Bug#783082: Aw: Re: linux-image-3.16.0-4-586: video players/browsers crash with 'illegal instruction' on i586

[hikaru.debian at web.de]

Hi Bernhard,

I have run your gdb examples on the K6-2 now and came to the same result for vlc:

Program received signal SIGILL, Illegal instruction.
[Switching to Thread 0xb0fd4b40 (LWP 1001)]
0xaf19da49 in mid_pred (c=0, b=0, a=0) at /build/libav-H9AQHK/libav-11.3/libavcodec/x86/mathops.h:77
77      /build/libav-H9AQHK/libav-11.3/libavcodec/x86/mathops.h: No such file or directory.
(gdb) bt
#0  0xaf19da49 in mid_pred (c=0, b=0, a=0) at /build/libav-H9AQHK/libav-11.3/libavcodec/x86/mathops.h:77
#1  ff_h263_pred_motion (s=0xb25322c0, block=0, dir=0, px=0xb0fd3f84, py=0xb0fd3f88) at /build/libav-H9AQHK/libav-11.3/libavcodec/h263.c:365
#2  0xaf2a3f1c in ff_h263_decode_mb (s=0xb25322c0, block=0xb253ae60) at /build/libav-H9AQHK/libav-11.3/libavcodec/ituh263dec.c:654
#3  0xaf19e044 in decode_slice (s=0xb25322c0) at /build/libav-H9AQHK/libav-11.3/libavcodec/h263dec.c:234
#4  0xaf19ebc0 in ff_h263_decode_frame (avctx=0xb2592520, data=0xb25928a0, got_frame=0xb0fd41a8, avpkt=0xb0fd41d4) at /build/libav-H9AQHK/libav-11.3/libavcodec/h263dec.c:575
#5  0xaf418c9c in avcodec_decode_video2 (avctx=0xb2592520, picture=0xb25928a0, got_picture_ptr=0xb0fd41a8, avpkt=0xb0fd41d4) at /build/libav-H9AQHK/libav-11.3/libavcodec/utils.c:1600
#6  0xb1a79801 in DecodeVideo (p_dec=0xb258bd58, pp_block=0xb0fd41a8) at codec/avcodec/video.c:631
#7  0xb750828e in DecoderDecodeVideo (p_dec=0xb258bd58, p_block=0xb2594b10) at input/decoder.c:1385
#8  0xb7509e57 in DecoderProcessVideo (b_flush=<optimized out>, p_block=0xb2594b10, p_dec=<optimized out>) at input/decoder.c:1631
#9  DecoderProcess (p_block=<optimized out>, p_dec=<optimized out>) at input/decoder.c:1810
#10 DecoderThread (p_data=0xb258bd58) at input/decoder.c:909
#11 0xb776fd97 in start_thread () from /lib/i386-linux-gnu/libpthread.so.0
#12 0xb76c6dfe in clone () from /lib/i386-linux-gnu/libc.so.6
(gdb) display/i $pc
1: x/i $pc
=> 0xaf19da49 <ff_h263_pred_motion+249>:        cmovg  %ecx,%edx


However, the browser issue seems to be a different one, although probably similar due to a non-i586 instruction:

midori (from Wheezy, with debug symbols):

Program received signal SIGILL, Illegal instruction.
0xb4930144 in ?? () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
(gdb) bt
#0  0xb4930144 in ?? () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
#1  0xb492d2a9 in ?? () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
#2  0xb48c9786 in JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*, JSC::Register*) () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
#3  0xb48a78bf in JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
#4  0xb49eb0f4 in JSC::call(JSC::ExecState*, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
#5  0xb4a345e1 in JSC::boundFunctionCall(JSC::ExecState*) () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
#6  0xb492d39a in ?? () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
Backtrace stopped: previous frame inner to this frame (corrupt stack?)
(gdb) display/i $pc
1: x/i $pc
=> 0xb4930144:  fucomip %st(1),%st


qupzilla (no dbg package available):

Program received signal SIGILL, Illegal instruction.
0xb689b51a in ?? () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
(gdb) bt
#0  0xb689b51a in ?? () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#1  0xb680edb5 in ?? () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#2  0xb69280cf in ?? () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#3  0xb69708fb in ?? () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#4  0xb680ee3f in ?? () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#5  0xb69280cf in ?? () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#6  0xb528edda in ?? () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#7  0xb528f3f8 in ?? () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#8  0xb5911db0 in ?? () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#9  0xb5a54c07 in ?? () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#10 0xb5d1a9f2 in ?? () from /usr/lib/i386-linux-gnu/libQtWebKit.so.4
#11 0xb3eaeffe in QObject::event(QEvent*) () from /usr/lib/i386-linux-gnu/libQtCore.so.4
#12 0xb42a850a in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/lib/i386-linux-gnu/libQtGui.so.4
#13 0xb42af420 in QApplication::notify(QObject*, QEvent*) () from /usr/lib/i386-linux-gnu/libQtGui.so.4
#14 0xb3e9442a in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/lib/i386-linux-gnu/libQtCore.so.4
#15 0xb3ec91ce in ?? () from /usr/lib/i386-linux-gnu/libQtCore.so.4
#16 0xb3ec5e49 in ?? () from /usr/lib/i386-linux-gnu/libQtCore.so.4
#17 0xb3288da4 in g_main_context_dispatch () from /lib/i386-linux-gnu/libglib-2.0.so.0
#18 0xb32890c9 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#19 0xb3289196 in g_main_context_iteration () from /lib/i386-linux-gnu/libglib-2.0.so.0
#20 0xb3ec6839 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/i386-linux-gnu/libQtCore.so.4
#21 0xb435c516 in ?? () from /usr/lib/i386-linux-gnu/libQtGui.so.4
#22 0xb3e92d9f in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/i386-linux-gnu/libQtCore.so.4
#23 0xb3e9312e in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/lib/i386-linux-gnu/libQtCore.so.4
#24 0xb3e992b6 in QCoreApplication::exec() () from /usr/lib/i386-linux-gnu/libQtCore.so.4
#25 0xb42a6614 in QApplication::exec() () from /usr/lib/i386-linux-gnu/libQtGui.so.4
#26 0x0804a027 in ?? ()
#27 0xb3a4a723 in __libc_start_main () from /lib/i386-linux-gnu/libc.so.6
#28 0x0804a2ea in ?? ()
(gdb) display/i $pc
1: x/i $pc
=> 0xb689b51a:  fucomip %st(1),%st