Bug 1208872

Summary: [abrt] webkitgtk4: free(): WebKitNetworkProcess killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Diogo Campos <diogocamposwd>
Component: webkitgtk4Assignee: Tomas Popela <tpopela>
Status: CLOSED UPSTREAM QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 22CC: danw, fedora, guillaumepoiriermorency, kalevlember, kparal, matteo, mbarnes, mcatanzaro+wrong-account-do-not-cc, tpopela
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/afd732f9d1f30bb4748a48cb8950e24e10dcd504
Whiteboard: abrt_hash:667ed927b85ecc406e8d73f58ab47da069e89707
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-05-23 17:49:15 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: limits
none
File: maps
none
File: mountinfo
none
File: namespaces
none
File: open_fds
none
File: proc_pid_status none

Description Diogo Campos 2015-04-03 14:52:47 UTC 
Version-Release number of selected component:
webkitgtk4-2.8.0-2.fc22

Additional info:
reporter:       libreport-2.5.0
backtrace_rating: 4
cmdline:        /usr/libexec/webkit2gtk-4.0/WebKitNetworkProcess 15
crash_function: free
executable:     /usr/libexec/webkit2gtk-4.0/WebKitNetworkProcess
global_pid:     9346
kernel:         4.0.0-0.rc5.git4.1.fc22.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000
var_log_messages: [System Logs]:\n-- Logs begin at Dom 2015-03-22 04:07:20 BRT, end at Sex 2015-04-03 11:43:21 BRT. --

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 free at /lib64/libc.so.6
 #1 _gnutls_free_dh_info at /lib64/libgnutls.so.28
 #2 _gnutls_free_auth_info at /lib64/libgnutls.so.28
 #3 gnutls_deinit at /lib64/libgnutls.so.28
 #4 g_tls_connection_gnutls_finalize at /usr/lib64/gio/modules/libgiognutls.so
 #6 soup_io_stream_finalize at /lib64/libsoup-2.4.so.1
 #8 soup_socket_finalize at /lib64/libsoup-2.4.so.1
 #10 soup_connection_disconnect at /lib64/libsoup-2.4.so.1
 #11 soup_session_abort at /lib64/libsoup-2.4.so.1
 #12 soup_session_dispose at /lib64/libsoup-2.4.so.1
Comment 1 Diogo Campos 2015-04-03 14:52:58 UTC 
Created attachment 1010640 [details]
File: backtrace
Comment 2 Diogo Campos 2015-04-03 14:53:00 UTC 
Created attachment 1010641 [details]
File: cgroup
Comment 3 Diogo Campos 2015-04-03 14:53:06 UTC 
Created attachment 1010642 [details]
File: core_backtrace
Comment 4 Diogo Campos 2015-04-03 14:53:11 UTC 
Created attachment 1010643 [details]
File: dso_list
Comment 5 Diogo Campos 2015-04-03 14:53:13 UTC 
Created attachment 1010644 [details]
File: environ
Comment 6 Diogo Campos 2015-04-03 14:53:15 UTC 
Created attachment 1010645 [details]
File: limits
Comment 7 Diogo Campos 2015-04-03 14:53:25 UTC 
Created attachment 1010646 [details]
File: maps
Comment 8 Diogo Campos 2015-04-03 14:53:27 UTC 
Created attachment 1010647 [details]
File: mountinfo
Comment 9 Diogo Campos 2015-04-03 14:53:29 UTC 
Created attachment 1010648 [details]
File: namespaces
Comment 10 Diogo Campos 2015-04-03 14:53:32 UTC 
Created attachment 1010649 [details]
File: open_fds
Comment 11 Diogo Campos 2015-04-03 14:53:34 UTC 
Created attachment 1010650 [details]
File: proc_pid_status
Comment 12 Michael Catanzaro 2015-04-04 19:57:59 UTC 
Hm, that's a weird crash. The backtrace makes it seem that g_object_unref was established as an exit handler, but that can't be right. I guess a frame is missing. I will guess libsoup to be the most appropriate component for this bug, but most likely it will just get closed because the backtrace has no debuginfo.
Comment 13 Michael Catanzaro 2015-04-05 16:09:21 UTC 
*** Bug 1206738 has been marked as a duplicate of this bug. ***
Comment 14 Michael Catanzaro 2015-04-05 16:10:23 UTC 
Well, libsoup doesn't seem to establish any exit handlers. WebKit establishes a couple, but they look extremely innocent. Hm....
Comment 15 Diogo Campos 2015-04-05 16:15:34 UTC 
I have this crash on GNOME Abrt. If I could do a "debuginfo" thing it would help? If yes, what/how can I do?
Comment 16 Michael Catanzaro 2015-04-05 16:24:16 UTC 
It won't help in this case, thanks though.
Comment 17 Matteo Settenvini 2015-04-19 12:17:59 UTC 
Can I help with this? In abrt I have a pile of crashes identical to this longer than my arm.
Comment 18 Dan Winship 2015-04-20 14:08:07 UTC 
(In reply to Matteo Settenvini from comment #17)
> Can I help with this? In abrt I have a pile of crashes identical to this
> longer than my arm.

If it happens pretty reliably, maybe attach with gdb before exiting, set a breakpoint on __run_exit_handlers(), and figure out what exit handler it is that's causing the problems? (Or alternatively, rebuild glib/libsoup/webkit/etc with -O0 to get a better backtrace.)
Comment 19 Michael Catanzaro 2015-05-23 17:25:32 UTC 
*** Bug 1222802 has been marked as a duplicate of this bug. ***