Bug 1235045

Summary: [abrt] webkitgtk4: rawHash(): WebKitWebProcess killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Michael Catanzaro <mcatanzaro+wrong-account-do-not-cc>
Component: webkitgtk4Assignee: Tomas Popela <tpopela>
Status: CLOSED UPSTREAM QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 22CC: diogocamposwd, fedora, kalevlember, mcatanzaro+wrong-account-do-not-cc, tpopela
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/b50eeda9ea33a41119e67311d20f7c2a2bf7a718
Whiteboard: abrt_hash:4dcf229490b8f67475fdc55db2dc15689fa026e5
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-06-23 20:58:14 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: limits
none
File: maps
none
File: mountinfo
none
File: namespaces
none
File: open_fds
none
File: proc_pid_status
none
Screencast of the steps previously mentioned. Always happen. Not happen with "google.com" page, btw. none

Description Michael Catanzaro 2015-06-23 20:43:29 UTC 
Description of problem:
Set org.gnome.desktop.interface font-name to an empty string with dconf-editor, then try to load a web page. Upstream bug incoming....

Version-Release number of selected component:
webkitgtk4-2.8.3-3.fc22

Additional info:
reporter:       libreport-2.5.1
backtrace_rating: 4
cmdline:        /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 20
crash_function: rawHash
executable:     /usr/libexec/webkit2gtk-4.0/WebKitWebProcess
global_pid:     27183
kernel:         4.0.4-303.fc22.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000
var_log_messages: [System Logs]:\n-- Logs begin at Tue 2015-05-19 11:54:49 CDT, end at Tue 2015-06-23 15:35:58 CDT. --

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 rawHash at /usr/src/debug/webkitgtk-2.8.3/Source/WTF/wtf/text/StringImpl.h:500
 #1 hasHash at /usr/src/debug/webkitgtk-2.8.3/Source/WTF/wtf/text/StringImpl.h:506
 #2 hash at /usr/src/debug/webkitgtk-2.8.3/Source/WTF/wtf/text/StringImpl.h:517
 #5 hash<std::pair<WTF::String, bool> > at /usr/src/debug/webkitgtk-2.8.3/Source/WTF/wtf/HashMap.h:171
 #6 add<WTF::HashMapTranslator<WTF::HashMap<std::pair<WTF::String, bool>, WTF::RefPtr<WebCore::CSSPrimitiveValue> >::KeyValuePairTraits, WTF::PairHash<WTF::String, bool> >, std::pair<WTF::String, bool>, std::nullptr_t> at /usr/src/debug/webkitgtk-2.8.3/Source/WTF/wtf/HashTable.h:807
 #7 inlineAdd<std::pair<WTF::String, bool>, std::nullptr_t> at /usr/src/debug/webkitgtk-2.8.3/Source/WTF/wtf/HashMap.h:296
 #8 WTF::HashMap<std::pair<WTF::String, bool>, WTF::RefPtr<WebCore::CSSPrimitiveValue>, WTF::PairHash<WTF::String, bool>, WTF::HashTraits<std::pair<WTF::String, bool> >, WTF::HashTraits<WTF::RefPtr<WebCore::CSSPrimitiveValue> > >::add<decltype(nullptr)>(std::pair<WTF::String, bool>&&, decltype(nullptr)&&) at /usr/src/debug/webkitgtk-2.8.3/Source/WTF/wtf/HashMap.h:331
 #9 WebCore::CSSValuePool::createFontFamilyValue at /usr/src/debug/webkitgtk-2.8.3/Source/WebCore/css/CSSValuePool.cpp:130
 #10 WebCore::CSSParser::parseSystemFont at /usr/src/debug/webkitgtk-2.8.3/Source/WebCore/css/CSSParser.cpp:6356
 #11 WebCore::CSSParser::parseValue at /usr/src/debug/webkitgtk-2.8.3/Source/WebCore/css/CSSParser.cpp:2932

Potential duplicate: bug 1186561
Comment 1 Michael Catanzaro 2015-06-23 20:43:34 UTC 
Created attachment 1042493 [details]
File: backtrace
Comment 2 Michael Catanzaro 2015-06-23 20:43:35 UTC 
Created attachment 1042494 [details]
File: cgroup
Comment 3 Michael Catanzaro 2015-06-23 20:43:36 UTC 
Created attachment 1042495 [details]
File: core_backtrace
Comment 4 Michael Catanzaro 2015-06-23 20:43:37 UTC 
Created attachment 1042496 [details]
File: dso_list
Comment 5 Michael Catanzaro 2015-06-23 20:43:38 UTC 
Created attachment 1042497 [details]
File: environ
Comment 6 Michael Catanzaro 2015-06-23 20:43:39 UTC 
Created attachment 1042498 [details]
File: limits
Comment 7 Michael Catanzaro 2015-06-23 20:43:40 UTC 
Created attachment 1042499 [details]
File: maps
Comment 8 Michael Catanzaro 2015-06-23 20:43:41 UTC 
Created attachment 1042500 [details]
File: mountinfo
Comment 9 Michael Catanzaro 2015-06-23 20:43:41 UTC 
Created attachment 1042501 [details]
File: namespaces
Comment 10 Michael Catanzaro 2015-06-23 20:43:42 UTC 
Created attachment 1042502 [details]
File: open_fds
Comment 11 Michael Catanzaro 2015-06-23 20:43:43 UTC 
Created attachment 1042503 [details]
File: proc_pid_status
Comment 12 Diogo Campos 2015-07-05 01:06:58 UTC 
Another user experienced a similar problem:

1. Open "duckduckgo.com".
2. Right click anywhere in the page, then choose "Inspect element".
3. With the "Web Inspector" still opened, click the reload button.

reporter:       libreport-2.6.0
backtrace_rating: 4
cmdline:        /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 23
crash_function: rawHash
executable:     /usr/libexec/webkit2gtk-4.0/WebKitWebProcess
global_pid:     11619
kernel:         4.0.6-300.fc22.x86_64
package:        webkitgtk4-2.8.3-2.fc22
reason:         WebKitWebProcess killed by SIGSEGV
runlevel:       N 5
type:           CCpp
uid:            1000
Comment 13 Diogo Campos 2015-07-05 01:23:55 UTC 
Created attachment 1046106 [details]
Screencast of the steps previously mentioned. Always happen. Not happen with "google.com" page, btw.

ABRT lead me to here. I don't know what to do :P

Not sure if really a duplicate.

In the worst case scenario, this new information should serve as a test case to the upstream bug, I think.
Comment 14 Michael Catanzaro 2015-07-05 13:45:39 UTC 
(In reply to Diogo Campos from comment #12)
> Another user experienced a similar problem:
> 
> 1. Open "duckduckgo.com".
> 2. Right click anywhere in the page, then choose "Inspect element".
> 3. With the "Web Inspector" still opened, click the reload button.

Strange, I can't reproduce this.

Surely it is a different bug and ABRT got this wrong.
Comment 15 Diogo Campos 2015-07-05 18:53:43 UTC 
I checked a bit more: seems weirdly specific.

- It needs to be in the search results page. (tested exactly with "https://duckduckgo.com/?q=how+to+make+this+thing+work&t=epiphany").

*AND*

- The "region switch" needs to be turned on. (tested to happen with "Brazil", "Argentina", "Spain", "United Kingdom"; but *doesn't* happen with "United States").

So: make sure this two conditions are met in "Step 1", then do "Step 2" and "Step 3".
Comment 16 Michael Catanzaro 2015-07-06 00:10:53 UTC 
OK, now I can reproduce it. Thanks; that is a weirdly-specific indeed. And the UI process does not recover the web view properly after the crash; it just remains white forever.