Comment 6 for bug 1263705

Revision history for this message
Jiří Janoušek (fenryxo) wrote :

I've made a few improvements. Currently, I cannot reproduce crash in function chain nuvola_frame_bridge_execute_script -> JSEvaluateScript -> JSC::evaluate -> ... -> WTFCrash. However, the test suite crashes when JavaScriptCore runs garbage collector:

==12430== Process terminating with default action of signal 11 (SIGSEGV)
==12430== Access not within mapped region at address 0x0
==12430== at 0x92077B7: JSC::CodeBlock::~CodeBlock() (SentinelLinkedList.h:60)
==12430== by 0x920D203: JSC::FunctionCodeBlock::~FunctionCodeBlock() (CodeBlock.h:1300)
==12430== by 0x9378142: JSC::FunctionExecutable::discardCode() (OwnPtrCommon.h:54)
==12430== by 0x9392D1C: JSC::JSGlobalData::recompileAllJSFunctions() (JSGlobalData.cpp:86)
==12430== by 0x92A2C6C: JSC::Heap::collectAllGarbage() (Heap.cpp:771)
==12430== by 0x70FC9B1: WebCore::ThreadTimers::sharedTimerFiredInternal() (ThreadTimers.cpp:115)
==12430== by 0x7942151: WebCore::timeout_cb(void*) (SharedTimerGtk.cpp:49)
==12430== by 0x5558EEA: g_timeout_dispatch (gmain.c:3882)
==12430== by 0x5558354: g_main_context_dispatch (gmain.c:2539)
==12430== by 0x5558687: g_main_context_iterate.isra.23 (gmain.c:3146)
==12430== by 0x5558A81: g_main_loop_run (gmain.c:3340)
==12430== by 0x53085B8: fso_framework_test_wait_for_condition (asynchelpers.vala:97)

I will need to get touch with WebKitGtk/JavaScriptCore developers to help me to find out a cause of this crash and fix the issue.