Bug#651636: libwebkitgtk-1.0-0: GtkLauncher crashes while browsing websites

[Steven Chamberlain]

Package: libjavascriptcoregtk-1.0-0
Version: 1.8.1-2
Followup-For: Bug #651636

Hi,

New webkit is available now in sid for mipsel so I tested to see if this bug was still present.  Unfortunately it seems to segfault even sooner.  The attached gdb backtrace was easily reproducible with:

#!/bin/sh -e
cd $(mktemp -d)
ulimit -c unlimited
exec /usr/lib/webkitgtk-1.0-0/libexec/GtkLauncher \
 'http://www.webkit.org/perf/sunspider-0.9.1/sunspider-0.9.1/driver.html'

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: mipsel (mips64)

Kernel: Linux 3.2.0-2-loongson-2f
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/mksh-static

Versions of packages libjavascriptcoregtk-1.0-0 depends on:
ii  libc6         2.13-32
ii  libgcc1       1:4.7.0-6
ii  libglib2.0-0  2.32.1-1
ii  libicu48      4.8.1.1-6
ii  libstdc++6    4.7.0-6

libjavascriptcoregtk-1.0-0 recommends no packages.

libjavascriptcoregtk-1.0-0 suggests no packages.

-- no debconf information
-------------- next part --------------
Reading symbols from /usr/lib/webkitgtk-1.0-0/libexec/GtkLauncher...(no debugging symbols found)...done.
[New LWP 6096]
[New LWP 6097]
[New LWP 6099]
[New LWP 6100]
[New LWP 6101]
[New LWP 6105]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/mipsel-linux-gnu/loongson2f/libthread_db.so.1".
Core was generated by `/usr/lib/webkitgtk-1.0-0/libexec/GtkLauncher http://www.webkit.org/perf/sunspid'.
Program terminated with signal 11, Segmentation fault.
#0  0x751b63c8 in JSC::JSArray::increaseVectorLength(JSC::JSGlobalData&, unsigned int) () from /usr/lib/libjavascriptcoregtk-1.0.so.0
(gdb) bt
#0  0x751b63c8 in JSC::JSArray::increaseVectorLength(JSC::JSGlobalData&, unsigned int) () from /usr/lib/libjavascriptcoregtk-1.0.so.0
#1  0x751b9b4c in JSC::JSArray::putByIndexBeyondVectorLength(JSC::ExecState*, unsigned int, JSC::JSValue) () from /usr/lib/libjavascriptcoregtk-1.0.so.0
#2  0x751b9f58 in JSC::JSArray::putByIndex(JSC::JSCell*, JSC::ExecState*, unsigned int, JSC::JSValue) () from /usr/lib/libjavascriptcoregtk-1.0.so.0
#3  0x750ee8c0 in JITStubThunked_op_put_by_val ()
   from /usr/lib/libjavascriptcoregtk-1.0.so.0
#4  0x750e7b20 in cti_op_put_by_val ()
   from /usr/lib/libjavascriptcoregtk-1.0.so.0
#5  0x6b078788 in ?? ()
warning: GDB can't find the start of the function at 0x6b078786.

    GDB is unable to find the start of the function at 0x6b078786
and thus can't determine the size of that function's stack frame.
This means that GDB may be unable to access that stack frame, or
the frames below it.
    This problem is most likely caused by an invalid program counter or
stack pointer.
    However, if you think GDB should simply search farther back
from 0x6b078786 for code which looks like the beginning of a
function, you can increase the range of the search using the `set
heuristic-fence-post' command.
(gdb) info locals
No symbol table info available.
(gdb)