Bug#728789: dwb: crash with segmentation fault very often

[Sebastian Ramacher]

Control: tags -1 = confirmed
Control: reassign -1 libwebkitgtk-3.0-0 2.2.1-2
Control: affects -1 + dwb luakit

On 2013-12-21 16:27:00, Florian Birée wrote:
> Le Sat, 30 Nov 2013 18:04:06 +0100,
> Sebastian Ramacher <sramacher at debian.org> a écrit :
> > >    A working browser ;-)
> > 
> > I tried to reproduce the crash but I wasn't able to. Does this work
> > with other webkit based browsers?
> 
> Exactly the same problem with luakit.
> 
> > > Versions of packages dwb depends on:
> > > ii  libc6                       2.17-93
> > > ii  libgdk-pixbuf2.0-0          2.28.2-1
> > > ii  libglib2.0-0                2.36.4-1
> > > ii  libgnutls26                 2.12.23-8
> > > ii  libgtk-3-0                  3.8.6-1
> > > ii  libjavascriptcoregtk-3.0-0  2.2.1-2
> > > ii  libpango1.0-0               1.36.0-1
> > > ii  libsoup2.4-1                2.44.1-1
> > > ii  libwebkitgtk-3.0-0          2.2.1-2
> > 
> > There are newer versions of libwebkitgtk-3.0-0 and
> > libjavascriptcoregtk-3.0-0 available in unstable. Does the crash go
> > away after an upgrade of these two packages?
> 
> Same problem with libwebkitgtk-3.0-0 and libjavascriptcoregtk-3.0-0
> 2.2.3-1.
> 
> But the bug doesn't appear with stable versions of
> libwekitgtk-3.0-0 and libjavascriptcoregtk-3.0-0 (versions 1.8.1-3.4).
> It's my current workaround.

Thank you. Reassigning to libwebkitgtk-3.0-0 since the bug occurs with
multiple webkit based browsers.

I've now successfully reproduced the crash. It only happens on i386 for
me. amd64 works fine. gdb gives me the following backtrace when I try to
follow any link from http://fr.wikipedia.org in dwb:

#0  0xf67f25b5 in WebCore::EventListenerIterator::EventListenerIterator (this=0xffffc924, target=0x566ed940)
    at ../Source/WebCore/dom/EventListenerMap.cpp:239
#1  0xf6629b09 in visitJSEventListeners (visitor=..., this=0x566ed940) at ../Source/WebCore/dom/EventTarget.h:186
#2  WebCore::JSNode::visitChildren (cell=0xee83f8c8, visitor=...) at ../Source/WebCore/bindings/js/JSNodeCustom.cpp:202
#3  0xf576e5a3 in visitChildren (cell=0xee83f8c8, visitor=...) at ../Source/JavaScriptCore/heap/SlotVisitor.cpp:95
#4  JSC::SlotVisitor::drain (this=this at entry=0xf1b047c4) at ../Source/JavaScriptCore/heap/SlotVisitor.cpp:148
#5  0xf5771650 in donateAndDrain (this=0xf1b047c4) at ../Source/JavaScriptCore/heap/SlotVisitorInlines.h:208
#6  JSC::Heap::markRoots (this=this at entry=0xf1b0000c) at ../Source/JavaScriptCore/heap/Heap.cpp:586
#7  0xf57730ff in JSC::Heap::collect (this=this at entry=0xf1b0000c, sweepToggle=sweepToggle at entry=JSC::Heap::DoSweep)
    at ../Source/JavaScriptCore/heap/Heap.cpp:760
#8  0xf5773a4c in JSC::Heap::collectAllGarbage (this=0xf1b0000c) at ../Source/JavaScriptCore/heap/Heap.cpp:713
#9  0xf65d7bcb in WebCore::collect () at ../Source/WebCore/bindings/js/GCController.cpp:42
#10 0xf65d7ea5 in WebCore::Timer<WebCore::GCController>::fired (this=0xf1abe118) at ../Source/WebCore/platform/Timer.h:114
#11 0xf658ade2 in WebCore::ThreadTimers::sharedTimerFiredInternal (this=0xf1ab50a0) at ../Source/WebCore/platform/ThreadTimers.cpp:129
#12 0xf658ae65 in WebCore::ThreadTimers::sharedTimerFired () at ../Source/WebCore/platform/ThreadTimers.cpp:105
#13 0xf65a10db in WebCore::timeout_cb () at ../Source/WebCore/platform/gtk/SharedTimerGtk.cpp:49
#14 0xf53f00b1 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#15 0xf53ef42e in g_main_context_dispatch () from /lib/i386-linux-gnu/libglib-2.0.so.0
#16 0xf53ef7d8 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#17 0xf53ef898 in g_main_context_iteration () from /lib/i386-linux-gnu/libglib-2.0.so.0
#18 0xf5ba6e44 in g_application_run () from /usr/lib/i386-linux-gnu/libgio-2.0.so.0
#19 0x5657561c in ?? ()
#20 0x565720c4 in main ()

For luakit the backtrace looks the same.

Regards
-- 
Sebastian Ramacher
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 853 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-webkit-maintainers/attachments/20140107/e84942cc/attachment-0001.sig>