[Bugs] #4785 Sugar UNSP: Browse-156 segfault on Fedora 18

[Sugar Labs Bugs]

#4785: Browse-156 segfault on Fedora 18
----------------------------------------+-------------------------------
  Reporter:  quozl                      |            Owner:
      Type:  defect                     |           Status:  new
  Priority:  Unspecified by Maintainer  |        Milestone:  Unspecified
 Component:  Sugar                      |          Version:  Unspecified
  Severity:  Major                      |       Resolution:
  Keywords:                             |  Distribution/OS:  Fedora
Bug Status:  Unconfirmed                |
----------------------------------------+-------------------------------
\
\
\
\
\
\

Comment (by quozl):

 Another example with Browse-157 on Fedora 20, using 14.1.0 test build,
 with SIGILL.

 {{{
 (gdb) bt
 #0  0xaa31b515 in ?? ()
 #1  0xb1f03729 in JSC::JIT::privateCompile(JSC::MacroAssemblerCodePtr*,
 JSC::JITCompilationEffort) () from /lib/libjavascriptcoregtk-3.0.so.0
 #2  0xb200f21c in JSC::UnlinkedProgramCodeBlock*
 JSC::CodeCache::getCodeBlock<JSC::UnlinkedProgramCodeBlock,
 JSC::ProgramExecutable>(JSC::VM&, JSC::ProgramExecutable*, JSC::SourceCode
 const&, JSC::JSParserStrictness, JSC::DebuggerMode, JSC::ProfilerMode,
 JSC::ParserError&) () from /lib/libjavascriptcoregtk-3.0.so.0
 #3  0xb25d04fe in WTF::HashMap<NPClass*, JSC::Bindings::CClass*,
 WTF::PtrHash<NPClass*>, WTF::HashTraits<NPClass*>,
 WTF::HashTraits<JSC::Bindings::CClass*> >::set(NPClass* const&,
 JSC::Bindings::CClass* const&) ()
    from /lib/libwebkitgtk-3.0.so.0
 #4  0xbf808a44 in ?? ()
 Backtrace stopped: previous frame inner to this frame (corrupt stack?)
 (gdb)
 }}}

 The instruction stream contains SSE2 instructions:

 {{{
   >│0xaa31b515      movsd  (%ebx,%ecx,8),%xmm0
 │
    │0xaa31b51a      ucomisd %xmm0,%xmm0
 │
    │0xaa31b51e      jp     0xaa31ccde
 │
    │0xaa31b524      movd   %xmm0,%eax
 │
    │0xaa31b528      psrlq  $0x20,%xmm0
 │
    │0xaa31b52d      movd   %xmm0,%edx
 │
    │0xaa31b531      mov    %eax,0xa9424114
 │
    │0xaa31b536      mov    %edx,0xa9424118
 │
    │0xaa31b53c      mov    %eax,0x10(%edi)
 │
    │0xaa31b53f      mov    %edx,0x14(%edi)
 │
    │0xaa31b542      mov    -0x40(%edi),%eax
 │
    │0xaa31b545      mov    -0x3c(%edi),%edx
 │
    │0xaa31b548      cmp    $0xfffffffb,%edx
 │

 }}}
\
\
\

--
Ticket URL: <http://bugs.sugarlabs.org/ticket/4785#comment:2>
Sugar Labs <http://sugarlabs.org/>
Sugar Labs bug tracking system