949b3700 (LWP 6395)):
#0  0x00007ffff22ef0fb in pthread_cond_timedwait@@GLIBC_2.3.2 ()
   from /lib64/libpthread.so.0
No symbol table info available.
#1  0x00007ffff2588d05 in g_cond_wait_until (cond=0x21c6ed8, 
    mutex=<optimized out>, end_time=<optimized out>) at gthread-posix.c:870
        ts = {tv_sec = 106223, tv_nsec = 199462000}
        status = <optimized out>
#2  0x00007ffff251fe4e in g_async_queue_pop_intern_unlocked (queue=0x21c6ed0, 
    wait=1, end_time=0x7fff949b2c30) at gasyncqueue.c:418
        retval = <optimized out>
        __PRETTY_FUNCTION__ = "g_async_queue_pop_intern_unlocked"
#3  0x00007ffff256e971 in g_thread_pool_wait_for_new_task (pool=0x21dc6b0)
    at gthreadpool.c:273
        end_time = {tv_sec = 1325844916, tv_usec = 314023}
        task = <optimized out>
#4  g_thread_pool_thread_proxy (data=<optimized out>) at gthreadpool.c:306
        task = 0x1acba40
        pool = 0x21dc6b0
#5  0x00007ffff256e0b5 in g_thread_proxy (data=0x21a6f70) at gthread.c:801
        thread = 0x21a6f70
#6  0x00007ffff22eae2c in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#7  0x00007ffff20316bd in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115
No locals.

Thread 12 (Thread 0x7fff951b4700 (LWP 6394)):
#0  0x00007ffff2028a83 in __GI___poll (fds=<optimized out>, 
    nfds=<optimized out>, timeout=<optimized out>)
    at ../sysdeps/unix/sysv/linux/poll.c:87
        resultvar = <optimized out>
        oldtype = 0
        result = <optimized out>
#1  0x00007fffe960dfda in send_dg (resplen2=0x7fff951b3408, 
    anssizp2=0x7fff951b3404, ansp2=0x7fff951b33e0, anscp=0x7fff951b33d0, 
    gotsomewhere=<synthetic pointer>, v_circuit=<synthetic pointer>, ns=0, 
    terrno=0x7fff951b1ef4, anssizp=0x7fff951b1f40, ansp=0x7fff951b1ea8, 
    buflen2=43, buf2=0x7fff951b1f9c "\207\376\001", buflen=43, 
    buf=0x7fff951b1f70 "\316\362\001", statp=0x7fff951b4db8) at res_send.c:1058
        hp = 0x7fff951b1f70
        from = {sin6_family = 2, sin6_port = 13568, 
          sin6_flowinfo = 3924420926, sin6_addr = {__in6_u = {
              __u6_addr8 = '\000' <repeats 15 times>, __u6_addr16 = {0, 0, 0, 
                0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, 
          sin6_scope_id = 0}
        seconds = 5
        retval = <optimized out>
        recvresp1 = <optimized out>
        n = <optimized out>
        single_request_reopen = false
        recvresp2 = 0
        orig_anssizp = 2048
        save_gotsomewhere = 0
        pfd = {{fd = 30, events = 1, revents = 0}}
        hp2 = 0x7fff951b1f9c
        resplen = 231
        single_request = false
        ans = <optimized out>
        now = <optimized out>
        ptimeout = <optimized out>
        need_recompute = 0
        nwritten = <optimized out>
#2  __libc_res_nsend (statp=0x7fff951b4db8, buf=0x7fff951b1f70 "\316\362\001", 
    buflen=43, buf2=0x7fff951b1f9c "\207\376\001", buflen2=43, 
    ans=0x7fff951b2b90 "\316", <incomplete sequence \362\201\200>, 
    anssiz=2048, ansp=0x7fff951b33d0, ansp2=0x7fff951b33e0, 
    nansp2=0x7fff951b3404, resplen2=0x7fff951b3408) at res_send.c:556
        nsap = <optimized out>
        gotsomewhere = 1
        terrno = 110
        try = 0
        v_circuit = 0
        resplen = <optimized out>
        ns = <optimized out>
        n = <optimized out>
#3  0x00007fffe960c0c1 in __GI___libc_res_nquery (statp=0x7fff951b4db8, 
    name=0x229ede0 "lh6.googleusercontent.com", class=1, type=62321, 
    answer=0x7fff951b2b90 "\316", <incomplete sequence \362\201\200>, 
    anslen=2048, answerp=0x7fff951b33d0, answerp2=0x7fff951b33e0, 
    nanswerp2=0x7fff951b3404, resplen2=0x7fff951b3408) at res_query.c:226
        hp = 0x7fff951b2b90
        hp2 = <optimized out>
        n = <optimized out>
        use_malloc = 0
        oflags = 0
        bufsize = <optimized out>
        buf = 0x7fff951b1f70 "\316\362\001"
        query1 = 0x7fff951b1f70 "\316\362\001"
        nquery1 = <optimized out>
        query2 = 0x7fff951b1f9c "\207\376\001"
        nquery2 = 43
        __PRETTY_FUNCTION__ = "__libc_res_nquery"
#4  0x00007fffe960c625 in __libc_res_nquerydomain (statp=0x7fff951b4db8, 
    name=0x229ede0 "lh6.googleusercontent.com", domain=<optimized out>, 
    class=1, type=62321, 
    answer=0x7fff951b2b90 "\316", <incomplete sequence \362\201\200>, 
    anslen=2048, answerp=0x7fff951b33d0, answerp2=0x7fff951b33e0, 
    nanswerp2=0x7fff951b3404, resplen2=0x7fff951b3408) at res_query.c:578
        nbuf = '\000' <repeats 1024 times>
        longname = <optimized out>
        n = <optimized out>
        d = <optimized out>
#5  0x00007fffe960cbdf in __GI___libc_res_nsearch (statp=0x7fff951b4db8, 
    name=0x229ede0 "lh6.googleusercontent.com", class=1, type=62321, 
    answer=0x7fff951b2b90 "\316", <incomplete sequence \362\201\200>, 
    anslen=2048, answerp=0x7fff951b33d0, answerp2=0x7fff951b33e0, 
    nanswerp2=0x7fff951b3404, resplen2=0x7fff951b3408) at res_query.c:378
        cp = <optimized out>
        domain = <optimized out>
        hp = 0x7fff951b2b90
        tmp = '\000' <repeats 104 times>"\240, \336-\362\377\177\000\000\340\071\033\225\377\177\000\000x\000\000\000\000\000\000\000\360'\033\225\377\177\000\000\340(\033\225\377\177\000\000\240\071\033\225\377\177\000\000}!\375\361\377\177\000\000\000\000\000\000\000\000\000\000x\000\000\000\000\000\000\000\340\071\033\225\377\177\000\000\240\352\377\377\000\000\000\000\360'\033\225\377\177\000\000\\*\005\362\377\177\000\000\000@\000\000\004\000\000\000\376\200\000\000\000\000\000\000\002!j\377\376\202H\332 (\033\225\377\177", '\000' <repeats 19 times>"\200, \000\000\001", '\000' <repeats 18 times>, "\001P(\033\225\377\177\000\000\000\000\000\000\000\000\000\000h)\005\362\377\177\000\000\000\030\000\000\005", '\000' <repeats 13 times>"\377, \377\n\261\214\001\200(\033\225\377\177", '\000' <repeats 19 times>, "\030\000\000\004", '\000' <repeats 13 times>"\377, \377\300\250!f\260(\033\225\377\177", '\000' <repeats 19 times>...
        dots = <optimized out>
        trailing_dot = <optimized out>
        ret = <optimized out>
        saved_herrno = -1
        got_nodata = 0
        got_servfail = 0
        root_on_list = 0
        tried_as_is = 0
        searched = 0
#6  0x00007fff954bcb57 in _nss_dns_gethostbyname4_r (
    name=0x229ede0 "lh6.googleusercontent.com", pat=0x7fff951b39c8, 
    buffer=0x7fff951b3470 "", buflen=1024, errnop=0x7fff951b39ec, 
    herrnop=0x7fff951b39e0, ttlp=0x0) at nss_dns/dns-host.c:314
        host_buffer = {buf = 0x7fff951b2b90, 
          ptr = 0x7fff951b2b90 "\316", <incomplete sequence \362\201\200>}
        orig_host_buffer = 0x7fff951b2b90
        ans2p = 0x0
        nans2p = 0
        resplen2 = 0
        olderr = 0
        status = <optimized out>
        n = <optimized out>
#7  0x00007ffff201b7d1 in gaih_inet (
    name=0x229ede0 "lh6.googleusercontent.com", service=<optimized out>, 
    req=0x7ffff3207f80, pai=<optimized out>, naddrs=0x7fff951b3b98)
    at ../sysdeps/posix/getaddrinfo.c:852
        herrno = 1
        fct4 = 0x7fff954bca70 <_nss_dns_gethostbyname4_r>
        pat = 0x7fff951b39c8
        no_inet6_data = <optimized out>
        nip = 0x730340
        status = <optimized out>
        no_more = <optimized out>
        old_res_options = 524993
        tmpbuflen = 1024
        no_data = 0
        inet6_status = <optimized out>
        tp = <optimized out>
        st = 0x7fff951b38c0
        at = 0x7fff951b3880
        rc = 0
        got_ipv6 = <optimized out>
        canon = 0x0
        orig_name = 0x229ede0 "lh6.googleusercontent.com"
        alloca_used = 1152
        port = <optimized out>
        malloc_name = false
        malloc_addrmem = false
        addrmem = 0x0
        malloc_canonbuf = <optimized out>
        canonbuf = <optimized out>
        malloc_tmpbuf = false
        tmpbuf = 0x7fff951b3470 ""
        result = 0
        __PRETTY_FUNCTION__ = "gaih_inet"
#8  0x00007ffff201d940 in __GI_getaddrinfo (
    name=0x229ede0 "lh6.googleusercontent.com", service=<optimized out>, 
    hints=0x7ffff3207f80, pai=0x7fff951b3be8)
    at ../sysdeps/posix/getaddrinfo.c:2428
        i = 0
        last_i = 0
        nresults = 0
        p = 0x0
        gaih_service = {name = 0x2284200 "\020B(\002", num = -229524678}
        pservice = <optimized out>
        local_hints = {ai_flags = 32, ai_family = 0, ai_socktype = 36192768, 
          ai_protocol = 0, ai_addrlen = 1008, ai_addr = 0x18, 
          ai_canonname = 0x20 <Address 0x20 out of bounds>, 
          ai_next = 0x7ffff2588d73}
        in6ai = 0xaf4ea0
        in6ailen = 5
        seen_ipv4 = true
        seen_ipv6 = true
        end = 0x7fff951b3b78
        naddrs = 0
        __PRETTY_FUNCTION__ = "getaddrinfo"
#9  0x00007ffff2f2d49c in do_lookup_by_name (req=0x21e36a0, 
    error=0x7fff951b3c18) at gthreadedresolver.c:374
        res = 0x0
        retval = <optimized out>
#10 0x00007ffff2f2d898 in threaded_resolver_thread (thread_data=0x21e36a0, 
    pool_data=<optimized out>) at gthreadedresolver.c:309
        req = 0x21e36a0
        error = 0x0
#11 0x00007ffff256e938 in g_thread_pool_thread_proxy (data=<optimized out>)
    at gthreadpool.c:317
        task = 0x21e36a0
        pool = 0xd93cf0
#12 0x00007ffff256e0b5 in g_thread_proxy (data=0x21a6de0) at gthread.c:801
        thread = 0x21a6de0
#13 0x00007ffff22eae2c in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#14 0x00007ffff20316bd in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115
No locals.

Thread 11 (Thread 0x7fff95f00700 (LWP 6393)):
#0  0x00007ffff22ef0fb in pthread_cond_timedwait@@GLIBC_2.3.2 ()
   from /lib64/libpthread.so.0
No symbol table info available.
#1  0x00007ffff2588d05 in g_cond_wait_until (cond=0x21c6ed8, 
    mutex=<optimized out>, end_time=<optimized out>) at gthread-posix.c:870
        ts = {tv_sec = 106223, tv_nsec = 199521000}
        status = <optimized out>
#2  0x00007ffff251fe4e in g_async_queue_pop_intern_unlocked (queue=0x21c6ed0, 
    wait=1, end_time=0x7fff95effc30) at gasyncqueue.c:418
        retval = <optimized out>
        __PRETTY_FUNCTION__ = "g_async_queue_pop_intern_unlocked"
#3  0x00007ffff256e971 in g_thread_pool_wait_for_new_task (pool=0x21dc6b0)
    at gthreadpool.c:273
        end_time = {tv_sec = 1325844916, tv_usec = 314081}
        task = <optimized out>
#4  g_thread_pool_thread_proxy (data=<optimized out>) at gthreadpool.c:306
        task = 0x1acba40
        pool = 0x21dc6b0
#5  0x00007ffff256e0b5 in g_thread_proxy (data=0x21a6a30) at gthread.c:801
        thread = 0x21a6a30
#6  0x00007ffff22eae2c in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#7  0x00007ffff20316bd in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115
No locals.

Thread 9 (Thread 0x7fff96c38700 (LWP 6391)):
#0  0x00007ffff22ef0fb in pthread_cond_timedwait@@GLIBC_2.3.2 ()
   from /lib64/libpthread.so.0
No symbol table info available.
#1  0x00007fffef12fc9c in WTF::ThreadCondition::timedWait (
    this=0x7fffe4139ff8, mutex=..., absoluteTime=<optimized out>)
    at Source/JavaScriptCore/wtf/ThreadingPthreads.cpp:393
        timeSeconds = <optimized out>
        targetTime = {tv_sec = 1325844916, tv_nsec = 16082048}
#2  0x00007fffeef64c92 in JSC::Heap::waitForRelativeTime (this=0x7fffe4139cc8, 
    relative=<optimized out>) at Source/JavaScriptCore/heap/Heap.cpp:402
        locker = {m_lockable = @0x7fffe4139fd0}
#3  0x00007fffeef64ce6 in JSC::Heap::blockFreeingThreadMain (
    this=0x7fffe4139cc8) at Source/JavaScriptCore/heap/Heap.cpp:416
        currentNumberOfFreeBlocks = <optimized out>
        desiredNumberOfFreeBlocks = <optimized out>
#4  0x00007fffeef64e19 in JSC::Heap::blockFreeingThreadStartFunc (
    heap=<optimized out>) at Source/JavaScriptCore/heap/Heap.cpp:407
No locals.
#5  0x00007ffff22eae2c in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#6  0x00007ffff20316bd in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115
No locals.

Thread 8 (Thread 0x7fff98580700 (LWP 6390)):
#0  0x00007ffff22eed7c in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib64/libpthread.so.0
No symbol table info available.
#1  0x00007ffff570fe2b in WebCore::IconDatabase::syncThreadMainLoop (
    this=0x7fffe40b2000) at Source/WebCore/loader/icon/IconDatabase.cpp:1441
        didAnyWork = <optimized out>
        shouldReenableSuddenTermination = false
#2  0x00007ffff5710eb1 in WebCore::IconDatabase::iconDatabaseSyncThread (
    this=0x7fffe40b2000) at Source/WebCore/loader/icon/IconDatabase.cpp:1053
        journalFilename = {m_impl = {m_ptr = 0x7fffe40bfd90}}
#3  0x00007ffff22eae2c in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#4  0x00007ffff20316bd in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115
No locals.

Thread 7 (Thread 0x7fffd8d83700 (LWP 6389)):
#0  0x00007ffff2000b5d in nanosleep () at ../sysdeps/unix/syscall-template.S:82
No locals.
#1  0x00007ffff20009fc in __sleep (seconds=0)
    at ../sysdeps/unix/sysv/linux/sleep.c:138
        ts = {tv_sec = 1, tv_nsec = 984922239}
        set = {__val = {65536, 0 <repeats 15 times>}}
        oset = {__val = {0, 140737351947236, 5, 0, 6205944, 140737252853368, 
            140737354125312, 1, 140737207154496, 140737207212008, 
            140737207212048, 140737351972357, 0, 140737256561045, 
            140737207212008, 0}}
        result = <optimized out>
#2  0x00007fffef10c965 in WTF::TCMalloc_PageHeap::scavengerThread (
    this=0x7fffef3d3740) at Source/JavaScriptCore/wtf/FastMalloc.cpp:2555
No locals.
#3  0x00007fffef10c9f9 in WTF::TCMalloc_PageHeap::runScavengerThread (
    context=<optimized out>) at Source/JavaScriptCore/wtf/FastMalloc.cpp:1628
No locals.
#4  0x00007ffff22eae2c in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#5  0x00007ffff20316bd in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115
No locals.

Thread 6 (Thread 0x7fffd9584700 (LWP 6388)):
#0  futex_wait (val=16, addr=0xc0a924)
    at /var/tmp/paludis/sys-devel-gcc-4.6.2/work/gcc-4.6.2/libgomp/config/linux/x86/futex.h:44
        r10 = 0
        res = -512
#1  do_wait (val=16, addr=0xc0a924)
    at /var/tmp/paludis/sys-devel-gcc-4.6.2/work/gcc-4.6.2/libgomp/config/linux/wait.h:58
        i = <optimized out>
        count = <optimized out>
#2  gomp_barrier_wait_end (bar=0xc0a920, state=16)
    at /var/tmp/paludis/sys-devel-gcc-4.6.2/work/gcc-4.6.2/libgomp/config/linux/bar.c:49
No locals.
#3  0x00007ffff170b72e in gomp_thread_start (xdata=<optimized out>)
    at /var/tmp/paludis/sys-devel-gcc-4.6.2/work/gcc-4.6.2/libgomp/team.c:119
        team = 0x15fdee0
        data = <optimized out>
        pool = 0xc0a8e0
        local_fn = 0x7fffef0c2e30
     <void_JSC__HashTable__createTable_JSC__JSGlobalData___const._loopfn.0(void)>
        local_data = 0x7fffffff93c0
#4  0x00007ffff22eae2c in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#5  0x00007ffff20316bd in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115
No locals.

Thread 5 (Thread 0x7fffd9d85700 (LWP 6387)):
#0  futex_wait (val=16, addr=0xc0a924)
    at /var/tmp/paludis/sys-devel-gcc-4.6.2/work/gcc-4.6.2/libgomp/config/linux/x86/futex.h:44
        r10 = 0
        res = -512
#1  do_wait (val=16, addr=0xc0a924)
    at /var/tmp/paludis/sys-devel-gcc-4.6.2/work/gcc-4.6.2/libgomp/config/linux/wait.h:58
        i = <optimized out>
        count = <optimized out>
#2  gomp_barrier_wait_end (bar=0xc0a920, state=16)
    at /var/tmp/paludis/sys-devel-gcc-4.6.2/work/gcc-4.6.2/libgomp/config/linux/bar.c:49
No locals.
#3  0x00007ffff170b72e in gomp_thread_start (xdata=<optimized out>)
    at /var/tmp/paludis/sys-devel-gcc-4.6.2/work/gcc-4.6.2/libgomp/team.c:119
        team = 0x15fdee0
        data = <optimized out>
        pool = 0xc0a8e0
        local_fn = 0x7fffef0c2e30 <void_JSC__HashTable__createTable_JSC__JSGlobalData___const._loopfn.0(void)>
        local_data = 0x7fffffff93c0
#4  0x00007ffff22eae2c in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#5  0x00007ffff20316bd in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115
No locals.

Thread 4 (Thread 0x7fffda586700 (LWP 6386)):
#0  futex_wait (val=16, addr=0xc0a924)
    at /var/tmp/paludis/sys-devel-gcc-4.6.2/work/gcc-4.6.2/libgomp/config/linux/x86/futex.h:44
        r10 = 0
        res = -512
#1  do_wait (val=16, addr=0xc0a924)
    at /var/tmp/paludis/sys-devel-gcc-4.6.2/work/gcc-4.6.2/libgomp/config/linux/wait.h:58
        i = <optimized out>
        count = <optimized out>
#2  gomp_barrier_wait_end (bar=0xc0a920, state=16)
    at /var/tmp/paludis/sys-devel-gcc-4.6.2/work/gcc-4.6.2/libgomp/config/linux/bar.c:49
No locals.
#3  0x00007ffff170b72e in gomp_thread_start (xdata=<optimized out>)
    at /var/tmp/paludis/sys-devel-gcc-4.6.2/work/gcc-4.6.2/libgomp/team.c:119
        team = 0x15fdee0
        data = <optimized out>
        pool = 0xc0a8e0
        local_fn = 0x7fffef0c2e30 <void_JSC__HashTable__createTable_JSC__JSGlobalData___const._loopfn.0(void)>
        local_data = 0x7fffffff93c0
#4  0x00007ffff22eae2c in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#5  0x00007ffff20316bd in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115
No locals.

Thread 3 (Thread 0x7fffe49ac700 (LWP 6385)):
#0  0x00007ffff2028a83 in __GI___poll (fds=<optimized out>, 
    nfds=<optimized out>, timeout=<optimized out>)
    at ../sysdeps/unix/sysv/linux/poll.c:87
        resultvar = <optimized out>
        oldtype = 0
        result = <optimized out>
#1  0x00007ffff254b0b6 in g_main_context_poll (n_fds=3, fds=0x84c770, 
    timeout=-1, context=0x851860, priority=<optimized out>) at gmain.c:3415
        poll_func = 0x7ffff25587c0 <g_poll>
#2  g_main_context_iterate (dispatch=1, block=<optimized out>, 
    context=0x851860, self=<optimized out>) at gmain.c:3116
        timeout = -1
        some_ready = <optimized out>
        fds = 0x84c770
        max_priority = 2147483647
        nfds = 3
        allocated_nfds = <optimized out>
#3  g_main_context_iterate (context=0x851860, block=<optimized out>, 
    dispatch=1, self=<optimized out>) at gmain.c:3058
        some_ready = 8701808
#4  0x00007ffff254b4fa in g_main_loop_run (loop=0x84c790) at gmain.c:3315
        __PRETTY_FUNCTION__ = "g_main_loop_run"
#5  0x00007ffff2f81d76 in gdbus_shared_thread_func (user_data=0x84c7b0)
    at gdbusprivate.c:276
        data = 0x84c7b0
#6  0x00007ffff256e0b5 in g_thread_proxy (data=0x84eed0) at gthread.c:801
        thread = 0x84eed0
#7  0x00007ffff22eae2c in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#8  0x00007ffff20316bd in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115
No locals.

Thread 2 (Thread 0x7fffe51ad700 (LWP 6384)):
#0  0x00007ffff2028a83 in __GI___poll (fds=<optimized out>, 
    nfds=<optimized out>, timeout=<optimized out>)
    at ../sysdeps/unix/sysv/linux/poll.c:87
        resultvar = <optimized out>
        oldtype = 0
        result = <optimized out>
#1  0x00007ffff254b0b6 in g_main_context_poll (n_fds=1, fds=0x7fffe0000d00, 
    timeout=-1, context=0x841650, priority=<optimized out>) at gmain.c:3415
        poll_func = 0x7ffff25587c0 <g_poll>
#2  g_main_context_iterate (dispatch=1, block=<optimized out>, 
    context=0x841650, self=<optimized out>) at gmain.c:3116
        timeout = -1
        some_ready = <optimized out>
        fds = 0x7fffe0000d00
        max_priority = 2147483647
        nfds = 1
        allocated_nfds = <optimized out>
#3  g_main_context_iterate (context=0x841650, block=<optimized out>, 
    dispatch=1, self=<optimized out>) at gmain.c:3058
        some_ready = -536867584
#4  0x00007ffff254b4fa in g_main_loop_run (loop=0x7fffe00008d0) at gmain.c:3315
        __PRETTY_FUNCTION__ = "g_main_loop_run"
#5  0x00007fffe689d11b in dconf_context_thread (data=0x841650)
    at dconfcontext.c:11
        context = 0x841650
        loop = <optimized out>
        __PRETTY_FUNCTION__ = "dconf_context_thread"
#6  0x00007ffff256e0c6 in g_thread_proxy (data=0x83b1e0) at gthread.c:801
        thread = 0x83b1e0
#7  0x00007ffff22eae2c in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#8  0x00007ffff20316bd in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115
No locals.

Thread 1 (Thread 0x7ffff7f91960 (LWP 6347)):
#0  toBoolean (this=0x7fff960380d8, exec=0x7fff96038138)
    at ./Source/JavaScriptCore/runtime/JSString.h:455
No locals.
#1  toBoolean (exec=0x7fff96038138, this=<synthetic pointer>)
    at ./Source/JavaScriptCore/runtime/JSString.h:469
No locals.
#2  toBoolean (exec=0x7fff96038138, this=<synthetic pointer>)
    at Source/JavaScriptCore/jit/JITStubs.cpp:2947
No locals.
#3  JSC::cti_op_jtrue (args=0x7fffffffbf80)
    at Source/JavaScriptCore/jit/JITStubs.cpp:2955
        stackFrame = @0x7fffffffbf80
        src1 = {u = {asInt64 = 140735710200024, ptr = 0x7fff960380d8, 
            asBits = {payload = -1778155304, tag = 32767}}}
        callFrame = 0x7fff96038138
#4  0x00007fff986dfb50 in ?? ()
No symbol table info available.
#5  0x00007fff00000001 in ?? ()
No symbol table info available.
#6  0x00007fff960380d8 in ?? ()
No symbol table info available.
#7  0x00007fff939bfc98 in ?? ()
No symbol table info available.
#8  0x00007fff930e0860 in ?? ()
No symbol table info available.
#9  0x0000000000000000 in ?? ()
No symbol table info available.
A debugging session is active.

	Inferior 1 [process 6347] will be killed.

Quit anyway? (y or n)

[Amber henderson]

Unlock

[Ahmad Saleem]

It is quite old bug and if we have similar crash in newer epiphany version, we would have newer bug report and it was never confirmed.

@Michael - can we close this now?

[Michael Catanzaro]

Yeah, unless Maciej has seen this again more recently, I think it's safe to say it's probably fixed.