Midori crashes in webkit_web_view_get_tls_info on a specific page

Bug #1376273 reported by Alexander E. Patrakov
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Midori Web Browser
New
Undecided
Unassigned
Gentoo Linux
New
Undecided
Unassigned

Bug Description

Go to http://wiki.mate-desktop.org/compiz

At the bottom, there is a link to https://github.com/bhull2010?tab=repositories , click it.

Result: Midori crashes, with the following backtrace:

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff4d0ebbd in webkit_web_view_get_tls_info () from /usr/lib64/libwebkit2gtk-3.0.so.25
(gdb)
(gdb)
(gdb)
(gdb)
(gdb) bt full
#0 0x00007ffff4d0ebbd in webkit_web_view_get_tls_info () from /usr/lib64/libwebkit2gtk-3.0.so.25
No symbol table info available.
#1 0x00007ffff7b50e41 in midori_view_get_tls_info () from /usr/lib64/libmidori-core.so.1
No symbol table info available.
#2 0x00007ffff7b554a2 in ?? () from /usr/lib64/libmidori-core.so.1
No symbol table info available.
#3 0x00007ffff4e561f0 in webkit_marshal_BOOLEAN__OBJECT_ENUM () from /usr/lib64/libwebkit2gtk-3.0.so.25
No symbol table info available.
#4 0x00007ffff78cc398 in g_closure_invoke () from /usr/lib64/libgobject-2.0.so.0
No symbol table info available.
#5 0x00007ffff78ddd1d in ?? () from /usr/lib64/libgobject-2.0.so.0
No symbol table info available.
#6 0x00007ffff78e56d9 in g_signal_emit_valist () from /usr/lib64/libgobject-2.0.so.0
No symbol table info available.
#7 0x00007ffff78e5cc2 in g_signal_emit () from /usr/lib64/libgobject-2.0.so.0
No symbol table info available.
#8 0x00007ffff4d0b7c1 in ?? () from /usr/lib64/libwebkit2gtk-3.0.so.25
No symbol table info available.
#9 0x00007ffff4cf5e31 in ?? () from /usr/lib64/libwebkit2gtk-3.0.so.25
No symbol table info available.
#10 0x00007ffff4cdf387 in ?? () from /usr/lib64/libwebkit2gtk-3.0.so.25
No symbol table info available.
#11 0x00007ffff4d7c511 in ?? () from /usr/lib64/libwebkit2gtk-3.0.so.25
No symbol table info available.
#12 0x00007ffff4e472ab in ?? () from /usr/lib64/libwebkit2gtk-3.0.so.25
No symbol table info available.
#13 0x00007ffff4e41d9c in ?? () from /usr/lib64/libwebkit2gtk-3.0.so.25
No symbol table info available.
#14 0x00007ffff60ac544 in ?? () from /usr/lib64/libwebkit2gtk-3.0.so.25
No symbol table info available.
#15 0x00007ffff4d918bc in ?? () from /usr/lib64/libwebkit2gtk-3.0.so.25
No symbol table info available.
#16 0x00007ffff60a59da in ?? () from /usr/lib64/libwebkit2gtk-3.0.so.25
No symbol table info available.
#17 0x00007ffff60a5af5 in ?? () from /usr/lib64/libwebkit2gtk-3.0.so.25
No symbol table info available.
#18 0x00007ffff60a5be0 in ?? () from /usr/lib64/libwebkit2gtk-3.0.so.25
No symbol table info available.
#19 0x00007ffff1d1d108 in WTF::RunLoop::performWork() () from /usr/lib64/libjavascriptcoregtk-3.0.so.0
No symbol table info available.
#20 0x00007ffff1d29b59 in WTF::RunLoop::queueWork(WTF::RunLoop*) () from /usr/lib64/libjavascriptcoregtk-3.0.so.0
No symbol table info available.
#21 0x00007ffff75d1b45 in g_main_context_dispatch () from /usr/lib64/libglib-2.0.so.0
No symbol table info available.
#22 0x00007ffff75d1ea8 in ?? () from /usr/lib64/libglib-2.0.so.0
No symbol table info available.
#23 0x00007ffff75d216a in g_main_loop_run () from /usr/lib64/libglib-2.0.so.0
No symbol table info available.
#24 0x00007ffff706e575 in gtk_main () from /usr/lib64/libgtk-3.so.0
No symbol table info available.
#25 0x0000000000402f22 in main ()
No symbol table info available.

This is on a Gentoo system:

$ LC_ALL=C midori --version

Midori 0.5.8 ((null)) Midori
GTK+ 3.12.2 (3.12.2) Glib 2.40.0 (2.40.0)
WebKit2GTK+ 2.4.4 (2.4.4) libSoup 2.46.0
cairo 1.12.16 (1.12.16) libnotify 0.7.6
gcr 3.12.2 granite No

Copyright (c) 2007-2013 Christian Dywan

Please report comments, suggestions and bugs to:
 https://bugs.launchpad.net/midori

Check for new versions at:
 http://www.midori-browser.org

I cannot post the information from about:version, because Midori freezes when trying to access that page.

Revision history for this message
Alexander E. Patrakov (patrakov-gmail) wrote :
Download full text (6.6 KiB)

Better backtrace:

(gdb) bt full
#0 0x00007ffff4d0ebbd in webkit_web_view_get_tls_info () from /usr/lib64/libwebkit2gtk-3.0.so.25
No locals.
#1 0x00007ffff7b50e41 in midori_view_get_tls_info () from /usr/lib64/libmidori-core.so.1
No locals.
#2 0x00007ffff7b554a2 in midori_view_web_view_navigation_decision_cb () from /usr/lib64/libmidori-core.so.1
No locals.
#3 0x00007ffff4e561f0 in webkit_marshal_BOOLEAN__OBJECT_ENUM () from /usr/lib64/libwebkit2gtk-3.0.so.25
No locals.
#4 0x00007ffff78cc398 in g_closure_invoke (closure=0x1a034c0, return_value=0x7fffffffcf00, n_param_values=3,
    param_values=0x7fffffffcfb0, invocation_hint=0x7fffffffcf50)
    at /usr/portage/packages/portage/dev-libs/glib-2.40.0-r1/work/glib-2.40.0/gobject/gclosure.c:768
        marshal = 0x7ffff4e56170 <webkit_marshal_BOOLEAN__OBJECT_ENUM()>
        marshal_data = 0x0
        in_marshal = 0
        real_closure = 0x1a034a0
        __FUNCTION__ = "g_closure_invoke"
#5 0x00007ffff78ddd1d in signal_emit_unlocked_R (node=node@entry=0x193d510, detail=detail@entry=0,
    instance=instance@entry=0x1a0f150, emission_return=emission_return@entry=0x7fffffffd0a0,
    instance_and_params=instance_and_params@entry=0x7fffffffcfb0)
    at /usr/portage/packages/portage/dev-libs/glib-2.40.0-r1/work/glib-2.40.0/gobject/gsignal.c:3551
        tmp = <optimized out>
        handler = 0x199b360
        accumulator = 0x1651ae0
        emission = {next = 0x0, instance = 0x1a0f150, ihint = {signal_id = 367, detail = 0, run_type = G_SIGNAL_RUN_FIRST},
          state = EMISSION_RUN, chain_type = 4}
        handler_list = 0x199b360
        return_accu = 0x7fffffffcf00
        accu = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0,
              v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0,
              v_float = 0, v_double = 0, v_pointer = 0x0}}}
        signal_id = 367
        max_sequential_handler_number = 3486
        return_value_altered = 0
#6 0x00007ffff78e56d9 in g_signal_emit_valist (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>,
    var_args=var_args@entry=0x7fffffffd168)
    at /usr/portage/packages/portage/dev-libs/glib-2.40.0-r1/work/glib-2.40.0/gobject/gsignal.c:3317
        return_value = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0,
              v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0,
              v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        error = 0x0
        rtype = 20
        static_scope = 0
---Type <return> to continue, or q <return> to quit---
        instance_and_params = 0x7fffffffcfb0
        signal_return_type = <optimized out>
        param_values = 0x7fffffffcfc8
        i = <optimized out>
        n_params = <optimized out>
        __FUNCTION__ = "g_signal_emit_valist"
#7 0x00007ffff78e5cc2 in g_signal_emit (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>)
    at /usr/portage/packages/portage/dev-libs/glib-2.40.0-r1/work/glib-2.40....

Read more...

Revision history for this message
Alexander E. Patrakov (patrakov-gmail) wrote :
Download full text (23.0 KiB)

Finally recompiled webkit with -O2 -g3, goth this backtrace:

(midori4:12909): GLib-GObject-WARNING **: g_object_get_valist: object class 'WebKitWindowProperties' has no property named 'width'

Program received signal SIGSEGV, Segmentation fault.
webkit_web_view_get_tls_info (webView=webView@entry=0x176a2c0, certificate=certificate@entry=0x7fffffffcd80,
    errors=errors@entry=0x7fffffffcd7c) at Source/WebKit2/UIProcess/API/gtk/WebKitWebView.cpp:3088
3088 Source/WebKit2/UIProcess/API/gtk/WebKitWebView.cpp: No such file or directory.
(gdb) bt full
#0 webkit_web_view_get_tls_info (webView=webView@entry=0x176a2c0, certificate=certificate@entry=0x7fffffffcd80,
    errors=errors@entry=0x7fffffffcd7c) at Source/WebKit2/UIProcess/API/gtk/WebKitWebView.cpp:3088
        __PRETTY_FUNCTION__ = "gboolean webkit_web_view_get_tls_info(WebKitWebView*, GTlsCertificate**, GTlsCertificateFlags*)"
        mainFrame = 0x0
#1 0x00007ffff7b50e41 in midori_view_get_tls_info (view=view@entry=0x1920490, request=request@entry=0x0,
    tls_cert=tls_cert@entry=0x7fffffffcd80, tls_flags=tls_flags@entry=0x7fffffffcd7c, hostname=hostname@entry=0x7fffffffcd88)
    at /usr/portage/packages/portage/www-client/midori-0.5.8-r1/work/midori/midori-view.c:492
        web_view = 0x176a2c0
        success = <optimized out>
#2 0x00007ffff7b554a2 in midori_view_web_view_navigation_decision_cb (web_view=<optimized out>, decision=0x14926d0,
    decision_type=WEBKIT_POLICY_DECISION_TYPE_NAVIGATION_ACTION, view=0x1920490)
    at /usr/portage/packages/portage/www-client/midori-0.5.8-r1/work/midori/midori-view.c:596
        tls_cert = 0x6a6ae0
        tls_flags = 32767
        hostname = 0x0
        request = 0x0
        uri = <optimized out>
        handled = 26642720
#3 0x00007ffff4e561f0 in webkit_marshal_BOOLEAN__OBJECT_ENUM (closure=0x14cb070, return_value=0x7fffffffcf00,
    n_param_values=<optimized out>, param_values=0x7fffffffcfb0, invocation_hint=<optimized out>, marshal_data=0x0)
    at DerivedSources/WebKit2/webkit2gtk/webkit2/WebKitMarshal.cpp:294
        cc = <optimized out>
        data1 = 0x176a2c0
        __PRETTY_FUNCTION__ = "void webkit_marshal_BOOLEAN__OBJECT_ENUM(GClosure*, GValue*, guint, const GValue*, gpointer, gpointer)"
        callback = <optimized out>
        data2 = <optimized out>
        v_return = <optimized out>
#4 0x00007ffff78cc398 in g_closure_invoke (closure=0x14cb070, return_value=0x7fffffffcf00, n_param_values=3,
    param_values=0x7fffffffcfb0, invocation_hint=0x7fffffffcf50)
    at /usr/portage/packages/portage/dev-libs/glib-2.40.0-r1/work/glib-2.40.0/gobject/gclosure.c:768
        marshal = 0x7ffff4e56170 <webkit_marshal_BOOLEAN__OBJECT_ENUM(GClosure*, GValue*, guint, GValue const*, gpointer, gpointer)>
        marshal_data = 0x0
        in_marshal = 0
        real_closure = 0x14cb050
        __FUNCTION__ = "g_closure_invoke"
#5 0x00007ffff78ddd1d in signal_emit_unlocked_R (node=node@entry=0x18fc6c0, detail=detail@entry=0,
    instance=instance@entry=0x176a2c0, emission_return=emission_return@entry=0x7fffffffd0a0,
    instance_and_params=instance_and_params@entry=0x7fffffffcfb0)
    at /usr/portage/packages/portage/dev-libs/glib-2.40...

summary: - Midori crashes on a specific page
+ Midori crashes in webkit_web_view_get_tls_info on a specific page
Revision history for this message
Michael Catanzaro (mike-catanzaro) wrote :

Hi Alexander :)

This is fixed in WebKitGTK+ 2.10.5 by http://trac.webkit.org/changeset/194890

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.