[Webkit-unassigned] [Bug 157126] New: [GTK] JavaScriptCore crash in 2.12.2
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Thu Apr 28 02:02:13 PDT 2016
https://bugs.webkit.org/show_bug.cgi?id=157126
Bug ID: 157126
Summary: [GTK] JavaScriptCore crash in 2.12.2
Classification: Unclassified
Product: WebKit
Version: Other
Hardware: Unspecified
OS: Unspecified
Status: NEW
Severity: Normal
Priority: P2
Component: WebKit Gtk
Assignee: webkit-unassigned at lists.webkit.org
Reporter: berto at igalia.com
CC: bugs-noreply at webkitgtk.org
JSC is reported to crash when opening this URL: http://gexpertise.fr/activites/metiers/stockage
This has been reproduced with the MiniBrowser in 2.12.1, but Carlos reports that 2.12.2 crashes as well. trunk seems to be working fine.
A workaround is to set JavaScriptCoreUseJIT=0
Here's the backtrace:
Program received signal SIGSEGV, Segmentation fault.
JSC::StackVisitor::readFrame (this=0x7ffdf68ef990, callFrame=0xffff000000000002) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/interpreter/StackVisitor.cpp:100
100 /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/interpreter/StackVisitor.cpp: Aucun fichier ou dossier de ce type.
(gdb) bt
#0 JSC::StackVisitor::readFrame (this=0x7ffdf68ef990, callFrame=0xffff000000000002) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/interpreter/StackVisitor.cpp:100
#1 0x00007f0d72f5a0c6 in JSC::StackVisitor::visit<JSC::RecursionCheckFunctor> (functor=<synthetic pointer>, startFrame=<optimized out>) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/interpreter/StackVisitor.h:128
#2 JSC::ExecState::iterate<JSC::RecursionCheckFunctor> (functor=<synthetic pointer>, this=<optimized out>) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/interpreter/CallFrame.h:252
#3 JSC::CodeBlock::noticeIncomingCall (this=this at entry=0x7f0d02505200, callerFrame=0x7ffdf68efc00) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/bytecode/CodeBlock.cpp:3472
#4 0x00007f0d72f5a1f1 in JSC::CodeBlock::linkIncomingCall (this=this at entry=0x7f0d02505200, callerFrame=<optimized out>, incoming=incoming at entry=0x7f0d0217a100) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/bytecode/CodeBlock.cpp:3173
#5 0x00007f0d732e680e in JSC::linkFor (exec=exec at entry=0x7ffdf68efb40, callLinkInfo=..., calleeCodeBlock=calleeCodeBlock at entry=0x7f0d02505200, callee=callee at entry=0x7f0d02443d00, codePtr=..., codePtr at entry=...)
at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/jit/Repatch.cpp:571
#6 0x00007f0d732cd998 in JSC::operationLinkCall (execCallee=0x7ffdf68efb40, callLinkInfo=0x7f0d0217a100) at /build/webkit2gtk-ea7lQt/webkit2gtk-2.12.1/Source/JavaScriptCore/jit/JITOperations.cpp:819
#7 0x00007f0d53ffee64 in ?? ()
#8 0x00007ffdf68efc00 in ?? ()
#9 0x00007f0d140841ae in ?? ()
#10 0x0000000000000000 in ?? ()
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160428/40738ff1/attachment-0001.html>
More information about the webkit-unassigned
mailing list