epiphany-browser crashes frequently on "back" or page load. E.g. with SIGSEGV in g_type_check_instance_cast()

[Ben Bacarisse]

Using apport so I am not sure what else I need to provide.

ProblemType: Crash
DistroRelease: Ubuntu 11.04
Package: epiphany-browser 2.30.6-1ubuntu5
ProcVersionSignature: Ubuntu 2.6.38-11.48~ppa1-generic-tuxonice 2.6.38.8
Uname: Linux 2.6.38-11-generic-tuxonice x86_64
Architecture: amd64
Date: Fri Sep 23 13:26:39 2011
ExecutablePath: /usr/bin/epiphany-browser
InstallationMedia: Ubuntu 10.04 "Lucid Lynx" - Beta amd64 (20100318)
LocalLibraries: /var/lib/flashplugin-installer/npwrapper.libflashplayer.so
ProcCmdline: epiphany-browser
ProcEnviron:
 LANGUAGE=en_GB:en
 PATH=(custom, user)
 LANG=en_GB.UTF-8
 SHELL=/bin/bash
SegvAnalysis:
 Segfault happened at: 0x7fe863bccb81 <g_type_check_instance_cast+49>: mov (%rdi),%rsi
 PC (0x7fe863bccb81) ok
 source "(%rdi)" (0x4f00000088) not located in a known VMA region (needed readable region)!
 destination "%rsi" ok
SegvReason: reading unknown VMA
Signal: 11
SourcePackage: epiphany-browser
StacktraceTop:
 g_type_check_instance_cast () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
 ?? () from /usr/lib/libwebkitgtk-1.0.so.0
 ?? () from /usr/lib/libwebkitgtk-1.0.so.0
 ?? () from /usr/lib/libwebkitgtk-1.0.so.0
 ?? () from /usr/lib/libwebkitgtk-1.0.so.0
Title: epiphany-browser crashed with SIGSEGV in g_type_check_instance_cast()
UpgradeStatus: Upgraded to natty on 2011-08-10 (43 days ago)
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare
XsessionErrors:
 (epiphany-browser:22852): Gtk-CRITICAL **: IA__gtk_widget_get_realized: assertion `GTK_IS_WIDGET (widget)' failed
 (epiphany-browser:16730): libsoup-CRITICAL **: soup_message_io_pause: assertion `io != NULL' failed
 (epiphany-browser:16730): libsoup-CRITICAL **: soup_message_io_unpause: assertion `io != NULL' failed
 (epiphany-browser:16730): GLib-WARNING **: GError set over the top of a previous GError or uninitialized memory.
 (epiphany-browser:27659): Gtk-CRITICAL **: IA__gtk_adjustment_configure: assertion `GTK_IS_ADJUSTMENT (adjustment)' failed

[Ben Bacarisse (launchpad-bsb)]

I saw that bug 742169 needed a crash report so here is one. I hope it helps. I get one of these crashes a day (often more than one though -- typical -- I had to wait more than 24 hours after starting apport!) and I can see no pattern to them. I see the binary has no symbols. If this is a problem, I see there is a -dbg package I could run.

[Apport retracing service (apport)]

StacktraceTop:
 g_type_check_instance_cast (type_instance=0x4f00000088, iface_type=80) at /build/buildd/glib2.0-2.28.6/./gobject/gtype.c:3989
 WebCore::MainFrameScrollbarGtk::detachAdjustment (this=0x7fe8455e2900) at ../Source/WebCore/platform/gtk/MainFrameScrollbarGtk.cpp:82
 WebCore::CachedFrame::CachedFrame (this=0x7fe8422c22d0, frame=0x7fe84c3fa000) at ../Source/WebCore/history/CachedFrame.cpp:162
 create (frame=0x7fe84c3fa000) at ../Source/WebCore/history/CachedFrame.h:73
 WebCore::CachedFrame::CachedFrame (this=0x7fe8422c2ab0, frame=0x7fe84c3b1200) at ../Source/WebCore/history/CachedFrame.cpp:151

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.