WebKitWebProcess crashed with SIGSEGV in add<WTF::IdentityHashTranslator<WTF::HashTraits<JSC::MarkedArgumentBuffer*>, WTF::PtrHash<JSC::MarkedArgumentBuffer*> >, JSC::MarkedArgumentBuffer* const&, JSC::MarkedArgumentBuffer*>()

[Jeremy Bícha]

Test Case
---------
epiphany-browser -i
Type test in the address bar and select Duck Duck Go.

Page partially loads, then hangs and crashes.

ProblemType: Crash
DistroRelease: Ubuntu 17.04
Package: libwebkit2gtk-4.0-37 2.15.90-1
ProcVersionSignature: Ubuntu 4.10.0-8.10-generic 4.10.0-rc8
Uname: Linux 4.10.0-8-generic x86_64
ApportVersion: 2.20.4-0ubuntu2
Architecture: amd64
CurrentDesktop: GNOME
Date: Tue Feb 28 10:05:04 2017
EcryptfsInUse: Yes
ExecutablePath: /usr/lib/x86_64-linux-gnu/webkit2gtk-4.0/WebKitWebProcess
InstallationDate: Installed on 2017-02-23 (4 days ago)
InstallationMedia: Ubuntu-GNOME 17.04 "Zesty Zapus" - Alpha amd64 (20170219)
ProcCmdline: /usr/lib/x86_64-linux-gnu/webkit2gtk-4.0/WebKitWebProcess 26
ProcEnviron:
 TERM=xterm-256color
 PATH=(custom, user)
 XDG_RUNTIME_DIR=<set>
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SegvAnalysis:
 Segfault happened at: 0x7f4944aefb13 <_ZN3JSC20MarkedArgumentBuffer10addMarkSetENS_7JSValueE+99>: mov 0x0(%rbp),%rax
 PC (0x7f4944aefb13) ok
 source "0x0(%rbp)" (0x00000001) not located in a known VMA region (needed readable region)!
 destination "%rax" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: webkit2gtk
StacktraceTop:
 JSC::MarkedArgumentBuffer::addMarkSet(JSC::JSValue) () from /usr/lib/x86_64-linux-gnu/libjavascriptcoregtk-4.0.so.18
 JSC::MarkedArgumentBuffer::expandCapacity(int) () from /usr/lib/x86_64-linux-gnu/libjavascriptcoregtk-4.0.so.18
 JSC::CachedCall::CachedCall(JSC::ExecState*, JSC::JSFunction*, int) () from /usr/lib/x86_64-linux-gnu/libjavascriptcoregtk-4.0.so.18
 JSC::operationStringProtoFuncReplaceGeneric(JSC::ExecState*, long, long, long) () from /usr/lib/x86_64-linux-gnu/libjavascriptcoregtk-4.0.so.18
 ?? ()
Title: WebKitWebProcess crashed with SIGSEGV in JSC::MarkedArgumentBuffer::addMarkSet()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sbuild sudo

[Apport retracing service (apport)]

StacktraceTop:
 add<WTF::IdentityHashTranslator<WTF::HashTraits<JSC::MarkedArgumentBuffer*>, WTF::PtrHash<JSC::MarkedArgumentBuffer*> >, JSC::MarkedArgumentBuffer* const&, JSC::MarkedArgumentBuffer*> (extra=<optimized out>, key=<optimized out>, this=0x1) at ./Source/WTF/wtf/HashTable.h:868
 add (value=<optimized out>, this=0x1) at ./Source/WTF/wtf/HashTable.h:387
 add (value=<optimized out>, this=<optimized out>) at ./Source/WTF/wtf/HashSet.h:223
 JSC::MarkedArgumentBuffer::addMarkSet (this=this@entry=0x7ffd38414e68, v=...) at ./Source/JavaScriptCore/runtime/ArgList.cpp:42
 JSC::MarkedArgumentBuffer::expandCapacity (this=this@entry=0x7ffd38414e68, newCapacity=newCapacity@entry=9) at ./Source/JavaScriptCore/runtime/ArgList.cpp:85