webkit crashes with SIGSEGV on ARM

[Ricardo Salveti]

Package: libwebkitgtk-1.0-0 1.3.12-0ubuntu2
Distro: Ubuntu Natty

Webkit crashes with SIGSEGV while starting on ARM. To easily reproduce the issue just start /usr/lib/webkitgtk-1.0-0/libexec/GtkLauncher (webkit-only browser) and wait until it receives the SIGSEGV.

This bug also happens with other applications depending on Webkit, like oem-config (slide show).

Follows the apport data.

ProblemType: Crash
DistroRelease: Ubuntu 11.04
Package: libwebkitgtk-1.0-0 1.3.12-0ubuntu2
ProcVersionSignature: Ubuntu 2.6.35-1102.5release1-omap4 2.6.35.3
Uname: Linux 2.6.35-1102-omap4 armv7l
Architecture: armel
Date: Thu Mar 3 01:01:35 2011
ExecutablePath: /usr/lib/webkitgtk-1.0-0/libexec/GtkLauncher
ProcCmdline: /usr/lib/webkitgtk-1.0-0/libexec/GtkLauncher
ProcEnviron:
 SHELL=/bin/bash
 LANG=en_US.UTF-8
Signal: 11
SourcePackage: webkit
StacktraceTop:
 ?? ()
 ?? ()
 ?? ()
Title: GtkLauncher crashed with SIGSEGV
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare

[Ricardo Salveti (rsalveti)]

Can't get the backtrace probably due a GDB bug (will open it and post back the link).

Will build webkit with gcc-4.4 to see if it could be related with a toolchain bug.

[Ricardo Salveti (rsalveti)]

GDB bug while getting the backtrace: bug 728216

[Ricardo Salveti (rsalveti)]

This bug doesn't seems to be related with the toolchain, as I could reproduce the same problem with gcc/g++ 4.4.

But I can confirm that this issue happens inside JIT, and that's why GDB can't trace it properly. Once I build with --disable-jit it works fine.

[Ricardo Salveti (rsalveti)]

Merge proposal with the fix: https://code.launchpad.net/~rsalveti/webkit/arm-crash-fix/+merge/52803

Patch (backport from upstream): http://bazaar.launchpad.net/~rsalveti/webkit/arm-crash-fix/view/head:/debian/patches/03_fixing_jit_arm_crashes.patch

Tested with /usr/lib/webkitgtk-1.0-0/libexec/GtkLauncher and also by installing with the pre-installed image (after also installing the slideshow).

[Ricardo Salveti (rsalveti)]

Built packages, in case someone wants to test it: http://people.canonical.com/~rsalveti/728211/

[Launchpad Janitor (janitor)]

This bug was fixed in the package webkit - 1.3.12-0ubuntu3

---------------
webkit (1.3.12-0ubuntu3) natty; urgency=low

  [ Ricardo Salveti de Araujo ]
  * debian/patches/03_fixing_jit_arm_crashes.patch:
    - Fixing JIT ARM crashes (LP: #728211)
 -- Jani Monoses <email address hidden> Thu, 10 Mar 2011 16:29:12 +0200