[Bugs] #4785 Sugar NORM: Browse-156 segfault on Fedora 18

[Sugar Labs Bugs]

#4785: Browse-156 segfault on Fedora 18
---------------------+-------------------------------
  Reporter:  quozl   |            Owner:
      Type:  defect  |           Status:  closed
  Priority:  Normal  |        Milestone:  Unspecified
 Component:  Sugar   |          Version:  Unspecified
  Severity:  Major   |       Resolution:  notsugar
  Keywords:          |  Distribution/OS:  OLPC
Bug Status:  New     |
---------------------+-------------------------------
\
\
\
\
Changes (by quozl):

 * priority:  Unspecified by Maintainer => Normal
 * status:  new => closed
 * distribution:  Fedora => OLPC
 * resolution:   => notsugar
 * status_field:  Unconfirmed => New

\
\
\

Comment:

 This isn't a problem with Browse.  By excluding Browse, it can be shown
 that the underlying WebKit package does the same thing.  So I'm closing
 this ticket in Sugar Labs, and opening OLPC [OLPC:#12863].  If someone
 thinks it should be handled here, please re-open.

 Showing how the WebKit GtkLauncher reproduces the problem:

 {{{
 % ulimit -c unlimited
 % /usr/libexec/webkitgtk3/GtkLauncher http://google.com/
 Illegal instruction (core dumped)
 ...
 % gdb /usr/libexec/webkitgtk3/GtkLauncher core.1633
 ...
 Core was generated by `/usr/libexec/webkitgtk3/GtkLauncher
 http://google.com/'.
 Program terminated with signal SIGILL, Illegal instruction.
 #0  0xae1625f5 in ?? ()
 (gdb) bt
 #0  0xae1625f5 in ?? ()
 #1  0xb53b509a in JSC::JIT::emit_op_next_pname(JSC::Instruction*) ()
    from /lib/libjavascriptcoregtk-3.0.so.0
 #2  0xb54b148d in WTF::PassRefPtr<JSC::EvalNode>
 JSC::Parser<JSC::Lexer<unsigned short>
 >::parse<JSC::EvalNode>(JSC::ParserError&) ()
    from /lib/libjavascriptcoregtk-3.0.so.0
 #3  0xb5a77c3e in
 WebCore::ScheduledAction::executeFunctionInContext(JSC::JSGlobalObject*,
 JSC::JSValue, WebCore::ScriptExecutionContext*) ()
    from /lib/libwebkitgtk-3.0.so.0
 #4  0xb5a781b4 in WebCore::ScheduledAction::execute(WebCore::Document*) ()
    from /lib/libwebkitgtk-3.0.so.0
 #5  0xb5a78694 in
 WebCore::ScheduledAction::execute(WebCore::ScriptExecutionContext*) ()
 from /lib/libwebkitgtk-3.0.so.0
 #6  0xb60a607b in WebCore::DOMTimer::fired() () from
 /lib/libwebkitgtk-3.0.so.0
 #7  0xb59ae246 in WebCore::ThreadTimers::sharedTimerFiredInternal() ()
    from /lib/libwebkitgtk-3.0.so.0
 #8  0xb59ae2bd in WebCore::ThreadTimers::sharedTimerFired() ()
    from /lib/libwebkitgtk-3.0.so.0
 #9  0xb59c647c in WebCore::timeout_cb(void*) () from
 /lib/libwebkitgtk-3.0.so.0
 #10 0xb41a0262 in g_timeout_dispatch () from /lib/libglib-2.0.so.0
 #11 0xb419f556 in g_main_context_dispatch () from /lib/libglib-2.0.so.0
 #12 0xb419f920 in g_main_context_iterate.isra () from
 /lib/libglib-2.0.so.0
 #13 0xb419fdc3 in g_main_loop_run () from /lib/libglib-2.0.so.0
 ---Type <return> to continue, or q <return> to quit---
 #14 0xb4bd578d in gtk_events_pending () from /lib/libgtk-3.so.0
 #15 0x0804ad1b in main ()
 (gdb)
 }}}

 The same instruction stream is present:
 {{{
 ┌───────────────────────────────────────────────────────────────────────────┐
   >│0xae1625f5      movsd  (%ebx,%ecx,8),%xmm0
 │
    │0xae1625fa      ucomisd %xmm0,%xmm0
 │
    │0xae1625fe      jp     0xae161639
 │
    │0xae162604      movd   %xmm0,%eax
 │
    │0xae162608      psrlq  $0x20,%xmm0
 │
    │0xae16260d      movd   %xmm0,%edx
 │
    │0xae162611      jmp    0xae15fb70
 │
 └───────────────────────────────────────────────────────────────────────────┘
 }}}
\
\
\

--
Ticket URL: <http://bugs.sugarlabs.org/ticket/4785#comment:3>
Sugar Labs <http://sugarlabs.org/>
Sugar Labs bug tracking system