Bug 670155 - Repeatable Midori segfault on visiting a particular web-site
Summary: Repeatable Midori segfault on visiting a particular web-site
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: webkitgtk
Version: 14
Hardware: x86_64
OS: Unspecified
low
medium
Target Milestone: ---
Assignee: Kevin Fenzi
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:c63e92ead960f6003d6853083b9...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-01-17 11:39 UTC by James
Modified: 2012-05-08 23:57 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-05-08 23:57:20 UTC
Type: ---


Attachments (Terms of Use)
File: backtrace (161.18 KB, text/plain)
2011-01-17 11:39 UTC, James
no flags Details

Description James 2011-01-17 11:39:08 UTC
abrt version: 1.1.14
architecture: x86_64
Attached file: backtrace
cmdline: /usr/bin/midori
comment: Still present in git Midori 0.2.9-129-g75c81f2
component: midori
crash_function: __memcpy_ssse3
executable: /usr/bin/midori
kernel: 2.6.37-rhapsody-274
package: midori-0.2.8-1.fc14.1
rating: 3
reason: Process /usr/bin/midori was killed by signal 11 (SIGSEGV)
release: Fedora release 14 (Laughlin)
time: 1295264103
uid: 500

How to reproduce
-----
1. Visit www.spreadshirt.co.uk
2. Click on "Create your own".
3. Midori crashes as designer loads.

Comment 1 James 2011-01-17 11:39:11 UTC
Created attachment 473817 [details]
File: backtrace

Comment 2 Kevin Fenzi 2011-01-17 17:00:40 UTC
Can you attach output from: 

rpm -q webkitgtk java-1.6.0-openjdk-plugin

And if you run /usr/libexec/webkitgtk/GtkLauncher on the site, does that show the same behavior? 
I suspect this is a webkitgtk javascript bug. ;(

Comment 3 James 2011-01-17 18:16:11 UTC
$ rpm -q webkitgtk java-1.6.0-openjdk-plugin
webkitgtk-1.3.10-1.fc14.x86_64
java-1.6.0-openjdk-plugin-1.6.0.0-49.1.9.3.fc14.x86_64


GtkLauncher also crashes. I'll post a backtrace shortly.


$ /usr/libexec/webkitgtk/GtkLauncher http://www.spreadshirt.co.uk/create-your-own-t-shirt-C59
** (GtkLauncher:8559): DEBUG: NP_Initialize
** (GtkLauncher:8559): DEBUG: NP_Initialize succeeded
** (GtkLauncher:8559): DEBUG: NP_Initialize
** (GtkLauncher:8559): DEBUG: NP_Initialize succeeded
** (GtkLauncher:8559): DEBUG: NP_Initialize
** (GtkLauncher:8559): DEBUG: NP_Initialize succeeded
** (GtkLauncher:8559): DEBUG: NP_Initialize
** (GtkLauncher:8559): DEBUG: NP_Initialize succeeded
** (GtkLauncher:8559): DEBUG: NP_Initialize
** (GtkLauncher:8559): DEBUG: NP_Initialize succeeded
** (GtkLauncher:8559): DEBUG: NP_Initialize
** (GtkLauncher:8559): DEBUG: NP_Initialize succeeded
** (GtkLauncher:8559): DEBUG: NP_Initialize
** (GtkLauncher:8559): DEBUG: NP_Initialize succeeded
** (GtkLauncher:8559): DEBUG: NP_Initialize
** (GtkLauncher:8559): DEBUG: NP_Initialize succeeded
*** NSPlugin Wrapper *** WARNING:(../src/npw-wrapper.c:3160):invoke_NP_Initialize: assertion failed: (rpc_method_invoke_possible(g_rpc_connection))
java version "1.6.0_20"
OpenJDK Runtime Environment (IcedTea6 1.9.3) (fedora-49.1.9.3.fc14-x86_64)
OpenJDK 64-Bit Server VM (build 19.0-b09, mixed mode)
Gtk-Message: Failed to load module "atk-bridge": /usr/lib64/gtk-2.0/modules/at-spi-corba/modules/libatk-bridge.so: wrong ELF class: ELFCLASS64

(npviewer.bin:8598): Gtk-WARNING **: Unable to locate theme engine in module_path: "nodoka",

(npviewer.bin:8598): Gtk-WARNING **: Unable to locate theme engine in module_path: "nodoka",
Gtk-Message: Failed to load module "atk-bridge": /usr/lib64/gtk-2.0/modules/at-spi-corba/modules/libatk-bridge.so: wrong ELF class: ELFCLASS64
Gtk-Message: Failed to load module "pk-gtk-module": libpk-gtk-module.so: cannot open shared object file: No such file or directory
Gtk-Message: Failed to load module "gail-gnome": libgail-gnome.so: cannot open shared object file: No such file or directory
Gtk-Message: Failed to load module "canberra-gtk-module": libcanberra-gtk-module.so: cannot open shared object file: No such file or directory

(GtkLauncher:8559): libsoup-CRITICAL **: soup_message_io_pause: assertion `io != NULL' failed

(GtkLauncher:8559): libsoup-CRITICAL **: soup_message_io_unpause: assertion `io != NULL' failed

(GtkLauncher:8559): libsoup-CRITICAL **: soup_message_io_unpause: assertion `io != NULL' failed

** (GtkLauncher:8559): WARNING **: webkit_soup_http_input_stream_got_chunk called again before previous chunk was processed
Segmentation fault (core dumped)

Comment 4 James 2011-01-17 18:27:42 UTC
Promised backtrace:


(gdb) bt
#0  0x0000003603b3452d in __memcpy_ssse3 () from /lib64/libc.so.6
*** NSPlugin Viewer  *** ERROR: NPN_GetValue() invoke: Message timeout
*** NSPlugin Viewer  *** WARNING:(../src/npw-viewer.c:1291):invoke_NPN_InvalidateRect: assertion failed: (rpc_method_invoke_possible(g_rpc_connection))
*** NSPlugin Viewer  *** WARNING:(../src/npw-viewer.c:1291):invoke_NPN_InvalidateRect: assertion failed: (rpc_method_invoke_possible(g_rpc_connection))
*** NSPlugin Viewer  *** WARNING:(../src/npw-viewer.c:1291):invoke_NPN_InvalidateRect: assertion failed: (rpc_method_invoke_possible(g_rpc_connection))
#1  0x00007ffff68d4d4d in webkit_soup_http_input_stream_got_chunk (msg=
    0xcf29e0 [SoupMessage], chunk_buffer=<value optimized out>, stream=
    0xcf2ab0) at /usr/include/bits/string3.h:52
#2  0x000000360760e03e in g_closure_invoke (closure=0x6e3a90, return_value=
    0x0, n_param_values=2, param_values=0xcdc300, invocation_hint=
    0x7fffffffb9f0) at gclosure.c:766
#3  0x000000360761ee87 in signal_emit_unlocked_R (node=<value optimized out>, 
    detail=0, instance=0xcf29e0, emission_return=0x0, instance_and_params=
    0xcdc300) at gsignal.c:3252
#4  0x00000036076287b5 in g_signal_emit_valist (
    instance=<value optimized out>, signal_id=<value optimized out>, 
    detail=<value optimized out>, var_args=<value optimized out>)
    at gsignal.c:2983
#5  0x0000003607628983 in g_signal_emit (instance=<value optimized out>, 
    signal_id=<value optimized out>, detail=<value optimized out>)
    at gsignal.c:3040
#6  0x0000003a8ee30f31 in read_body_chunk (msg=0xcf29e0 [SoupMessage])
    at soup-message-io.c:471
#7  0x0000003a8ee31980 in io_read (sock=0x733580 [SoupSocket], msg=
    0xcf29e0 [SoupMessage]) at soup-message-io.c:941
#8  0x0000003a8ee31ce4 in io_unpause_internal (msg=0xcf29e0)
    at soup-message-io.c:1167
---Type <return> to continue, or q <return> to quit---
#9  0x0000003605e41e33 in g_main_dispatch (context=0x63e020) at gmain.c:2149
#10 g_main_context_dispatch (context=0x63e020) at gmain.c:2702
#11 0x0000003605e42610 in g_main_context_iterate (context=0x63e020, block=1, 
    dispatch=1, self=<value optimized out>) at gmain.c:2780
#12 0x0000003605e42c82 in g_main_loop_run (loop=0xc21c50) at gmain.c:2988
#13 0x0000003afe58f3aa in gtk_main () from /usr/lib64/libgtk-x11-2.0.so.0
#14 0x000000000040265c in main (argc=2, argv=0x7fffffffe0b8)
    at Tools/GtkLauncher/main.c:274

Comment 5 Fedora Admin XMLRPC Client 2011-03-15 17:19:35 UTC
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.

Comment 6 James 2012-05-08 23:57:20 UTC
Can no longer reproduce in midori-0.4.5-1.fc17.x86_64


Note You need to log in before you can comment on or make changes to this bug.