Midori crashes with SIGILL Illegal Instruction when loading www.google.com

[Graeme Jensz]

(There is a similar bug on the system - last updated 2013-04-24.)
(But the dump at the prompt is quite different.)

Midori 0.5.11 i386 pre-built binaries are downloaded.
OR
Midori 0.5.11 is built from source on a Pentium3 - i386 machine. (No SSE2.)
Build is successful - no issues.

Scripting - Javascript is turned on. (On by default.)

Midori crashes when trying to load www.google.com
(When Javascript is turned off this page loads correctly.)

me@me-desktop:~/Downloads/midori-0.5.11$ _build/midori/midori -g
Launching command: '/usr/bin/gdb' --batch -ex 'set print thread-events off' -ex run -ex 'set logging on /run/user/1000/midori/gdb.bt' -ex 'bt' --return-child-result --args _build/midori/midori
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
Vector smash protection is enabled.
Vector smash protection is enabled.
Vector smash protection is enabled.
Vector smash protection is enabled.

Program received signal SIGILL, Illegal instruction.
0xaaa50875 in ?? ()
#0 0xaaa50875 in ?? ()
#1 0xb4c861e4 in ?? () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
#2 0xb4c861e4 in ?? () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
#3 0xb4c862a0 in ?? () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
#4 0xb4c861e4 in ?? () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
#5 0xb4c861e4 in ?? () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
#6 0xb4c861e4 in ?? () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
#7 0xb4c82c42 in ?? () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
#8 0xb4c25cc8 in JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*, JSC::Register*) () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
#9 0xb4c0952d in JSC::Interpreter::execute(JSC::ProgramExecutable*, JSC::ExecState*, JSC::JSObject*) () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
#10 0xb4d3969d in JSC::evaluate(JSC::ExecState*, JSC::SourceCode const&, JSC::JSValue, JSC::JSValue*) () from /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
#11 0xb6391f7e in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#12 0xb639226c in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#13 0xb6566ac7 in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#14 0xb6566fd6 in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#15 0xb6745a91 in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#16 0xb67463c3 in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#17 0xb672f734 in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#18 0xb672f7e5 in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#19 0xb67312cf in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#20 0xb673169c in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#21 0xb6731beb in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#22 0xb64ec122 in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#23 0xb68a2bdf in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#24 0xb6894f32 in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#25 0xb61af980 in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#26 0xb6893663 in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#27 0xb6894417 in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#28 0xb68793f7 in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#29 0xb68795f3 in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#30 0xb68ec373 in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#31 0xb68ec586 in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#32 0xb68e0e6c in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#33 0xb71569ed in ?? () from /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
#34 0xb5381a25 in ?? () from /usr/lib/i386-linux-gnu/libgio-2.0.so.0
#35 0xb53aa490 in ?? () from /usr/lib/i386-linux-gnu/libgio-2.0.so.0
#36 0xb53aa4db in ?? () from /usr/lib/i386-linux-gnu/libgio-2.0.so.0
#37 0xb7d7c410 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#38 0xb7d7fb9b in g_main_context_dispatch () from /lib/i386-linux-gnu/libglib-2.0.so.0
#39 0xb7d7ff89 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#40 0xb7d80339 in g_main_loop_run () from /lib/i386-linux-gnu/libglib-2.0.so.0
#41 0xb5c307a5 in gtk_main () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#42 0x0804afcf in main (argc=1, argv=0xbffff314) at /home/me/Downloads/midori-0.5.11/midori/main.c:392
me@me-desktop:~/Downloads/midori-0.5.11$

[gue5t gue5t (gue5t)]

What version of WebKitGTK+ are you using (this can be found at <about:version>)? This seems to be a webkit bug in JSCore. Does setting the environment variable "JavaScriptCoreUseJIT" to 0 avoid the crash?

[Graeme Jensz (wilytm)]

Hi,

WebKitGTK+ is 2.4.9

In BASH I executed:
$export JavaScriptCoreUseJIT=0
$printenv

Then I started Midori...
It's working
The browser no-longer crashes loading www.google.com
I'm using my P3 - i386 computer to send this email reply.

Well done.

Regards
Graeme J

On 1/11/16, gue5t gue5t <email address hidden> wrote:
> What version of WebKitGTK+ are you using (this can be found at
> <about:version>)? This seems to be a webkit bug in JSCore. Does setting
> the environment variable "JavaScriptCoreUseJIT" to 0 avoid the crash?
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1530422
>
> Title:
> Midori crashes with SIGILL Illegal Instruction when loading
> www.google.com
>
> Status in Midori:
> New
>
> Bug description:
> (There is a similar bug on the system - last updated 2013-04-24.)
> (But the dump at the prompt is quite different.)
>
> Midori 0.5.11 i386 pre-built binaries are downloaded.
> OR
> Midori 0.5.11 is built from source on a Pentium3 - i386 machine. (No
> SSE2.)
> Build is successful - no issues.
>
> Scripting - Javascript is turned on. (On by default.)
>
> Midori crashes when trying to load www.google.com
> (When Javascript is turned off this page loads correctly.)
>
> me@me-desktop:~/Downloads/midori-0.5.11$ _build/midori/midori -g
> Launching command: '/usr/bin/gdb' --batch -ex 'set print thread-events
> off' -ex run -ex 'set logging on /run/user/1000/midori/gdb.bt' -ex 'bt'
> --return-child-result --args _build/midori/midori
> [Thread debugging using libthread_db enabled]
> Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
> Vector smash protection is enabled.
> Vector smash protection is enabled.
> Vector smash protection is enabled.
> Vector smash protection is enabled.
>
> Program received signal SIGILL, Illegal instruction.
> 0xaaa50875 in ?? ()
> #0 0xaaa50875 in ?? ()
> #1 0xb4c861e4 in ?? () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #2 0xb4c861e4 in ?? () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #3 0xb4c862a0 in ?? () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #4 0xb4c861e4 in ?? () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #5 0xb4c861e4 in ?? () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #6 0xb4c861e4 in ?? () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #7 0xb4c82c42 in ?? () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #8 0xb4c25cc8 in JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*,
> JSC::Register*) () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #9 0xb4c0952d in JSC::Interpreter::execute(JSC::ProgramExecutable*,
> JSC::ExecState*, JSC::JSObject*) () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #10 0xb4d3969d in JSC::evaluate(JSC::ExecState*, JSC::SourceCode const&,
> JSC::JSValue, JSC::JSValue*) () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #11 0xb6391f7e in ?? () from
> /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
> #12 0xb639226c...

[gue5t gue5t (gue5t)]

That confirms my suspicion that the problem was WebKit's JIT generating code for a newer processor than P3. It might be that WebKit isn't recognizing your processor model properly and as a result doesn't configure JIT properly. If you could report this bug on your distribution's bug tracker or the WebKit bug tracker at https://bugs.webkit.org/, it might be possible to remove the workaround. Otherwise, glad you got it working.

[Mat Kramer (mat-b)]

I have run into this also, on an old Sony laptop running Bodhi Linux. Setting the environment variable appears to work for me too. Has the bug been posted with Webkit? Is there a tracking number? Thanks.

[Graeme Jensz (wilytm)]

Hi Mat,

No, the bug has not, as yet, been posted with Webkit.

Regards
Graeme J

On Thu, Apr 28, 2016 at 12:31 PM, Mat Kramer <email address hidden> wrote:

> I have run into this also, on an old Sony laptop running Bodhi Linux.
> Setting the environment variable appears to work for me too. Has the bug
> been posted with Webkit? Is there a tracking number? Thanks.
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1530422
>
> Title:
> Midori crashes with SIGILL Illegal Instruction when loading
> www.google.com
>
> Status in Midori:
> New
>
> Bug description:
> (There is a similar bug on the system - last updated 2013-04-24.)
> (But the dump at the prompt is quite different.)
>
> Midori 0.5.11 i386 pre-built binaries are downloaded.
> OR
> Midori 0.5.11 is built from source on a Pentium3 - i386 machine. (No
> SSE2.)
> Build is successful - no issues.
>
> Scripting - Javascript is turned on. (On by default.)
>
> Midori crashes when trying to load www.google.com
> (When Javascript is turned off this page loads correctly.)
>
> me@me-desktop:~/Downloads/midori-0.5.11$ _build/midori/midori -g
> Launching command: '/usr/bin/gdb' --batch -ex 'set print thread-events
> off' -ex run -ex 'set logging on /run/user/1000/midori/gdb.bt' -ex 'bt'
> --return-child-result --args _build/midori/midori
> [Thread debugging using libthread_db enabled]
> Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
> Vector smash protection is enabled.
> Vector smash protection is enabled.
> Vector smash protection is enabled.
> Vector smash protection is enabled.
>
> Program received signal SIGILL, Illegal instruction.
> 0xaaa50875 in ?? ()
> #0 0xaaa50875 in ?? ()
> #1 0xb4c861e4 in ?? () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #2 0xb4c861e4 in ?? () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #3 0xb4c862a0 in ?? () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #4 0xb4c861e4 in ?? () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #5 0xb4c861e4 in ?? () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #6 0xb4c861e4 in ?? () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #7 0xb4c82c42 in ?? () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #8 0xb4c25cc8 in JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*,
> JSC::Register*) () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #9 0xb4c0952d in JSC::Interpreter::execute(JSC::ProgramExecutable*,
> JSC::ExecState*, JSC::JSObject*) () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #10 0xb4d3969d in JSC::evaluate(JSC::ExecState*, JSC::SourceCode const&,
> JSC::JSValue, JSC::JSValue*) () from
> /usr/lib/i386-linux-gnu/libjavascriptcoregtk-1.0.so.0
> #11 0xb6391f7e in ?? () from
> /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
> #12 0xb639226c in ?? () from
> /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
> #13 0xb6566ac7 in ?? () from
> /usr/lib/i386-linux-gnu/libwebkitgtk-1.0.so.0
> #14 0xb6566fd6 in ?? () f...