[webkit-dev] https pages crashes WebKit(GTK+DFB) on ARM

Srinivas Rao M Hamse msrinirao at gmail.com
Thu Mar 6 06:31:48 PST 2008


*Forwarding the message to the list with some more debugging information.

*Hi,

The backtrace is finally available. From this i i think it is crashing in *
Balloc()* function. We have enabled swap, And when the crash happened there
was ample amount of memory free in the system. This crash is consistently
reproducible on ARM.

crash point is at
JavaScriptCore/kjs/dtoa.cpp:522
The pointer of freenode is corrupted value.

*(gdb) p freelist[k]
$2 = (Bigint *) 0x3000
(gdb) p freelist
$24 = {0x1bbe30, 0x30303030 <repeats 13 times>, 0x3000, 0x0}
(gdb) p rv
$25 = (Bigint *) 0x3000
(gdb) p rv->next
Cannot access memory at address 0x3000
(gdb) p
*rv
*



*Here is the output of meminfo ofter the crash.*

 # cat /proc/meminfo
*MemTotal:        73400 kB
MemFree:          1600 kB
*Buffers:             0 kB
Cached:           2692 kB
*SwapCached:      29888 kB*
Active:          48352 kB
Inactive:         6736 kB
HighTotal:           0 kB
HighFree:            0 kB
LowTotal:        73400 kB
LowFree:          1600 kB
*SwapTotal:     1953464 kB
SwapFree:      1794440 kB*
Dirty:               0 kB
Writeback:           0 kB
AnonPages:       49020 kB
Mapped:           1592 kB
Slab:             2376 kB
PageTables:        568 kB
NFS_Unstable:        0 kB
Bounce:              0 kB
CommitLimit:   1990164 kB
Committed_AS:   219836 kB
VmallocTotal:   454656 kB
VmallocUsed:       968 kB
VmallocChunk:   453688 kB


Here is the gdb console output [ .. pretty long trace .. i thought it will
be useful for analysis,  excuse me for that ...]

 # /data/srini/gdb ./GtkLauncher
GNU gdb 6.6
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "arm-linux"...
Using host libthread_db library "/lib/libthread_db.so.1".
(gdb) r https://sourceforge.net
Starting program:
/home/srinirao/docs/webkit/WebKit-r30790.davinci.directfb/debug_gbuild/Programs/.libs/GtkLauncher
https://sourceforge.net
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
[Thread debugging using libthread_db enabled]
[New Thread 16384 (LWP 1184)]
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]

     =======================|  DirectFB 1.1.1  |=======================
          (c) 2001-2007  The DirectFB Organization (directfb.org)
          (c) 2000-2004  Convergence (integrated media) GmbH
        ------------------------------------------------------------

(*) DirectFB/Core: Single Application Core. (2008-03-06 11:15)
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
[New Thread 32769 (LWP 1211)]
[New Thread 16386 (LWP 1218)]
(*) Direct/Thread: Running 'VT Switcher' (CRITICAL, 1218)...
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
init_ir_loop
Inintializing IR
[New Thread 32771 (LWP 1219)]
msp430lib_set_params: success
[New Thread 49156 (LWP 1220)]
[New Thread 65541 (LWP 1221)]
[New Thread 81926 (LWP 1222)]
 got DAVINCI_GPIO_IRQ_WAIT ioctl ...
[New Thread 98311 (LWP 1223)]
(*) Direct/Thread: Running 'LiRC Input' (INPUT, 1223)...
(*) DirectFB/Input: LIRC Device 0.2 (directfb.or got DAVINCI_GPIO_IRQ_WAIT
ioctl ...
g)
(!) Direct/Modules: Could not open module directory
`/home/srinirao/directfb/lib/directfb-1.1-0-pure/gfxdrivers'!
    --> No such file or directory
(*) DirectFB/Graphics: Generic Software Rasterizer 0.6 (directfb.org)
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
(*) DirectFB/Core/WM: Default 0.3 (directfb.org)
(*) FBDev/Mode: Testing 720x480 RGB16
(*) FBDev/Mode: Preparing switch to 720x480 RGB16
(*) FBDev/Mode: Testing 720x480 RGB16
(*) FBDev/Mode: Preparin got DAVINCI_GPIO_IRQ_WAIT ioctl ...
g switch to 720x480 RGB16
(*) FBDev/Mode: Testing 720x480 RGB16
(*) FBDev/Mode: Preparing switch to 720x480 RGB16
(*) FBDev/Mode: Testing 720x480 RGB16
(*) FBDev/Mode: Preparing switch to 720x480 RGB16
(*) FBDev/Mode: Testing 720x480 RGB16
(*) FBDev/Mode: Preparing switch to 720x480 RGB16
(*) FBDev/Surface: Allocated 720x480 16bit RGB16 buffer at offset 0 and
pitch 1440.
(*) FBDev/Mode: (Post)Setting 720x480 RGB16
(*) FBDev/Mode: Switched to 720x480 (720x480) at 16 bit RGB16 (wanted
RGB16).
(*) FBDev/Mode: Testing 720x480 RGB16
(*) FBDev/Mode: Preparing switch to 720x480 RGB16
(*) FBDev/Mode: (Post)Setting 720x480 RGB16
gdkdisplay-directfb.c:122: Getting the return value as 0
 lirc.c: (driver_get_keymap_entry:868) Got Backspace key
[New Thread 114696 (LWP 1224)]
(*) Direct/Thread: Running 'EventBufferFeed' (MESSAGING, 1224)...
 got DAVINCI_GPIO_IRQ_WAIT ioctl ...
UNIMPLEMENTED:
(../WebCore/platform/gtk/PasteboardGtk.cpp:90
WebCore::Pasteboard::Pasteboard())
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:642 virtual void
WebKit::FrameLoaderClient::provisionalLoadStarted())
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:381 virtual bool
WebKit::FrameLoaderClient::hasWebView() const)
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:436 virtual void
WebKit::FrameLoaderClient::setCopiesOnScroll())
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:649 virtual void
WebKit::FrameLoaderClient::prepareForDataSourceReplacement())
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:786 virtual void
WebKit::FrameLoaderClient::transitionToCommittedForNewPage())
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:387 virtual bool
WebKit::FrameLoaderClient::hasFrameView() const)
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/EditorClientGtk.cpp:156 virtual void
WebKit::EditorClient::clearUndoRedoOperations())
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:336 virtual
WebCore::String WebKit::FrameLoaderClient::overrideMediaType() const)
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:398 virtual void
WebKit::FrameLoaderClient::frameLoadCompleted())
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:431 virtual void
WebKit::FrameLoaderClient::forceLayoutForNonHTML())
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/ChromeClientGtk.cpp:261 virtual void
WebKit::ChromeClient::addToDirtyRegion(const WebCore::IntRect&))
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:549 virtual void
WebKit::FrameLoaderClient::cancelPolicyCheck())
UNIMPLEMENTED:
(../WebKit/gtk/webkit/webkitwebview.cpp:485 WebKitNavigationResponse
webkit_web_view_real_navigation_requested(WebKitWebView*, WebKitWebFrame*,
WebKitNetwork
Request*))
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:605 virtual bool
WebKit::FrameLoaderClient::canHandleRequest(const WebCore::ResourceRequest&)
const)
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:600 virtual void
WebKit::FrameLoaderClient::clearArchivedResources())
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:185 virtual void
WebKit::FrameLoaderClient::assignIdentifierToInitialRequest(long unsigned
int, WebCor
e::DocumentLoader*, const WebCore::ResourceRequest&))
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:180 virtual void
WebKit::FrameLoaderClient::dispatchWillSendRequest(WebCore::DocumentLoader*,
long uns
igned int, WebCore::ResourceRequest&, const WebCore::ResourceResponse&))
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:617 virtual bool
WebKit::FrameLoaderClient::representationExistsForURLScheme(const
WebCore::String&) c
onst)

(GtkLauncher:1184): GdkPixbuf-WARNING **: Cannot open pixbuf loader module
file '/home/srinirao/gtk/etc/gtk-2.0/gdk-pixbuf.loaders': No such file or
director
y
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
 got DAVINCI_GPIO_IRQ_WAIT ioctl ...
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:539 virtual void
WebKit::FrameLoaderClient::dispatchDidFirstLayout())

(GtkLauncher:1184): Gdk-DirectFB-WARNING **:
gdk_display_request_selection_notification Unimplemented function


(GtkLauncher:1184): Gdk-DirectFB-WARNING **: gdk_window_set_keep_above() not
implemented.


(GtkLauncher:1184): Gdk-DirectFB-WARNING **: gdk_window_set_keep_below() not
implemented.

[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
[tcsetpgrp failed in terminal_inferior: Inappropriate ioctl for device]
 got DAVINCI_GPIO_IRQ_WAIT ioctl ...
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:611 virtual bool
WebKit::FrameLoaderClient::canShowMIMEType(const WebCore::String&) const)
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:493 virtual void
WebKit::FrameLoaderClient::dispatchWillClose())
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:421 virtual void
WebKit::FrameLoaderClient::makeRepresentation(WebCore::DocumentLoader*))
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:771 virtual void
WebKit::FrameLoaderClient::updateGlobalHistory(const WebCore::KURL&))
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:569 virtual void
WebKit::FrameLoaderClient::willChangeTitle(WebCore::DocumentLoader*))
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:589 virtual bool
WebKit::FrameLoaderClient::isArchiveLoadPending(WebCore::ResourceLoader*)
const)
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:738 virtual bool
WebKit::FrameLoaderClient::willUseArchive(WebCore::ResourceLoader*, const
WebCore::Re
sourceRequest&, const WebCore::KURL&) const)
UNIMPLEMENTED:
(../WebKit/gtk/webkit/webkitwebview.cpp:491 void
webkit_web_view_real_window_object_cleared(WebKitWebView*, WebKitWebFrame*,
OpaqueJSContext*, OpaqueJSValue*
))
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:660 virtual void
WebKit::FrameLoaderClient::dispatchDidReceiveContentLength(WebCore::DocumentLoader*,
long unsigned int, int))
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:554 virtual void
WebKit::FrameLoaderClient::dispatchDidLoadMainResource(WebCore::DocumentLoader*))
UNIMPLEMENTED:
(../WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp:665 virtual void
WebKit::FrameLoaderClient::dispatchDidFinishLoading(WebCore::DocumentLoader*,
long un
signed int))

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 16384 (LWP 1184)]
Balloc (k=14) at ../JavaScriptCore/kjs/dtoa.cpp:522
522                     freelist[k] = rv->next;
Current language:  auto; currently c++
(gdb) p freelist
$1 = {0x1bbe30, 0x30303030 <repeats 13 times>, 0x3000, 0x0}
*(gdb) bt
#0  Balloc (k=14) at ../JavaScriptCore/kjs/dtoa.cpp:522
#1  0x40e9bdf4 in diff (a=0x1cbed8, b=0x189498)
    at ../JavaScriptCore/kjs/dtoa.cpp:1056
#2  0x40e9e0d0 in kjs_dtoa (d=538828.6451612903, mode=0, ndigits=0,
    decpt=0xbea3f624, sign=0x2, rve=0x0)
    at ../JavaScriptCore/kjs/dtoa.cpp:3153
#3  0x40fce79c in KJS::UString::from (d=538828.6451612903)
    at ../JavaScriptCore/kjs/ustring.cpp:613
#4  0x40eee87c in KJS::NumberImp::toString (this=0x189498)
    at ../JavaScriptCore/kjs/internal.cpp:114
#5  0x40eaefbc in KJS::globalFuncParseInt (exec=0xbea3fd50,
args=@0xbea3f8ac)
    at ../JavaScriptCore/kjs/value.h:305
#6  0x40eabc10 in KJS::PrototypeFunction::callAsFunction (this=0x3000,
    exec=0x189498, thisObj=0x412386c4, args=@0x11060)
    at ../JavaScriptCore/kjs/function.cpp:891
#7  0x40f38c30 in KJS::JSObject::call (this=0x433709c0, exec=0xbea3fd50,
    thisObj=0x43370000, args=@0xbea3f8ac)
    at ../JavaScriptCore/kjs/object.cpp:96
#8  0x40f7c78c in KJS::FunctionCallResolveNode::inlineEvaluate (
    this=0x120a88, exec=0xbea3fd50) at ../JavaScriptCore/kjs/nodes.cpp:1034
#9  0x40f64494 in KJS::ArgumentListNode::evaluateList (this=0x120aa0,
    exec=0xbea3fd50, list=@0xbea3f9f4) at ../JavaScriptCore/wtf/RefPtr.h:55
#10 0x40f7c800 in KJS::FunctionCallResolveNode::inlineEvaluate (
    this=0x120ac8, exec=0xbea3fd50) at ../JavaScriptCore/wtf/RefPtr.h:55
#11 0x40f568cc in KJS::ConditionalNode::evaluate (this=0x120ae0,
    exec=0xbea3fd50) at ../JavaScriptCore/wtf/RefPtr.h:55
#12 0x40f5c55c in KJS::AddNode::evaluate (this=0x11e450, exec=0xbea3fd50)
    at ../JavaScriptCore/wtf/RefPtr.h:55
#13 0x40f5360c in KJS::ReturnNode::execute (this=0x11e468, exec=0xbea3fd50)
    at ../JavaScriptCore/wtf/RefPtr.h:55
#14 0x40f64c00 in KJS::BlockNode::execute (this=0x3000, exec=0xbea3fd50)
    at ../JavaScriptCore/wtf/RefPtr.h:438
#15 0x40f781d8 in KJS::FunctionBodyNode::execute (this=0xe2ad8,
    exec=0xbea3fd50) at ../JavaScriptCore/kjs/nodes.cpp:4623
#16 0x40ea9f34 in KJS::FunctionImp::callAsFunction (this=0x433753e0,
    exec=0xbea40208, thisObj=0x43370000, args=@0xbea3feac)
    at ../JavaScriptCore/wtf/RefPtr.h:55
#17 0x40f38c30 in KJS::JSObject::call (this=0x433753e0, exec=0xbea40208,
    thisObj=0x43370000, args=@0xbea3feac)
    at ../JavaScriptCore/kjs/object.cpp:96
#18 0x40f7c78c in KJS::FunctionCallResolveNode::inlineEvaluate (
    this=0x120ac8, exec=0xbea40208) at ../JavaScriptCore/kjs/nodes.cpp:1034
#19 0x40f568cc in KJS::ConditionalNode::evaluate (this=0x120ae0,
    exec=0xbea40208) at ../JavaScriptCore/wtf/RefPtr.h:55
#20 0x40f5c55c in KJS::AddNode::evaluate (this=0x11e450, exec=0xbea40208)
    at ../JavaScriptCore/wtf/RefPtr.h:55
#21 0x40f5360c in KJS::ReturnNode::execute (this=0x11e468, exec=0xbea40208)
    at ../JavaScriptCore/wtf/RefPtr.h:55
#22 0x40f64c00 in KJS::BlockNode::execute (this=0x3000, exec=0xbea40208)
    at ../JavaScriptCore/wtf/RefPtr.h:438
#23 0x40f781d8 in KJS::FunctionBodyNode::execute (this=0xe2ad8,
    exec=0xbea40208) at ../JavaScriptCore/kjs/nodes.cpp:4623
#24 0x40ea9f34 in KJS::FunctionImp::callAsFunction (this=0x433753e0,
    exec=0xbea40710, thisObj=0x43370000, args=@0xbea40334)
    at ../JavaScriptCore/wtf/RefPtr.h:55
#25 0x40f38c30 in KJS::JSObject::call (this=0x433753e0, exec=0xbea40710,
    thisObj=0x43370000, args=@0xbea40334)
    at ../JavaScriptCore/kjs/object.cpp:96
#26 0x40f7084c in KJS::LocalVarFunctionCallNode::evaluate (this=0x120ef0,
    exec=0x189498) at ../JavaScriptCore/kjs/ExecState.h:56
#27 0x40f55614 in KJS::AssignBracketNode::evaluate (this=0x17fec0,
    exec=0xbea40710) at ../JavaScriptCore/wtf/RefPtr.h:55
#28 0x40f53eb8 in KJS::ExprStatementNode::execute (this=0x17fed8,
    exec=0xbea40710) at ../JavaScriptCore/wtf/RefPtr.h:55
#29 0x40f64c00 in KJS::BlockNode::execute (this=0x3000, exec=0xbea40710)
    at ../JavaScriptCore/wtf/RefPtr.h:438
#30 0x40f5395c in KJS::WhileNode::execute (this=0x1203e0, exec=0xbea40710)
    at ../JavaScriptCore/wtf/RefPtr.h:55
#31 0x40f64c00 in KJS::BlockNode::execute (this=0x3000, exec=0xbea40710)
    at ../JavaScriptCore/wtf/RefPtr.h:438
#32 0x40f53dc0 in KJS::IfNode::execute (this=0x12fc00, exec=0xbea40710)
    at ../JavaScriptCore/wtf/RefPtr.h:55
#33 0x40f64c00 in KJS::BlockNode::execute (this=0x3000, exec=0xbea40710)
    at ../JavaScriptCore/wtf/RefPtr.h:438
#34 0x40f781d8 in KJS::FunctionBodyNode::execute (this=0x1302c8,
    exec=0xbea40710) at ../JavaScriptCore/kjs/nodes.cpp:4623
#35 0x40ea9f34 in KJS::FunctionImp::callAsFunction (this=0x43370e80,
    exec=0xbea40c88, thisObj=0x43370000, args=@0xbea40834)
    at ../JavaScriptCore/wtf/RefPtr.h:55
#36 0x40f38c30 in KJS::JSObject::call (this=0x43370e80, exec=0xbea40c88,
    thisObj=0x43370000, args=@0xbea40834)
    at ../JavaScriptCore/kjs/object.cpp:96
#37 0x40f70f44 in KJS::FunctionCallValueNode::evaluate (this=0x12fdb8,
    exec=0xbea40c88) at ../JavaScriptCore/kjs/nodes.cpp:979
#38 0x40f64494 in KJS::ArgumentListNode::evaluateList (this=0x12fdd0,
    exec=0xbea40c88, list=@0xbea40970) at ../JavaScriptCore/wtf/RefPtr.h:55
#39 0x40f7c800 in KJS::FunctionCallResolveNode::inlineEvaluate (
    this=0x12fdf8, exec=0xbea40c88) at ../JavaScriptCore/wtf/RefPtr.h:55
#40 0x40f53eb8 in KJS::ExprStatementNode::execute (this=0x12fe10,
    exec=0xbea40c88) at ../JavaScriptCore/wtf/RefPtr.h:55
#41 0x40f64c00 in KJS::BlockNode::execute (this=0x3000, exec=0xbea40c88)
    at ../JavaScriptCore/wtf/RefPtr.h:438
#42 0x40f77758 in KJS::ProgramNode::execute (this=0x130508, exec=0xbea40c88)
    at ../JavaScriptCore/kjs/nodes.cpp:4611
#43 0x40ed2a18 in KJS::Interpreter::evaluate (exec=0x116664,
    sourceURL=@0xbea40e94, startingLineNumber=0, code=0x189b20,
    codeLength=20977, thisV=0x43370000) at ../JavaScriptCore/wtf/RefPtr.h:55
#44 0x405cc05c in WebCore::KJSProxy::evaluate (this=0x715a8,
    filename=@0xbea41008, baseLine=0, str=@0xbea4121c)
    at ../WebCore/bindings/js/kjs_proxy.cpp:88
#45 0x40ace644 in WebCore::FrameLoader::executeScript (this=0x5d088,
    url=@0xbea41008, baseLine=0, script=@0xbea4121c)
    at ../WebCore/loader/FrameLoader.cpp:760
#46 0x40a3cfac in WebCore::HTMLTokenizer::scriptExecution (this=0xe8878,
    str=@0xbea4121c, state={static EntityShift = 4, m_bits = 4194304},
    scriptURL=@0xbea411ec, baseLine=0) at ../WebCore/dom/Document.h:329
#47 0x40a3e140 in WebCore::HTMLTokenizer::notifyFinished (this=0xe8878)
    at ../WebCore/html/HTMLTokenizer.cpp:1955
#48 0x40a745d8 in WebCore::CachedScript::checkNotify (this=0xe53e0)
    at ../WebCore/loader/CachedScript.cpp:98
#49 0x40a74984 in WebCore::CachedScript::data (this=0xe53e0, data=
      {m_ptr = 0x0}, allDataReceived=true)
    at ../WebCore/loader/CachedScript.cpp:88
#50 0x40af85fc in WebCore::Loader::didFinishLoading (this=0x6b0b8,
    loader=0xe5940) at ../WebCore/loader/loader.cpp:116
#51 0x40b16f0c in WebCore::SubresourceLoader::didFinishLoading
(this=0xe5940)
    at ../WebCore/loader/SubresourceLoader.cpp:193
#52 0x40b0d278 in WebCore::ResourceLoader::didFinishLoading (this=0x3000)
    at ../WebCore/loader/ResourceLoader.cpp:372
#53 0x40dc2738 in WebCore::ResourceHandleManager::downloadTimerCallback (
    this=0x97cb0, timer=0x189498)
    at ../WebCore/platform/network/ResourceHandleInternal.h:120
#54 0x40dc4d48 in WebCore::Timer<WebCore::ResourceHandleManager>::fired (
    this=0x189498) at ../WebCore/platform/Timer.h:99
#55 0x40c4ffe8 in WebCore::TimerBase::fireTimers (
    fireTime=6.9534092682217006e-310, firingTimers=@0xbea419bc)
    at ../WebCore/platform/Timer.cpp:347
#56 0x40c50138 in WebCore::TimerBase::sharedTimerFired ()
    at ../WebCore/platform/Timer.cpp:368
#57 0x4032a198 in timeout_cb ()
    at ../WebCore/platform/gtk/SharedTimerGtk.cpp:48
#58 0x4177b2ac in g_timeout_dispatch (source=0xe27e0,
    callback=0x4032a168 <timeout_cb>, user_data=0x3000) at gmain.c:3488
#59 0x41778678 in IA__g_main_context_dispatch (context=0x33708)
    at gmain.c:2061
#60 0x4177a090 in g_main_context_iterate (context=0x33708, block=1,
    dispatch=1, self=0x11060) at gmain.c:2694
#61 0x4177a2f0 in IA__g_main_loop_run (loop=0x2cde8) at gmain.c:2898
#62 0x413a6d98 in IA__gtk_main () at gtkmain.c:1146
#63 0x00009cec in main (argc=2, argv=0xbea41ba4)
    at ../WebKitTools/GtkLauncher/main.c:200*
(gdb) info threads
  9 Thread 114696 (LWP 1224)  0x41fe5134 in __pthread_sigsuspend ()
   from /lib/libpthread.so.0
  8 Thread 98311 (LWP 1223)  0x421c6578 in select () from /lib/libc.so.6
  7 Thread 81926 (LWP 1222)  0x41fe5134 in __pthread_sigsuspend ()
   from /lib/libpthread.so.0
  6 Thread 65541 (LWP 1221)  0x41fe5134 in __pthread_sigsuspend ()
   from /lib/libpthread.so.0
  5 Thread 49156 (LWP 1220)  0x421c5e44 in ioctl () from /lib/libc.so.6
  4 Thread 32771 (LWP 1219)  0x41fe5134 in __pthread_sigsuspend ()
   from /lib/libpthread.so.0
  3 Thread 16386 (LWP 1218)  0x41fe5134 in __pthread_sigsuspend ()
   from /lib/libpthread.so.0
  2 Thread 32769 (LWP 1211)  0x421c4450 in poll () from /lib/libc.so.6
* 1 Thread 16384 (LWP 1184)  Balloc (k=14)
    at ../JavaScriptCore/kjs/dtoa.cpp:522
(gdb)


Pleaese help me fix this crash.
regards,
Srinivas Rao. M




On Thu, Mar 6, 2008 at 1:11 PM, Mike Emmel <mike.emmel at gmail.com> wrote:

> Can you attach a debugger and get a trace ?
>
> I just checked a X11 build and it worked fine.
> Try directfb under X86 see if you can repeat it.
>
>
> On Wed, Mar 5, 2008 at 11:06 PM, Srinivas Rao M Hamse
> <msrinirao at gmail.com> wrote:
> > Hi
> >
> > I am trying to run WebKit-r30790 build on ARM target. I have disabled
> server
> > Peer certification by setting the environment variable
> > WEBKIT_IGNORE_SSL_ERRORS while running.
> >
> > with this setup, I am able to open simple https sites like
> >
> > https://horizon.opensrs.net
> >
> >  But webkit crashes when i open sites like
> >
> >  https://opensrs.net
> >  https://sourceforge.net
> >  https://mail.google.com
> >
> > It segfaults after dumping the following log on console:
> >
> >  # pwd
> >  /sr/docs/webkit/WebKit-r30790.davinci.directfb
> /debugbuild/Programs/.libs
> >   #
> >  # ./GtkLauncher https://sourceforge.net
> >
> >      =======================|  DirectFB 1.1.1  |=======================
> >           (c) 2001-2007  The DirectFB Organization (directfb.org)
> >            (c) 2000-2004  Convergence (integrated media) GmbH
> >         ------------------------------------------------------------
> >
> > (*) DirectFB/Core: Single Application Core. (2008-02-26 11:33)
> > (*) Direct/Thread: Running 'VT Switcher' (CRITICAL, 2945)...
> >  init_ir_loop
> > Inintializing IR
> > msp430lib_set_params: success
> >  (*) Direct/Thread: Running 'LiRC Input' (INPUT, 2952)...
> > (*) DirectFB/Input: LIRC Device 0.2 (directfb.org)
> >  (!) Direct/Modules: Could not open module directory
> > `/home/srinirao/directfb/lib/directfb-1.1-0-pure/gfxdrivers'!
> >     --> No such file or directory
> >  (*) DirectFB/Graphics: Generic Software Rasterizer 0.6 (directfb.org)
> > (*) DirectFB/Core/WM: Default 0.3 (directfb.org)
> >  (*) FBDev/Mode: Testing 720x480 RGB16
> > (*) FBDev/Mode: Preparing switch to 720x480 RGB16
> >  (*) FBDev/Mode: Testing 720x480 RGB16
> > (*) FBDev/Mode: Preparing switch to 720x480 RGB16
> >  (*) FBDev/Mode: Testing 720x480 RGB16
> > (*) FBDev/Mode: Preparing switch to 720x480 RGB16
> >  (*) FBDev/Mode: Testing 720x480 RGB16
> > (*) FBDev/Mode: Preparing switch to 720x480 RGB16
> >  (*) FBDev/Mode: Testing 720x480 RGB16
> > (*) FBDev/Mode: Preparing switch to 720x480 RGB16
> >  (*) FBDev/Surface: Allocated 720x480 16bit RGB16 buffer at offset 0 and
> > pitch 1440.
> > (*) FBDev/Mode: (Post)Setting 720x480 RGB16
> >  (*) FBDev/Mode: Switched to 720x480 (720x480) at 16 bit RGB16 (wanted
> > RGB16).
> > (*) FBDev/Mode: Testing 720x480 RGB16
> >  (*) FBDev/Mode: Preparing switch to 720x480 RGB16
> > (*) FBDev/Mode: (Post)Setting 720x480 RGB16
> >  gdkdisplay-directfb.c:122: Getting the return value as 0
> > (*) Direct/Thread: Running 'EventBufferFeed' (MESSAGING, 2953)...
> >
> > (GtkLauncher:2921): GdkPixbuf-WARNING **: Cannot open pixbuf loader
> module
> > file '/home/srinirao/gtk/etc/gtk-2.0/gdk-pixbuf.loaders': No such file
> or
> > director
> >  y
> >
> > (GtkLauncher:2921): Gdk-DirectFB-WARNING **:
> > gdk_display_request_selection_notification Unimplemented function
> >
> >
> > (GtkLauncher:2921): Gdk-DirectFB-WARNING **: gdk_window_set_keep_above()
> not
> > implemented.
> >
> >
> > (GtkLauncher:2921): Gdk-DirectFB-WARNING **: gdk_window_set_keep_below()
> not
> > implemented.
> >
> > (!) [ 2921:    0.000] --> Caught signal 11 (at 0x3000, invalid address)
> <--
> >  (!!!)  *** WARNING [still objects in 'Layer Region Pool'] *** [object.c
> :241
> > in fusion_object_pool_destroy()]
> >   (!!!)  *** WARNING [still objects in 'Layer Context Pool'] ***
> > [object.c:241 in fusion_object_pool_destroy()]
> >  (!!!)  *** WARNING [setting window->stack = NULL] *** [default.c:2894
> in
> > wm_close_stack()]
> >   (!!!)  *** WARNING [setting window->stack = NULL] *** [default.c:2894
> in
> > wm_close_stack()]
> >  (!!!)  *** WARNING [setting window->stack = NULL] *** [default.c:2894
> in
> > wm_close_stack()]
> >   (!!!)  *** WARNING [still objects in 'Window Pool'] *** [object.c:241
> in
> > fusion_object_pool_destroy()]
> >  (!!!)  *** WARNING [still objects in 'Surface Pool'] *** [object.c:241
> in
> > fusion_object_pool_destroy()]
> >  Aborted
> >  #
> >
> > But curl application on board  with -k option(Does the same thing) for
> these
> > URLs, fetches these pages properly. I feel the crash is happening at
> some
> > other module.
> >
> > Has any one faced the similar issue with https pages ?. Please help.
> >
> > regards,
> > Srinivas Rao. M
> >
> >
> > --
> > Srinivas Rao M Hamse
> >
> > _______________________________________________
> >  webkit-dev mailing list
> >  webkit-dev at lists.webkit.org
> >  http://lists.webkit.org/mailman/listinfo.cgi/webkit-dev
> >
> >
>



-- 
Srinivas Rao M  Hamse
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.webkit.org/pipermail/webkit-dev/attachments/20080306/b2656de8/attachment-0001.html 


More information about the webkit-dev mailing list