[Webkit-unassigned] [Bug 146598] Bmalloc: Crash on 32-bit Linux at bmalloc::Heap::allocateLarge() -> bmalloc::VMHeap::grow() .

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=146598

--- Comment #1 from Carlos Alberto Lopez Perez <clopez at igalia.com> ---
Created attachment 256119
  --> https://bugs.webkit.org/attachment.cgi?id=256119&action=review
GDB Backtrace on the coredump generated.

I'm attaching a GDB backtrace of the coredump when it crashes. The relevant parts:

#0  0xf4946f9c in bmalloc::VMHeap::grow() () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#1  0xf4943def in bmalloc::Heap::allocateLarge(std::lock_guard<bmalloc::StaticMutex>&, unsigned int) () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#2  0xf4942007 in bmalloc::Allocator::allocateLarge(unsigned int) () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#3  0xf4942153 in bmalloc::Allocator::allocateSlowCase(unsigned int) () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#4  0xf4942243 in bmalloc::Allocator::tryAllocate(unsigned int) () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#5  0xf48fcfa7 in WTF::tryFastMalloc(unsigned int) () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#6  0xf675350f in WebCore::ImageFrame::setSize(int, int) () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#7  0xf6760602 in WebCore::PNGImageDecoder::rowAvailable(unsigned char*, unsigned int, int) () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#8  0xf6760c14 in WebCore::rowAvailable(png_struct_def*, unsigned char*, unsigned long, int) () from /home/clopez/webkit/webkit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150703/bb374a18/attachment.html>