[webkit-dev] SIGSEGV possibly (?) due to libwebkitgtk (backtrace included)

[Scott Kostyshak]

Thanks a lot for the reply, Saam. I don't think I'll have time to look
into it any further. I'm sorry that the stack trace wasn't of much help.
I was hoping there was a chance others could reproduce by running the
same command I ran, but I understand that others might not want to
install gnome-web-photo and wade through its source code to understand
what's going on.

Further, as you said it's possible the bug is already fixed.

Again, thanks a lot for your time, Saam!

Scott

On Mon, Jul 04, 2016 at 12:53:26AM -0700, Saam Barati wrote:
> Looks like JSValue() (which is the empty JS Value, with bit representation as zero) is showing up somewhere it shouldn't be. It's hard to tell what the bug is just from your stack trace. It could be helpful to enable/disable various JIT tiers to see if it still reproduces and take it from there. It would also be helpful to identify the crashing function so we can see its source code and its byte code.
> 
> Presumably this is an older version of JSC, so whatever bug you're seeing might be fixed in ToT. 
> 
> - Saam
> 
> > On Jul 3, 2016, at 4:11 PM, Scott Kostyshak <scott.kostyshak at gmail.com> wrote:
> > 
> > Dear all,
> > 
> > I am getting a SIGSEGV from a package that depends on
> > libwebkitgtk-3.0-0, gnome-web-photo (note that I am on Ubuntu 16.04).
> > 
> > The following command is what gives me the SIGSEGV:
> > gnome-web-photo "http://www.nba.com" "gwp_test.png"
> > 
> > it only happens with that website.
> > 
> > Here is the backtrace I have:
> > 
> > Core was generated by `gnome-web-photo http://www.nba.com gwp_test.png'.
> > Program terminated with signal SIGSEGV, Segmentation fault.
> > #0  JSC::JSCell::getPrimitiveNumber (this=this at entry=0x0, exec=exec at entry=0x7f135c6ccbe0, number=@0x7ffee6aa2060: 0, value=...)
> >    at ../Source/JavaScriptCore/runtime/JSCell.cpp:134
> > 134     ../Source/JavaScriptCore/runtime/JSCell.cpp: No such file or directory.
> > [Current thread is 1 (Thread 0x7f13cb26da80 (LWP 2386))]
> > (gdb) bt
> > #0  JSC::JSCell::getPrimitiveNumber (this=this at entry=0x0, exec=exec at entry=0x7f135c6ccbe0, number=@0x7ffee6aa2060: 0, value=...)
> >    at ../Source/JavaScriptCore/runtime/JSCell.cpp:134
> > #1  0x00007f13c6ae4bdc in JSC::JSValue::getPrimitiveNumber (value=..., number=@0x7ffee6aa2060: 0, exec=0x7f135c6ccbe0, this=<synthetic pointer>)
> >    at ../Source/JavaScriptCore/runtime/JSCJSValueInlines.h:599
> > #2  JSC::jsLess<true> (v2=..., v1=..., callFrame=0x7f135c6ccbe0) at ../Source/JavaScriptCore/runtime/Operations.h:136
> > #3  JSC::slow_path_less (exec=0x7f135c6ccbe0, pc=0x7f130d4e51e8) at ../Source/JavaScriptCore/runtime/CommonSlowPaths.cpp:295
> > #4  0x00007f1366ed165b in ?? ()
> > #5  0x0000000000000000 in ?? ()
> > (gdb)
> > 
> > Best,
> > 
> > Scott
> > _______________________________________________
> > webkit-dev mailing list
> > webkit-dev at lists.webkit.org
> > https://lists.webkit.org/mailman/listinfo/webkit-dev