Bug#728789: dwb: crash with segmentation fault very often

[Sebastian Ramacher]

On 2014-01-07 15:05:42, Alberto Garcia wrote:
> On Sat, Dec 21, 2013 at 08:28:23PM +0100, Sebastian Ramacher wrote:
> 
> > Thank you. Reassigning to libwebkitgtk-3.0-0 since the bug occurs
> > with multiple webkit based browsers.
> 
> Actually I wonder if it's related to this one:
> 
>    https://bugs.webkit.org/show_bug.cgi?id=125461
> 
> Does it also crash for you in tbpl.mozilla.org? Is your backtrace
> similar?

Yes, it crashes for me there. This is the backtrace that I get:

#0  0xef5b407b in ?? ()
#1  0xf5793ee2 in JSC::JITCode::execute (this=this at entry=0xef7cba50, stack=stack at entry=0xf1aa4e1c, callFrame=callFrame at entry=0xef954038, 
    vm=vm at entry=0xf1ade000) at ../Source/JavaScriptCore/jit/JITCode.cpp:46
#2  0xf577c9f7 in JSC::Interpreter::execute (this=0xf1aa4e10, program=program at entry=0xea1f1bf0, callFrame=callFrame at entry=0xed86f48c, 
    thisObj=0xed8afdb0) at ../Source/JavaScriptCore/interpreter/Interpreter.cpp:766
#3  0xf588d35f in JSC::evaluate (exec=exec at entry=0xed86f48c, source=..., thisValue=..., returnedException=returnedException at entry=0xffffccf0)
    at ../Source/JavaScriptCore/runtime/Completion.cpp:83
#4  0xf663fc94 in evaluate (exception=0xffffcce0, thisValue=..., source=..., exec=0xed86f48c)
    at ../Source/WebCore/bindings/js/JSMainThreadExecState.h:74
#5  WebCore::ScriptController::evaluateInWorld (this=this at entry=0x567cd510, sourceCode=..., world=0xf1a99ae0)
    at ../Source/WebCore/bindings/js/ScriptController.cpp:142
#6  0xf66402db in WebCore::ScriptController::evaluate (this=0x567cd510, sourceCode=...)
    at ../Source/WebCore/bindings/js/ScriptController.cpp:158
#7  0xf682383d in executeScript (sourceCode=..., this=0xef7b1494) at ../Source/WebCore/dom/ScriptElement.cpp:317
#8  WebCore::ScriptElement::executeScript (this=0xef7b1494, sourceCode=...) at ../Source/WebCore/dom/ScriptElement.cpp:287
#9  0xf68277f3 in prepareScript (supportLegacyTypes=WebCore::ScriptElement::DisallowLegacyTypeInTypeAttribute, scriptStartPosition=..., 
    this=0xef7b1494) at ../Source/WebCore/dom/ScriptElement.cpp:246
#10 WebCore::ScriptElement::prepareScript (this=this at entry=0xef7b1494, scriptStartPosition=..., 
    supportLegacyTypes=supportLegacyTypes at entry=WebCore::ScriptElement::DisallowLegacyTypeInTypeAttribute)
    at ../Source/WebCore/dom/ScriptElement.cpp:172
#11 0xf69f4aa2 in WebCore::HTMLScriptRunner::runScript (this=this at entry=0xf1aeb3c0, script=0xef7b1460, scriptStartPosition=...)
    at ../Source/WebCore/html/parser/HTMLScriptRunner.cpp:312
#12 0xf69f53c5 in WebCore::HTMLScriptRunner::execute (this=0xf1aeb3c0, scriptElement=..., scriptStartPosition=...)
    at ../Source/WebCore/html/parser/HTMLScriptRunner.cpp:181
#13 0xf69df005 in WebCore::HTMLDocumentParser::runScriptsForPausedTreeBuilder (this=this at entry=0xf1af3a00)
    at ../Source/WebCore/html/parser/HTMLDocumentParser.cpp:271
#14 0xf69df0aa in WebCore::HTMLDocumentParser::canTakeNextToken (this=this at entry=0xf1af3a00, 
    mode=mode at entry=WebCore::HTMLDocumentParser::AllowYield, session=...) at ../Source/WebCore/html/parser/HTMLDocumentParser.cpp:290
#15 0xf69e15f3 in WebCore::HTMLDocumentParser::pumpTokenizer (this=this at entry=0xf1af3a00, 
    mode=mode at entry=WebCore::HTMLDocumentParser::AllowYield) at ../Source/WebCore/html/parser/HTMLDocumentParser.cpp:535
#16 0xf69e18b2 in WebCore::HTMLDocumentParser::resumeParsingAfterYield (this=0xf1af3a00)
    at ../Source/WebCore/html/parser/HTMLDocumentParser.cpp:259
#17 0xf69f0775 in WebCore::HTMLParserScheduler::continueNextChunkTimerFired (this=0xf1a9d1f8, timer=0xf1a9d208)
    at ../Source/WebCore/html/parser/HTMLParserScheduler.cpp:124
#18 0xf69f0b35 in WebCore::Timer<WebCore::HTMLParserScheduler>::fired (this=0xf1a9d208) at ../Source/WebCore/platform/Timer.h:114
#19 0xf657ede2 in WebCore::ThreadTimers::sharedTimerFiredInternal (this=0xf1a930a0) at ../Source/WebCore/platform/ThreadTimers.cpp:129
#20 0xf657ee65 in WebCore::ThreadTimers::sharedTimerFired () at ../Source/WebCore/platform/ThreadTimers.cpp:105
#21 0xf65950db in WebCore::timeout_cb () at ../Source/WebCore/platform/gtk/SharedTimerGtk.cpp:49
#22 0xf53e40b1 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#23 0xf53e342e in g_main_context_dispatch () from /lib/i386-linux-gnu/libglib-2.0.so.0
#24 0xf53e37d8 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#25 0xf53e3898 in g_main_context_iteration () from /lib/i386-linux-gnu/libglib-2.0.so.0
#26 0xf5b9ae44 in g_application_run () from /usr/lib/i386-linux-gnu/libgio-2.0.so.0
#27 0x5657561c in ?? ()
#28 0x565720c4 in main ()

There seem to be similarities with the backtrace from the webkit bug
report.

Regards
-- 
Sebastian Ramacher
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-webkit-maintainers/attachments/20140123/6ea380f5/attachment.sig>