[Webkit-unassigned] [Bug 200437] Web process crashes on cnn.com

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Sep 19 10:07:23 PDT 2019


https://bugs.webkit.org/show_bug.cgi?id=200437

--- Comment #8 from Yury Semikhatsky <yurys at chromium.org> ---
I can also reproduce it reliably with booking.com Here is a couple of stack traces on that scenario, they contain WebCore functions which could be used as starting point for further debugging. I'd be happy to help investigating this further but I'd need some pointers from experts what to look for.



29      ../sysdeps/unix/sysv/linux/poll.c: No such file or directory.
(gdb) bt
#0  0x00007fcfd7449bf9 in __GI___poll (fds=0x7ffcacf81da8, nfds=1, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1  0x00007fcfd5f31747 in ?? () from /usr/lib/x86_64-linux-gnu/libxcb.so.1
#2  0x00007fcfd5f3306f in ?? () from /usr/lib/x86_64-linux-gnu/libxcb.so.1
#3  0x00007fcfd5f331ef in xcb_wait_for_reply64 () from /usr/lib/x86_64-linux-gnu/libxcb.so.1
#4  0x00007fcfd8dcd6e8 in _XReply () from /usr/lib/x86_64-linux-gnu/libX11.so.6
#5  0x00007fcfd49fe004 in XIGetClientPointer () from /usr/lib/x86_64-linux-gnu/libXi.so.6
#6  0x00007fcfda4b0c1e in gdk_x11_display_get_default_seat ()
    at /home/yurys/WebKit/WebKitBuild/DependenciesGTK/Source/gtk+-3.22.11/gdk/x11/gdkdisplay-x11.c:2889
#7  0x00007fcfe3a21b95 in WebCore::screenHasTouchDevice() () from /home/yurys/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#8  0x00007fcfe38c55cd in WebCore::RuntimeEnabledFeatures::touchEventsEnabled() const ()
   from /home/yurys/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#9  0x00007fcfe29671f1 in WebCore::JSDOMWindow::finishCreation(JSC::VM&, WebCore::JSWindowProxy*) ()
   from /home/yurys/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#10 0x00007fcfe31238ff in WebCore::JSWindowProxy::setWindow(WebCore::AbstractDOMWindow&) ()
   from /home/yurys/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#11 0x00007fcfe3123ca6 in WebCore::JSWindowProxy::create(JSC::VM&, WebCore::AbstractDOMWindow&, WebCore::DOMWrapperWorld&) ()
   from /home/yurys/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#12 0x00007fcfe314a8df in WebCore::WindowProxy::createJSWindowProxy(WebCore::DOMWrapperWorld&) ()
   from /home/yurys/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#13 0x00007fcfe314ac68 in WebCore::WindowProxy::createJSWindowProxyWithInitializedScript(WebCore::DOMWrapperWorld&) ()
   from /home/yurys/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#14 0x00007fcfe3123f97 in WebCore::toJS(JSC::ExecState*, WebCore::WindowProxy&) ()
   from /home/yurys/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#15 0x00007fcfdfae749e in llint_slow_path_get_by_id () from /home/yurys/WebKit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#16 0x00007fcfdfad220f in llint_op_get_by_id () from /home/yurys/WebKit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#17 0xffff000000000002 in ?? ()
#18 0x00007fcfdfacccd1 in llint_op_enter_wide32 () from /home/yurys/WebKit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#19 0x0000000000000000 in ?? ()




Thread 16 (Thread 0x7fcf332fd700 (LWP 36208)):
#0  0x00007fcfd7438e57 in sched_yield () at ../sysdeps/unix/syscall-template.S:78
#1  0x00007fcf5cc4c9c9 in ?? () from /usr/lib/x86_64-linux-gnu/dri/nouveau_dri.so
#2  0x00007fcf5c996809 in ?? () from /usr/lib/x86_64-linux-gnu/dri/nouveau_dri.so
#3  0x00007fcf5eadf583 in glPrimitiveBoundingBox () from /usr/lib/x86_64-linux-gnu/libGLX_mesa.so.0
#4  0x00007fcfe25d24b5 in WebKit::ThreadedCompositor::renderLayerTree() () from /home/yurys/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#5  0x00007fcfe0036871 in WTF::RunLoop::TimerBase::TimerBase(WTF::RunLoop&)::$_2::__invoke(void*) ()
   from /home/yurys/WebKit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#6  0x00007fcfda29bbc5 in g_main_dispatch () at ../../Source/glib-2.58.1/glib/gmain.c:3182
#7  g_main_context_dispatch () at ../../Source/glib-2.58.1/glib/gmain.c:3847
#8  0x00007fcfda29bf90 in g_main_context_iterate () at ../../Source/glib-2.58.1/glib/gmain.c:3920
#9  0x00007fcfda29c2a2 in g_main_loop_run () at ../../Source/glib-2.58.1/glib/gmain.c:4116
#10 0x00007fcfe0036338 in WTF::RunLoop::run() () from /home/yurys/WebKit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#11 0x00007fcfdffe3def in WTF::Thread::entryPoint(WTF::Thread::NewThreadContext*) ()
   from /home/yurys/WebKit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#12 0x00007fcfe0036ec6 in WTF::wtfThreadEntryPoint(void*) () from /home/yurys/WebKit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#13 0x00007fcfdac796db in start_thread (arg=0x7fcf332fd700) at pthread_create.c:463
#14 0x00007fcfd745688f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190919/3037212f/attachment.html>


More information about the webkit-unassigned mailing list