buggNewSense GNU/Linux - Bugs: bug #39232, epiphany-browser frequently...


You are not allowed to post comments on this tracker with your current authentication level.

bug #39232: epiphany-browser frequently segfaults if javascript is enabled

Submitted by:  Harry Prevor <habstinat>
Submitted on:  Tue 11 Jun 2013 06:43:29 PM UTC  
Category:  gNewSense 3 Severity:  3 - Normal
Item Group:  mipsel Status:  None
Privacy:  Public Assigned to:  None
Open/Closed:  Open

Fri 23 Aug 2013 05:44:36 AM UTC, comment #1:

It just occurred to me that, being that this bug exists and is reproducible on all Yeeloongs and now that Parkes is stable, the default browser on mipsel should probably change from Epiphany to Iceweasel. It's nearly impossible to browse using Epiphany due to this bug.

Midori seems to segfault occasionally as well (although I haven't tried to debug it); the problem is probably specific to Webkit.

Harry Prevor <habstinat>
Project Member
Tue 11 Jun 2013 06:43:29 PM UTC, original submission:

The following GDB output shows me going to <http://reddit.com/r/linux>, clicking on one link on the front page, then going to <http://reddit.com/r/gnu>. After about two minutes of regular browsing the browser segfaults and crashes. I do have epiphany-browser-dbg installed. The only console output without using gdb is "Segmentation fault".

habs@marielle:~/c/1.9$ gdb epiphany-browser
GNU gdb (GDB) 7.0.1-debian
Copyright (C) 2009 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "mipsel-linux-gnu".
For bug reporting instructions, please see:
Reading symbols from /usr/bin/epiphany-browser...Reading symbols from /usr/lib/debug/usr/bin/epiphany-browser...done.
(no debugging symbols found)...done.
(gdb) run
Starting program: /usr/bin/epiphany-browser
[Thread debugging using libthread_db enabled]
[New Thread 0x7058f410 (LWP 4594)]
[New Thread 0x6fc67410 (LWP 4595)]
[New Thread 0x6efdb410 (LWP 4596)]
[Thread 0x6efdb410 (LWP 4596) exited]
[New Thread 0x6efdb410 (LWP 4605)]
[Thread 0x6efdb410 (LWP 4605) exited]
[New Thread 0x6efdb410 (LWP 4606)]
[Thread 0x6efdb410 (LWP 4606) exited]
[New Thread 0x6efdb410 (LWP 4607)]
[New Thread 0x6e10b410 (LWP 4608)]
[New Thread 0x6d763410 (LWP 4609)]
[New Thread 0x6cf63410 (LWP 4610)]
[New Thread 0x6c763410 (LWP 4611)]
[New Thread 0x6bf63410 (LWP 4612)]
[New Thread 0x6b763410 (LWP 4613)]
[New Thread 0x6af63410 (LWP 4614)]

[Thread 0x6efdb410 (LWP 4607) exited]
[Thread 0x6af63410 (LWP 4614) exited]
[Thread 0x6cf63410 (LWP 4610) exited]
[Thread 0x6d763410 (LWP 4609) exited]
[Thread 0x6e10b410 (LWP 4608) exited]
[Thread 0x6bf63410 (LWP 4612) exited]
[Thread 0x6b763410 (LWP 4613) exited]
[Thread 0x6c763410 (LWP 4611) exited]
[New Thread 0x6c763410 (LWP 4615)]
[New Thread 0x6b763410 (LWP 4616)]
[Thread 0x6b763410 (LWP 4616) exited]
[Thread 0x6c763410 (LWP 4615) exited]
[New Thread 0x6c763410 (LWP 4617)]
[Thread 0x6c763410 (LWP 4617) exited]

[New Thread 0x6c763410 (LWP 4618)]
[New Thread 0x6b763410 (LWP 4619)]
[New Thread 0x6bf63410 (LWP 4620)]
[New Thread 0x6e10b410 (LWP 4621)]
[New Thread 0x6d763410 (LWP 4622)]
[Thread 0x6e10b410 (LWP 4621) exited]
[Thread 0x6c763410 (LWP 4618) exited]
[Thread 0x6b763410 (LWP 4619) exited]
[Thread 0x6bf63410 (LWP 4620) exited]
[Thread 0x6d763410 (LWP 4622) exited]
[New Thread 0x6d763410 (LWP 4623)]
[New Thread 0x6bf63410 (LWP 4624)]
[New Thread 0x6b763410 (LWP 4625)]
[New Thread 0x6c763410 (LWP 4626)]
[Thread 0x6c763410 (LWP 4626) exited]
[Thread 0x6d763410 (LWP 4623) exited]
[Thread 0x6b763410 (LWP 4625) exited]
[New Thread 0x6b763410 (LWP 4627)]
[New Thread 0x6d763410 (LWP 4628)]
[New Thread 0x6c763410 (LWP 4629)]
[New Thread 0x6e10b410 (LWP 4630)]
[New Thread 0x6af63410 (LWP 4631)]
[Thread 0x6b763410 (LWP 4627) exited]
[Thread 0x6af63410 (LWP 4631) exited]
[Thread 0x6d763410 (LWP 4628) exited]
[Thread 0x6bf63410 (LWP 4624) exited]
[Thread 0x6c763410 (LWP 4629) exited]
[Thread 0x6e10b410 (LWP 4630) exited]
[New Thread 0x6e10b410 (LWP 4632)]
[Thread 0x6e10b410 (LWP 4632) exited]
[New Thread 0x6e10b410 (LWP 4633)]
[New Thread 0x6c763410 (LWP 4634)]
[New Thread 0x6bf63410 (LWP 4635)]
[New Thread 0x6d763410 (LWP 4636)]
[Thread 0x6c763410 (LWP 4634) exited]
[Thread 0x6d763410 (LWP 4636) exited]
[Thread 0x6bf63410 (LWP 4635) exited]
[Thread 0x6e10b410 (LWP 4633) exited]
[New Thread 0x6e10b410 (LWP 4637)]
[Thread 0x6e10b410 (LWP 4637) exited]

[New Thread 0x6e10b410 (LWP 4638)]
[New Thread 0x6bf63410 (LWP 4639)]
[Thread 0x6e10b410 (LWP 4638) exited]
[Thread 0x6bf63410 (LWP 4639) exited]

Program received signal SIGSEGV, Segmentation fault.
0x774a777c in SLL_PopRange (ptr=0x6ccf6a68)
at ../JavaScriptCore/wtf/FastMalloc.cpp:778
778 ../JavaScriptCore/wtf/FastMalloc.cpp: No such file or directory.
in ../JavaScriptCore/wtf/FastMalloc.cpp
Current language: auto
The current source language is "auto; currently c++".
(gdb) backtrace
#0 0x774a777c in SLL_PopRange (ptr=0x6ccf6a68)
at ../JavaScriptCore/wtf/FastMalloc.cpp:778
#1 WTF::TCMalloc_ThreadCache_FreeList::PopRange (ptr=0x6ccf6a68)
at ../JavaScriptCore/wtf/FastMalloc.cpp:2102
#2 WTF::TCMalloc_ThreadCache::ReleaseToCentralCache (ptr=0x6ccf6a68)
at ../JavaScriptCore/wtf/FastMalloc.cpp:2816
#3 WTF::TCMalloc_ThreadCache::Deallocate (ptr=0x6ccf6a68)
at ../JavaScriptCore/wtf/FastMalloc.cpp:2785
#4 do_free (ptr=0x6ccf6a68) at ../JavaScriptCore/wtf/FastMalloc.cpp:3536
#5 WTF::fastFree (ptr=0x6ccf6a68) at ../JavaScriptCore/wtf/FastMalloc.cpp:3735
#6 0x76b4cd4c in fastDeleteSkippingDestructor<WebCore::CSSSelector> (
this=0x6ccf64d8, selectorVector=...)
at ../JavaScriptCore/wtf/FastAllocBase.h:311
#7 WebCore::CSSSelectorList::adoptSelectorVector (this=0x6ccf64d8,
selectorVector=...) at ../WebCore/css/CSSSelectorList.cpp:60
#8 0x76b257a8 in WebCore::CSSStyleRule::adoptSelectorVector (this=0x7ffef540,
selectors=0x7ffef61c) at ../WebCore/css/CSSStyleRule.h:53
#9 WebCore::CSSParser::createStyleRule (this=0x7ffef540, selectors=0x7ffef61c)
at ../WebCore/css/CSSParser.cpp:5084
#10 0x773371b4 in cssyyparse (parser=<value optimized out>)
from /usr/lib/libwebkit-1.0.so.2
#11 0x76b2be40 in WebCore::CSSParser::parseSheet (this=0x7ffef540,
sheet=<value optimized out>, string=<value optimized out>)
---Type <return> to continue, or q <return> to quit---
at ../WebCore/css/CSSParser.cpp:229
#12 0x76b83178 in WebCore::CSSStyleSheet::parseString (this=0x6e90dd20,
string=<value optimized out>, strict=<value optimized out>)
at ../WebCore/css/CSSStyleSheet.cpp:174
#13 0x76d4345c in WebCore::HTMLLinkElement::setCSSStyleSheet (this=0x6ed9f3f0,
href=..., baseURL=..., charset=..., sheet=0x6fcdfb00)
at ../WebCore/html/HTMLLinkElement.cpp:281
#14 0x76dc6efc in WebCore::CachedCSSStyleSheet::didAddClient (this=0x6fcdfb00,
c=0x6ed9f42c) at ../WebCore/loader/CachedCSSStyleSheet.cpp:56
#15 0x76d4493c in WebCore::HTMLLinkElement::process (this=0x6ed9f3f0)
at ../WebCore/html/HTMLLinkElement.cpp:219
#16 0x76ba0054 in WebCore::ContainerNode::addChild (this=0x6d814600, newChild=DWARF-2 expression error: DW_OP_reg operations must be used either alone or in conjuction with DW_OP_piece.
at ../WebCore/dom/ContainerNode.cpp:556
#17 0x76d57f80 in WebCore::HTMLParser::insertNode (this=0x6e90c1f8,
n=0x6ed9f3f0, flat=false) at ../WebCore/html/HTMLParser.cpp:376
#18 0x76d58bfc in WebCore::HTMLParser::insertNodeAfterLimitDepth (
this=0x6e90c1f8, t=<value optimized out>)
at ../WebCore/html/HTMLParser.cpp:233
#19 WebCore::HTMLParser::parseToken (this=0x6e90c1f8, t=<value optimized out>)
at ../WebCore/html/HTMLParser.cpp:305
#20 0x76d73f48 in WebCore::HTMLTokenizer::processToken (this=0x6cf0c000)
at ../WebCore/html/HTMLTokenizer.cpp:1949
#21 0x76d782a0 in WebCore::HTMLTokenizer::parseTag (this=0x6cf0c000, src=...,
---Type <return> to continue, or q <return> to quit---
state=...) at ../WebCore/html/HTMLTokenizer.cpp:1521
#22 0x76d7939c in WebCore::HTMLTokenizer::write (this=0x6cf0c000,
str=<value optimized out>, appendData=<value optimized out>)
at ../WebCore/html/HTMLTokenizer.cpp:1714
#23 0x76df2914 in WebCore::FrameLoader::write (this=0x6fcac828,
str=0xc2ba10 "<!doctype html><html xmlns=\"http://www.w3.org/1999/xhtml\" lang=\"lol\" xml:lang=\"lol\" ><head><title>News and discussion of GNU projects, all else goes in /r/freesoftware</title><meta name=\"keywords\" con"...,
len=<value optimized out>, flush=false)
at ../WebCore/loader/FrameLoader.cpp:939
#24 0x772fcfe0 in WebKit::FrameLoaderClient::committedLoad (this=0x6fcaaf00,
data=0xc2ba10 "<!doctype html><html xmlns=\"http://www.w3.org/1999/xhtml\" lang=\"lol\" xml:lang=\"lol\" ><head><title>News and discussion of GNU projects, all else goes in /r/freesoftware</title><meta name=\"keywords\" con"...,
length=32) at ../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:263
#25 0x76dda50c in WebCore::DocumentLoader::commitLoad (this=0x6edca580,
data=<value optimized out>, length=<value optimized out>)
at ../WebCore/loader/DocumentLoader.cpp:280
#26 0x76e28d5c in WebCore::ResourceLoader::didReceiveData (this=0x6cf34000,
data=0xc2ba10 "<!doctype html><html xmlns=\"http://www.w3.org/1999/xhtml\" lang=\"lol\" xml:lang=\"lol\" ><head><title>News and discussion of GNU projects, all else goes in /r/freesoftware</title><meta name=\"keywords\" con"...,
---Type <return> to continue, or q <return> to quit---
length=20239, lengthReceived=<value optimized out>, allAtOnce=32)
at ../WebCore/loader/ResourceLoader.cpp:259
#27 0x76e137b4 in WebCore::MainResourceLoader::didReceiveData (
data=0xc2ba10 "<!doctype html><html xmlns=\"http://www.w3.org/1999/xhtml\" lang=\"lol\" xml:lang=\"lol\" ><head><title>News and discussion of GNU projects, all else goes in /r/freesoftware</title><meta name=\"keywords\" con"...,
length=20239, lengthReceived=0, allAtOnce=false)
at ../WebCore/loader/MainResourceLoader.cpp:405
#28 0x76e284d8 in WebCore::ResourceLoader::didReceiveData (this=0x6fd88240,
data=<value optimized out>, length=32, lengthReceived=0)
at ../WebCore/loader/ResourceLoader.cpp:409
#29 0x772d98c0 in gotChunkCallback (msg=<value optimized out>,
chunk=<value optimized out>, data=<value optimized out>)
at ../WebCore/platform/network/soup/ResourceHandleSoup.cpp:285
#30 0x75f9ec70 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#31 0x75fbd308 in ?? () from /usr/lib/libgobject-2.0.so.0
warning: GDB can't find the start of the function at 0x75fbd307.

GDB is unable to find the start of the function at 0x75fbd307
and thus can't determine the size of that function's stack frame.
This means that GDB may be unable to access that stack frame, or
the frames below it.
This problem is most likely caused by an invalid program counter or
---Type <return> to continue, or q <return> to quit---
stack pointer.
However, if you think GDB should simply search farther back
from 0x75fbd307 for code which looks like the beginning of a
function, you can increase the range of the search using the `set
heuristic-fence-post' command.
Backtrace stopped: previous frame inner to this frame (corrupt stack?)

Harry Prevor <habstinat>
Project Member


No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by habstinat (Submitted the item)



    No changes have been made to this item

    Back to the top

    Powered by Savane 3.4