Bug#684583: libjavascriptcoregtk-1.0-0: segfault in libjavascriptcoregtk-1.0.so.0.13.2[b5191000+3a9000]

Paul Menzel pm.debian at googlemail.com
Sat Aug 11 13:06:40 UTC 2012


Package: libjavascriptcoregtk-1.0-0
Version: 1.8.1-3.1
Severity: important
Tags: upstream

Dear Debian folks,


I already reported the following segmentation fault upstream as #93765 [2].

--- begin quote ---
Using Midori 0.4.6 to browse the WWW the application trashed and I was able to capture the core dump.

    libjavascriptcoregtk-1.0-0    1.8.1-3.1           i386                Javascript engine library for GTK+

The following messages were printed to the terminal.

        ** (midori4:6251): CRITICAL **: enchant_dict_check: assertion `len' failed

        ** (midori4:6251): CRITICAL **: enchant_dict_check: assertion `len' failed

        ** (midori4:6251): CRITICAL **: enchant_dict_check: assertion `len' failed

        (gtk-gnash:15057): Gdk-WARNING **: GdkWindow 0x1c00003 unexpectedly destroyed

        (gtk-gnash:15057): Gtk-CRITICAL **: IA__gtk_style_detach: assertion `style->attach_count > 0' failed
        The program 'gtk-gnash' received an X Window System error.
        This probably reflects a bug in the program.
        The error was 'BadWindow (invalid Window parameter)'.
          (Details: serial 199 error_code 3 request_code 18 minor_code 0)
          (Note to programmers: normally, X errors are reported asynchronously;
           that is, you will receive the error a while after causing it.
           To debug your program, run it with the --sync command line
           option to change this behavior. You can then get a meaningful
           backtrace from your debugger if you break on the gdk_x_error() function.)

        [1]+  Speicherzugriffsfehler  (Speicherabzug geschrieben) midori

And in GDB the output of `thread apply all bt full` is the following.

        Thread 9 (Thread 0xa0adbb70 (LWP 15056)):
        #0  0xb76cb424 in __kernel_vsyscall ()
        No symbol table info available.
        #1  0xb4ef3703 in pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/i386/i686/../i486/pthread_cond_timedwait.S:236
        No locals.
        #2  0xb75d3bb0 in g_cond_wait_until (cond=cond at entry=0xb82aca40, mutex=mutex at entry=0xb82aca38, end_time=10871307131)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gthread-posix.c:855
                ts = {tv_sec = 10871, tv_nsec = 307131000}
                status = <optimized out>
        #3  0xb7566d59 in g_async_queue_pop_intern_unlocked (queue=0xb82aca38, queue at entry=0x87fafb7b, wait=wait at entry=1, end_time=10871307131)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gasyncqueue.c:424
                retval = <optimized out>
                __PRETTY_FUNCTION__ = "g_async_queue_pop_intern_unlocked"
        #4  0xb756761a in g_async_queue_timeout_pop_unlocked (queue=0x87fafb7b, timeout=2)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gasyncqueue.c:572
                end_time = <optimized out>
        #5  0xb75b864f in g_thread_pool_wait_for_new_task (pool=0xb82ace30)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gthreadpool.c:264
                task = <optimized out>
        #6  g_thread_pool_thread_proxy (data=0xb82ace30) at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gthreadpool.c:298
                task = 0xb9b68f00
                pool = 0xb82ace30
        #7  0xb75b7d93 in g_thread_proxy (data=0xb9b60290) at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gthread.c:801
                thread = 0xb9b60290
        #8  0xb4eeec39 in start_thread (arg=0xa0adbb70) at pthread_create.c:304
                __res = <optimized out>
                __ignore1 = <optimized out>
                __ignore2 = <optimized out>
                pd = 0xa0adbb70
                now = <optimized out>
                unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1259343884, 0, 4001536, -1599229240, 970089110, -1083592514}, mask_was_saved = 0}}, 
                  priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
                not_first_call = <optimized out>
                freesize = <optimized out>
                __PRETTY_FUNCTION__ = "start_thread"
        #9  0xb4e5c23e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130
        No locals.

        Thread 8 (Thread 0xa32e0b70 (LWP 15051)):
        #0  0xb76cb424 in __kernel_vsyscall ()
        No symbol table info available.
        #1  0xb4ef3703 in pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/i386/i686/../i486/pthread_cond_timedwait.S:236
        No locals.
        #2  0xb75d3bb0 in g_cond_wait_until (cond=cond at entry=0xb12e5230, mutex=mutex at entry=0xb12e5228, end_time=10871667451)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gthread-posix.c:855
                ts = {tv_sec = 10871, tv_nsec = 667451000}
                status = <optimized out>
        #3  0xb7566d59 in g_async_queue_pop_intern_unlocked (queue=0xb12e5228, queue at entry=0x88007afb, wait=wait at entry=1, end_time=10871667451)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gasyncqueue.c:424
                retval = <optimized out>
                __PRETTY_FUNCTION__ = "g_async_queue_pop_intern_unlocked"
        #4  0xb756761a in g_async_queue_timeout_pop_unlocked (queue=0x88007afb, timeout=2)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gasyncqueue.c:572
                end_time = <optimized out>
        #5  0xb75b864f in g_thread_pool_wait_for_new_task (pool=0xb071fe70)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gthreadpool.c:264
                task = <optimized out>
        #6  g_thread_pool_thread_proxy (data=0xb071fe70) at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gthreadpool.c:298
                task = 0xb9b636b8
                pool = 0xb071fe70
        #7  0xb75b7d93 in g_thread_proxy (data=0xb9b605b0) at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gthread.c:801
                thread = 0xb9b605b0
        #8  0xb4eeec39 in start_thread (arg=0xa32e0b70) at pthread_create.c:304
                __res = <optimized out>
                __ignore1 = <optimized out>
                __ignore2 = <optimized out>
                pd = 0xa32e0b70
                now = <optimized out>
                unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1259343884, 0, 4001536, -1557265720, 1051878033, -1083592514}, mask_was_saved = 0}}, 
                  priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
                not_first_call = <optimized out>
                freesize = <optimized out>
                __PRETTY_FUNCTION__ = "start_thread"
        #9  0xb4e5c23e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130
        No locals.

        Thread 7 (Thread 0xa1addb70 (LWP 15055)):
        #0  0xb76cb424 in __kernel_vsyscall ()
        No symbol table info available.
        #1  0xb4ef3703 in pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/i386/i686/../i486/pthread_cond_timedwait.S:236
        No locals.
        #2  0xb75d3bb0 in g_cond_wait_until (cond=cond at entry=0xb82aca40, mutex=mutex at entry=0xb82aca38, end_time=10871709820)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gthread-posix.c:855
                ts = {tv_sec = 10871, tv_nsec = 709820000}
                status = <optimized out>
        #3  0xb7566d59 in g_async_queue_pop_intern_unlocked (queue=0xb82aca38, queue at entry=0x8801207c, wait=wait at entry=1, end_time=10871709820)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gasyncqueue.c:424
                retval = <optimized out>
                __PRETTY_FUNCTION__ = "g_async_queue_pop_intern_unlocked"
        #4  0xb756761a in g_async_queue_timeout_pop_unlocked (queue=0x8801207c, timeout=2)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gasyncqueue.c:572
                end_time = <optimized out>
        #5  0xb75b864f in g_thread_pool_wait_for_new_task (pool=0xb82ace30)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gthreadpool.c:264
                task = <optimized out>
        #6  g_thread_pool_thread_proxy (data=0xb82ace30) at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gthreadpool.c:298
                task = 0xb9905518
                pool = 0xb82ace30
        #7  0xb75b7d93 in g_thread_proxy (data=0xb9a9f950) at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gthread.c:801
                thread = 0xb9a9f950
        #8  0xb4eeec39 in start_thread (arg=0xa1addb70) at pthread_create.c:304
                __res = <optimized out>
                __ignore1 = <optimized out>
                __ignore2 = <optimized out>
                pd = 0xa1addb70
                now = <optimized out>
                unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1259343884, 0, 4001536, -1582443832, 957506196, -1083592514}, mask_was_saved = 0}}, 
                  priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
                not_first_call = <optimized out>
                freesize = <optimized out>
                __PRETTY_FUNCTION__ = "start_thread"
        #9  0xb4e5c23e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130
        No locals.

        Thread 6 (Thread 0xb2cf1b70 (LWP 6255)):
        #0  0xb76cb424 in __kernel_vsyscall ()
        No symbol table info available.
        #1  0xb4e26de6 in nanosleep () at ../sysdeps/unix/syscall-template.S:82
        No locals.
        #2  0xb4e26c10 in __sleep (seconds=0) at ../sysdeps/unix/sysv/linux/sleep.c:138
                ts = {tv_sec = 0, tv_nsec = 73466461}
                set = {__val = {65536, 0 <repeats 31 times>}}
                oset = {__val = {0, 0, 2999914756, 3038455568, 3038789543, 3077479012, 0, 0, 5, 0, 1, 3066726480, 1, 3077476340, 2999914880, 
                    3066726920, 2999914836, 3038412912, 3066726480, 0, 4294967295, 3077476340, 3038789543, 5, 2999914736, 3077413910, 0, 3, 
                    720896, 3034941487, 3042221908, 2829455104}}
                result = <optimized out>
        #3  0xb547d0e4 in WTF::TCMalloc_PageHeap::scavengerThread() () from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #4  0xb547d16b in WTF::TCMalloc_PageHeap::runScavengerThread(void*) () from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #5  0xb4eeec39 in start_thread (arg=0xb2cf1b70) at pthread_create.c:304
                __res = <optimized out>
                __ignore1 = <optimized out>
                __ignore2 = <optimized out>
                pd = 0xb2cf1b70
                now = <optimized out>
                unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1259343884, 0, 4001536, -1295052088, -57515342, -1083592514}, mask_was_saved = 0}}, 
                  priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
                not_first_call = <optimized out>
                freesize = <optimized out>
                __PRETTY_FUNCTION__ = "start_thread"
        #6  0xb4e5c23e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130
        No locals.

        Thread 5 (Thread 0xb1b86b70 (LWP 6257)):
        #0  0xb76cb424 in __kernel_vsyscall ()
        No symbol table info available.
        #1  0xb4e4e846 in *__GI___poll (fds=0xb4ee4ff4, fds at entry=0xb82afcb0, nfds=nfds at entry=1, timeout=timeout at entry=-1)
            at ../sysdeps/unix/sysv/linux/poll.c:87
                resultvar = <optimized out>
                oldtype = 0
                result = <optimized out>
        #2  0xb75a207b in g_poll (fds=0xb82afcb0, nfds=1, timeout=-1)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gpoll.c:132
        No locals.
        #3  0xb7593950 in g_main_context_poll (n_fds=1, fds=0xb82afcb0, timeout=<optimized out>, context=0xb82afe38, priority=<optimized out>)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gmain.c:3440
                poll_func = <optimized out>
        #4  g_main_context_iterate (context=0xb82afe38, block=block at entry=1, dispatch=dispatch at entry=1, 
            self=<error reading variable: Unhandled dwarf expression opcode 0xfa>)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gmain.c:3141
                max_priority = 2147483647
                timeout = -1
                some_ready = <optimized out>
                nfds = 1
                allocated_nfds = <optimized out>
                fds = 0xb82afcb0
        #5  0xb7593e2b in g_main_loop_run (loop=0xb82afca0) at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gmain.c:3340
                __PRETTY_FUNCTION__ = "g_main_loop_run"
        #6  0xb1b91604 in ?? () from /usr/lib/i386-linux-gnu/gio/modules/libdconfsettings.so
        No symbol table info available.
        #7  0xb75b7d93 in g_thread_proxy (data=0xb827f200) at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gthread.c:801
                thread = 0xb827f200
        #8  0xb4eeec39 in start_thread (arg=0xb1b86b70) at pthread_create.c:304
                __res = <optimized out>
                __ignore1 = <optimized out>
                __ignore2 = <optimized out>
                pd = 0xb1b86b70
                now = <optimized out>
                unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1259343884, 0, 4001536, -1313316152, 309486260, -1083592514}, mask_was_saved = 0}}, 
                  priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
                not_first_call = <optimized out>
                freesize = <optimized out>
                __PRETTY_FUNCTION__ = "start_thread"
        #9  0xb4e5c23e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130
        No locals.

        Thread 4 (Thread 0xaa39cb70 (LWP 6266)):
        #0  0xb76cb424 in __kernel_vsyscall ()
        No symbol table info available.
        #1  0xb4ef3703 in pthread_cond_timedwait@@GLIBC_2.3.2 () at ../nptl/sysdeps/unix/sysv/linux/i386/i686/../i486/pthread_cond_timedwait.S:236
        No locals.
        #2  0xb549c7e8 in WTF::ThreadCondition::timedWait(WTF::Mutex&, double) () from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #3  0xb52fed52 in JSC::Heap::waitForRelativeTimeWhileHoldingLock(double) () from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #4  0xb52fedb4 in JSC::Heap::waitForRelativeTime(double) () from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #5  0xb52fee07 in JSC::Heap::blockFreeingThreadMain() () from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #6  0xb52feecb in JSC::Heap::blockFreeingThreadStartFunc(void*) () from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #7  0xb549bea2 in WTF::threadEntryPoint(void*) () from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #8  0xb549c00e in WTF::wtfThreadEntryPoint(void*) () from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #9  0xb4eeec39 in start_thread (arg=0xaa39cb70) at pthread_create.c:304
                __res = <optimized out>
                __ignore1 = <optimized out>
                __ignore2 = <optimized out>
                pd = 0xaa39cb70
                now = <optimized out>
                unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1259343884, 0, 4001536, -1439055160, 288514691, -1083592514}, mask_was_saved = 0}}, 
                  priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
                not_first_call = <optimized out>
                freesize = <optimized out>
                __PRETTY_FUNCTION__ = "start_thread"
        #10 0xb4e5c23e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130
        No locals.

        Thread 3 (Thread 0xb23c9b70 (LWP 6259)):
        #0  0xb76cb424 in __kernel_vsyscall ()
        No symbol table info available.
        #1  0xb4ef320a in __pthread_cond_wait (cond=0xb23ffde8, mutex=0xb23ffdd0) at pthread_cond_wait.c:153
                __status = -512
                _val = 167
                futex_val = <optimized out>
                buffer = {__routine = 0xb4ef33a0 <__condvar_cleanup>, __arg = 0xb23c906c, __canceltype = 0, __prev = 0x0}
                cbuffer = {oldtype = 0, cond = 0xb23ffde8, mutex = 0xb23ffdd0, bc_seq = 0}
                err = <optimized out>
                pshared = 0
                val = <optimized out>
                seq = 83
        #2  0xb549c743 in WTF::ThreadCondition::wait(WTF::Mutex&) () from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #3  0xb5c8be9c in WebCore::IconDatabase::syncThreadMainLoop() () from /usr/lib/libwebkitgtk-1.0.so.0
        No symbol table info available.
        #4  0xb5c8c18c in WebCore::IconDatabase::iconDatabaseSyncThread() () from /usr/lib/libwebkitgtk-1.0.so.0
        No symbol table info available.
        #5  0xb5c8c1eb in WebCore::IconDatabase::iconDatabaseSyncThreadStart(void*) () from /usr/lib/libwebkitgtk-1.0.so.0
        No symbol table info available.
        #6  0xb549bea2 in WTF::threadEntryPoint(void*) () from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #7  0xb549c00e in WTF::wtfThreadEntryPoint(void*) () from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #8  0xb4eeec39 in start_thread (arg=0xb23c9b70) at pthread_create.c:304
                __res = <optimized out>
                __ignore1 = <optimized out>
                __ignore2 = <optimized out>
                pd = 0xb23c9b70
                now = <optimized out>
                unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1259343884, 0, 4001536, -1304653112, 462578355, -1083592514}, mask_was_saved = 0}}, 
                  priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
                not_first_call = <optimized out>
                freesize = <optimized out>
                __PRETTY_FUNCTION__ = "start_thread"
        #9  0xb4e5c23e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130
        No locals.

        Thread 2 (Thread 0xb11ffb70 (LWP 6258)):
        #0  0xb76cb424 in __kernel_vsyscall ()
        No symbol table info available.
        #1  0xb4e4e846 in *__GI___poll (fds=0xb4ee4ff4, fds at entry=0xb82ab860, nfds=nfds at entry=3, timeout=timeout at entry=-1)
            at ../sysdeps/unix/sysv/linux/poll.c:87
                resultvar = <optimized out>
                oldtype = 0
                result = <optimized out>
        #2  0xb75a207b in g_poll (fds=0xb82ab860, nfds=3, timeout=-1)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gpoll.c:132
        No locals.
        #3  0xb7593950 in g_main_context_poll (n_fds=3, fds=0xb82ab860, timeout=<optimized out>, context=0xb82abbe0, priority=<optimized out>)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gmain.c:3440
                poll_func = <optimized out>
        #4  g_main_context_iterate (context=0xb82abbe0, block=block at entry=1, dispatch=dispatch at entry=1, 
            self=<error reading variable: Unhandled dwarf expression opcode 0xfa>)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gmain.c:3141
                max_priority = 2147483647
                timeout = -1
                some_ready = <optimized out>
                nfds = 3
                allocated_nfds = <optimized out>
                fds = 0xb82ab860
        #5  0xb7593e2b in g_main_loop_run (loop=0xb82abbd0) at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gmain.c:3340
                __PRETTY_FUNCTION__ = "g_main_loop_run"
        #6  0xb6f67bda in gdbus_shared_thread_func (user_data=0xb82ab650)
            at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./gio/gdbusprivate.c:277
                data = 0xb82ab650
        #7  0xb75b7d93 in g_thread_proxy (data=0xb82be830) at /build/buildd-glib2.0_2.32.3-1-i386-987P8N/glib2.0-2.32.3/./glib/gthread.c:801
                thread = 0xb82be830
        #8  0xb4eeec39 in start_thread (arg=0xb11ffb70) at pthread_create.c:304
                __res = <optimized out>
                __ignore1 = <optimized out>
                __ignore2 = <optimized out>
                pd = 0xb11ffb70
                now = <optimized out>
                unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1259343884, 0, 4001536, -1323306296, 1565680309, -1083592514}, mask_was_saved = 0}}, 
                  priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
                not_first_call = <optimized out>
                freesize = <optimized out>
                __PRETTY_FUNCTION__ = "start_thread"
        #9  0xb4e5c23e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130
        No locals.

        Thread 1 (Thread 0xb2f98890 (LWP 6251)):
        #0  0xb547d9a1 in WTF::TCMalloc_Central_FreeList::FetchFromSpans() () from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #1  0xb547de6d in WTF::TCMalloc_Central_FreeList::RemoveRange(void**, void**, int*) () from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #2  0xb54813a9 in WTF::fastRealloc(void*, unsigned int) () from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #3  0xb532df52 in JSC::JIT::privateCompile(JSC::MacroAssemblerCodePtr*) () from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #4  0xb53ef15f in JSC::JIT::compile(JSC::JSGlobalData*, JSC::CodeBlock*, JSC::MacroAssemblerCodePtr*) ()
           from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #5  0xb53eca88 in JSC::FunctionExecutable::compileForCallInternal(JSC::ExecState*, JSC::ScopeChainNode*, JSC::JITCode::JITType) ()
           from /usr/lib/libjavascriptcoregtk-1.0.so.0
        No symbol table info available.
        #6  0xa977d250 in ?? ()
        No symbol table info available.
        Backtrace stopped: previous frame inner to this frame (corrupt stack?)
        quit

According to the Web segfaults in `WTF::TCMalloc_Central_FreeList::FetchFromSpans()` happen rather often. In 26349#2 [1] the following is written by Mark Rowe.

        Crashing inside TCMalloc typically indicates that there is heap corruption.

Though I do not know what that applies.

[1] https://bugs.webkit.org/show_bug.cgi?id=26349
--- end quote ---


Thanks,

Paul


[2] https://bugs.webkit.org/show_bug.cgi?id=93765

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-3-686-pae (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libjavascriptcoregtk-1.0-0 depends on:
ii  libc6         2.13-35
ii  libgcc1       1:4.7.1-6
ii  libglib2.0-0  2.32.3-1
ii  libicu48      4.8.1.1-8
ii  libstdc++6    4.7.1-6

libjavascriptcoregtk-1.0-0 recommends no packages.

libjavascriptcoregtk-1.0-0 suggests no packages.

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-webkit-maintainers/attachments/20120811/7e393a31/attachment.pgp>


More information about the Pkg-webkit-maintainers mailing list