Bug 670155

Summary: Repeatable Midori segfault on visiting a particular web-site
Product: [Fedora] Fedora Reporter: James <james>
Component: webkitgtkAssignee: Kevin Fenzi <kevin>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 14CC: fedora, huzaifas, kevin, martin.sourada, maxamillion, mtasaka
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
Whiteboard: abrt_hash:c63e92ead960f6003d6853083b9614cf08048529
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-05-08 23:57:20 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
File: backtrace none

Description James 2011-01-17 11:39:08 UTC 
abrt version: 1.1.14
architecture: x86_64
Attached file: backtrace
cmdline: /usr/bin/midori
comment: Still present in git Midori 0.2.9-129-g75c81f2
component: midori
crash_function: __memcpy_ssse3
executable: /usr/bin/midori
kernel: 2.6.37-rhapsody-274
package: midori-0.2.8-1.fc14.1
rating: 3
reason: Process /usr/bin/midori was killed by signal 11 (SIGSEGV)
release: Fedora release 14 (Laughlin)
time: 1295264103
uid: 500

How to reproduce
-----
1. Visit www.spreadshirt.co.uk
2. Click on "Create your own".
3. Midori crashes as designer loads.
Comment 1 James 2011-01-17 11:39:11 UTC 
Created attachment 473817 [details]
File: backtrace
Comment 2 Kevin Fenzi 2011-01-17 17:00:40 UTC 
Can you attach output from: 

rpm -q webkitgtk java-1.6.0-openjdk-plugin

And if you run /usr/libexec/webkitgtk/GtkLauncher on the site, does that show the same behavior? 
I suspect this is a webkitgtk javascript bug. ;(
Comment 3 James 2011-01-17 18:16:11 UTC 
$ rpm -q webkitgtk java-1.6.0-openjdk-plugin
webkitgtk-1.3.10-1.fc14.x86_64
java-1.6.0-openjdk-plugin-1.6.0.0-49.1.9.3.fc14.x86_64


GtkLauncher also crashes. I'll post a backtrace shortly.


$ /usr/libexec/webkitgtk/GtkLauncher http://www.spreadshirt.co.uk/create-your-own-t-shirt-C59
** (GtkLauncher:8559): DEBUG: NP_Initialize
** (GtkLauncher:8559): DEBUG: NP_Initialize succeeded
** (GtkLauncher:8559): DEBUG: NP_Initialize
** (GtkLauncher:8559): DEBUG: NP_Initialize succeeded
** (GtkLauncher:8559): DEBUG: NP_Initialize
** (GtkLauncher:8559): DEBUG: NP_Initialize succeeded
** (GtkLauncher:8559): DEBUG: NP_Initialize
** (GtkLauncher:8559): DEBUG: NP_Initialize succeeded
** (GtkLauncher:8559): DEBUG: NP_Initialize
** (GtkLauncher:8559): DEBUG: NP_Initialize succeeded
** (GtkLauncher:8559): DEBUG: NP_Initialize
** (GtkLauncher:8559): DEBUG: NP_Initialize succeeded
** (GtkLauncher:8559): DEBUG: NP_Initialize
** (GtkLauncher:8559): DEBUG: NP_Initialize succeeded
** (GtkLauncher:8559): DEBUG: NP_Initialize
** (GtkLauncher:8559): DEBUG: NP_Initialize succeeded
*** NSPlugin Wrapper *** WARNING:(../src/npw-wrapper.c:3160):invoke_NP_Initialize: assertion failed: (rpc_method_invoke_possible(g_rpc_connection))
java version "1.6.0_20"
OpenJDK Runtime Environment (IcedTea6 1.9.3) (fedora-49.1.9.3.fc14-x86_64)
OpenJDK 64-Bit Server VM (build 19.0-b09, mixed mode)
Gtk-Message: Failed to load module "atk-bridge": /usr/lib64/gtk-2.0/modules/at-spi-corba/modules/libatk-bridge.so: wrong ELF class: ELFCLASS64

(npviewer.bin:8598): Gtk-WARNING **: Unable to locate theme engine in module_path: "nodoka",

(npviewer.bin:8598): Gtk-WARNING **: Unable to locate theme engine in module_path: "nodoka",
Gtk-Message: Failed to load module "atk-bridge": /usr/lib64/gtk-2.0/modules/at-spi-corba/modules/libatk-bridge.so: wrong ELF class: ELFCLASS64
Gtk-Message: Failed to load module "pk-gtk-module": libpk-gtk-module.so: cannot open shared object file: No such file or directory
Gtk-Message: Failed to load module "gail-gnome": libgail-gnome.so: cannot open shared object file: No such file or directory
Gtk-Message: Failed to load module "canberra-gtk-module": libcanberra-gtk-module.so: cannot open shared object file: No such file or directory

(GtkLauncher:8559): libsoup-CRITICAL **: soup_message_io_pause: assertion `io != NULL' failed

(GtkLauncher:8559): libsoup-CRITICAL **: soup_message_io_unpause: assertion `io != NULL' failed

(GtkLauncher:8559): libsoup-CRITICAL **: soup_message_io_unpause: assertion `io != NULL' failed

** (GtkLauncher:8559): WARNING **: webkit_soup_http_input_stream_got_chunk called again before previous chunk was processed
Segmentation fault (core dumped)
Comment 4 James 2011-01-17 18:27:42 UTC 
Promised backtrace:


(gdb) bt
#0  0x0000003603b3452d in __memcpy_ssse3 () from /lib64/libc.so.6
*** NSPlugin Viewer  *** ERROR: NPN_GetValue() invoke: Message timeout
*** NSPlugin Viewer  *** WARNING:(../src/npw-viewer.c:1291):invoke_NPN_InvalidateRect: assertion failed: (rpc_method_invoke_possible(g_rpc_connection))
*** NSPlugin Viewer  *** WARNING:(../src/npw-viewer.c:1291):invoke_NPN_InvalidateRect: assertion failed: (rpc_method_invoke_possible(g_rpc_connection))
*** NSPlugin Viewer  *** WARNING:(../src/npw-viewer.c:1291):invoke_NPN_InvalidateRect: assertion failed: (rpc_method_invoke_possible(g_rpc_connection))
#1  0x00007ffff68d4d4d in webkit_soup_http_input_stream_got_chunk (msg=
    0xcf29e0 [SoupMessage], chunk_buffer=<value optimized out>, stream=
    0xcf2ab0) at /usr/include/bits/string3.h:52
#2  0x000000360760e03e in g_closure_invoke (closure=0x6e3a90, return_value=
    0x0, n_param_values=2, param_values=0xcdc300, invocation_hint=
    0x7fffffffb9f0) at gclosure.c:766
#3  0x000000360761ee87 in signal_emit_unlocked_R (node=<value optimized out>, 
    detail=0, instance=0xcf29e0, emission_return=0x0, instance_and_params=
    0xcdc300) at gsignal.c:3252
#4  0x00000036076287b5 in g_signal_emit_valist (
    instance=<value optimized out>, signal_id=<value optimized out>, 
    detail=<value optimized out>, var_args=<value optimized out>)
    at gsignal.c:2983
#5  0x0000003607628983 in g_signal_emit (instance=<value optimized out>, 
    signal_id=<value optimized out>, detail=<value optimized out>)
    at gsignal.c:3040
#6  0x0000003a8ee30f31 in read_body_chunk (msg=0xcf29e0 [SoupMessage])
    at soup-message-io.c:471
#7  0x0000003a8ee31980 in io_read (sock=0x733580 [SoupSocket], msg=
    0xcf29e0 [SoupMessage]) at soup-message-io.c:941
#8  0x0000003a8ee31ce4 in io_unpause_internal (msg=0xcf29e0)
    at soup-message-io.c:1167
---Type <return> to continue, or q <return> to quit---
#9  0x0000003605e41e33 in g_main_dispatch (context=0x63e020) at gmain.c:2149
#10 g_main_context_dispatch (context=0x63e020) at gmain.c:2702
#11 0x0000003605e42610 in g_main_context_iterate (context=0x63e020, block=1, 
    dispatch=1, self=<value optimized out>) at gmain.c:2780
#12 0x0000003605e42c82 in g_main_loop_run (loop=0xc21c50) at gmain.c:2988
#13 0x0000003afe58f3aa in gtk_main () from /usr/lib64/libgtk-x11-2.0.so.0
#14 0x000000000040265c in main (argc=2, argv=0x7fffffffe0b8)
    at Tools/GtkLauncher/main.c:274
Comment 5 Fedora Admin XMLRPC Client 2011-03-15 17:19:35 UTC 
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.
Comment 6 James 2012-05-08 23:57:20 UTC 
Can no longer reproduce in midori-0.4.5-1.fc17.x86_64