[webkit-dev] SIGSEGV possibly (?) due to libwebkitgtk (backtrace included)

[Saam Barati]

Looks like JSValue() (which is the empty JS Value, with bit representation as zero) is showing up somewhere it shouldn't be. It's hard to tell what the bug is just from your stack trace. It could be helpful to enable/disable various JIT tiers to see if it still reproduces and take it from there. It would also be helpful to identify the crashing function so we can see its source code and its byte code.

Presumably this is an older version of JSC, so whatever bug you're seeing might be fixed in ToT. 

- Saam

> On Jul 3, 2016, at 4:11 PM, Scott Kostyshak <scott.kostyshak at gmail.com> wrote:
> 
> Dear all,
> 
> I am getting a SIGSEGV from a package that depends on
> libwebkitgtk-3.0-0, gnome-web-photo (note that I am on Ubuntu 16.04).
> 
> The following command is what gives me the SIGSEGV:
> gnome-web-photo "http://www.nba.com" "gwp_test.png"
> 
> it only happens with that website.
> 
> Here is the backtrace I have:
> 
> Core was generated by `gnome-web-photo http://www.nba.com gwp_test.png'.
> Program terminated with signal SIGSEGV, Segmentation fault.
> #0  JSC::JSCell::getPrimitiveNumber (this=this at entry=0x0, exec=exec at entry=0x7f135c6ccbe0, number=@0x7ffee6aa2060: 0, value=...)
>    at ../Source/JavaScriptCore/runtime/JSCell.cpp:134
> 134     ../Source/JavaScriptCore/runtime/JSCell.cpp: No such file or directory.
> [Current thread is 1 (Thread 0x7f13cb26da80 (LWP 2386))]
> (gdb) bt
> #0  JSC::JSCell::getPrimitiveNumber (this=this at entry=0x0, exec=exec at entry=0x7f135c6ccbe0, number=@0x7ffee6aa2060: 0, value=...)
>    at ../Source/JavaScriptCore/runtime/JSCell.cpp:134
> #1  0x00007f13c6ae4bdc in JSC::JSValue::getPrimitiveNumber (value=..., number=@0x7ffee6aa2060: 0, exec=0x7f135c6ccbe0, this=<synthetic pointer>)
>    at ../Source/JavaScriptCore/runtime/JSCJSValueInlines.h:599
> #2  JSC::jsLess<true> (v2=..., v1=..., callFrame=0x7f135c6ccbe0) at ../Source/JavaScriptCore/runtime/Operations.h:136
> #3  JSC::slow_path_less (exec=0x7f135c6ccbe0, pc=0x7f130d4e51e8) at ../Source/JavaScriptCore/runtime/CommonSlowPaths.cpp:295
> #4  0x00007f1366ed165b in ?? ()
> #5  0x0000000000000000 in ?? ()
> (gdb)
> 
> Best,
> 
> Scott
> _______________________________________________
> webkit-dev mailing list
> webkit-dev at lists.webkit.org
> https://lists.webkit.org/mailman/listinfo/webkit-dev