Bug#559428: epiphany crashes whenever a link on a toolbar is pressed

David Weinehall tao at debian.org
Fri Dec 4 10:43:45 UTC 2009


Package: epiphany-webkit
Severity: serious
Version: 2.29.3-1

With the latest epiphany-webkit, the browser crashes every time you
middle-click a link that has been added to a toolbar.  This is a regression
compared to 2.29.1-2.

Justification for severity -- makes package totally unfit for release;
major regression (epiphany-webkit is in my opinion in general totally
unfit for release due to the severe lack of functionality compared to
epiphany-gecko, but that's another issue).

Backtrace of the crash, courtesy of bug-buddy attached.

Steps to reproduce (in cleanest way possible; the bug-buddy report was
produced this way):

1.) Open browser with epiphany-browser -p
2.) Add a bookmark to a toolbar by dragging a url to it
3.) Middle click on this link
4.) ???
5.) Profit!


Regards: David
-- 
 /) David Weinehall <tao at debian.org> /) Rime on my window           (\
//  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~   //  Diamond-white roses of fire //
\)  http://www.acc.umu.se/~tao/    (/   Beautiful hoar-frost       (/
-------------- next part --------------
System: Linux 2.6.32-rc8-686 #1 SMP Tue Nov 24 19:47:09 UTC 2009 i686
X Vendor: The X.Org Foundation
X Vendor Release: 10702000
Selinux: No
Accessibility: Disabled
GTK+ Theme: ThinIce
Icon Theme: Gion
GTK+ Modules: gnomebreakpad, canberra-gtk-module

Memory status: size: 103948288 vsize: 103948288 resident: 29589504 share: 20926464 rss: 29589504 rss_rlim: 18446744073709551615
CPU usage: start_time: 1259923244 rtime: 97 utime: 87 stime: 10 cutime:0 cstime: 0 timeout: 0 it_real_value: 0 frequency: 100

Backtrace was generated from '/usr/bin/epiphany-browser'

[Thread debugging using libthread_db enabled]
[New Thread 0xb353ab70 (LWP 906)]
0xb78ce424 in __kernel_vsyscall ()
#0  0xb78ce424 in __kernel_vsyscall ()
#1  0xb603ef0b in waitpid () from /lib/i686/cmov/libpthread.so.0
#2  0xb6196a57 in IA__g_spawn_sync (working_directory=0x0, argv=0x9871568, 
    envp=0x0, flags=<value optimized out>, child_setup=0, user_data=0x0, 
    standard_output=0x0, standard_error=0x0, exit_status=0x0, error=0xbf8ae558)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/glib/gspawn.c:386
#3  0xb6196d7c in IA__g_spawn_command_line_sync (
    command_line=0x9837a40 "bug-buddy --appname=\"epiphany\" --pid=905", 
    standard_output=0x0, standard_error=0x0, exit_status=0x0, error=0xbf8ae558)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/glib/gspawn.c:700
#4  0xb78b3a54 in ?? () from /usr/lib/gtk-2.0/modules/libgnomebreakpad.so
#5  <signal handler called>
#6  0xb6214cd6 in value_lcopy_boolean (value=0xbf8aebd8, n_collect_values=1, 
    collect_values=0xbf8aeb58, collect_flags=0)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/gobject/gvaluetypes.c:79
#7  0xb6203458 in IA__g_signal_emit_valist (instance=0x96ade78, signal_id=33, 
    detail=0, 
    var_args=0xbf8aec70 "\344I}\266\344I}\266\230???f1U\266x\336j\t at .a\t\230}d\t\230\366!\266\320\060U\266\340\233\210\t(???\343\335\036\266\340\233\210\t\020???\002")
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/gobject/gsignal.c:2992
#8  0xb6203655 in IA__g_signal_emit_by_name (instance=0x96ade78, 
    detailed_signal=0x80f638c "button-press-event")
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/gobject/gsignal.c:3074
#9  0x080b91ad in button_press_cb (widget=0x96ade78, event=0x9612e40, 
    action=0x9647d98)
    at /build/buildd-epiphany-browser_2.29.3-1-i386-oYKDhT/epiphany-browser-2.29.3/src/bookmarks/ephy-bookmark-action.c:446
#10 0xb6553166 in _gtk_marshal_BOOLEAN__BOXED (closure=0x9889be0, 
    return_value=0xbf8aee10, n_param_values=2, param_values=0x988f118, 
    invocation_hint=0xbf8aedfc, marshal_data=0x80b9170)
    at /build/buildd-gtk+2.0_2.18.4-1-i386-1vBdiD/gtk+2.0-2.18.4/gtk/gtkmarshalers.c:84
#11 0xb61edde3 in IA__g_closure_invoke (closure=0x9889be0, 
    return_value=0xbf8aee10, n_param_values=2, param_values=0x988f118, 
    invocation_hint=0xbf8aedfc)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/gobject/gclosure.c:767
#12 0xb6201f0f in signal_emit_unlocked_R (node=0x950ace8, detail=0, 
    instance=0x96ade78, emission_return=0xbf8aef48, 
    instance_and_params=0x988f118)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/gobject/gsignal.c:3247
#13 0xb62031ef in IA__g_signal_emit_valist (instance=0x96ade78, signal_id=33, 
    detail=0, 
    var_args=0xbf8aefa0 "\270???@.a\tx\336j\tOcg\266x\336j\t\300\005Q\t")
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/gobject/gsignal.c:2990
#14 0xb62037b6 in IA__g_signal_emit (instance=0x96ade78, signal_id=33, 
    detail=0)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/gobject/gsignal.c:3037
#15 0xb666f4f6 in gtk_widget_event_internal (widget=0x96ade78, event=0x9612e40)
    at /build/buildd-gtk+2.0_2.18.4-1-i386-1vBdiD/gtk+2.0-2.18.4/gtk/gtkwidget.c:4767
#16 0xb654b8fc in IA__gtk_propagate_event (widget=0x96ade78, event=0x9612e40)
    at /build/buildd-gtk+2.0_2.18.4-1-i386-1vBdiD/gtk+2.0-2.18.4/gtk/gtkmain.c:2417
#17 0xb654cd77 in IA__gtk_main_do_event (event=0x9612e40)
    at /build/buildd-gtk+2.0_2.18.4-1-i386-1vBdiD/gtk+2.0-2.18.4/gtk/gtkmain.c:1607
#18 0xb638e74a in gdk_event_dispatch (source=0x9509040, callback=0, 
    user_data=0x0)
    at /build/buildd-gtk+2.0_2.18.4-1-i386-1vBdiD/gtk+2.0-2.18.4/gdk/x11/gdkevents-x11.c:2372
#19 0xb615df28 in g_main_dispatch (context=0x9509088)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/glib/gmain.c:1960
#20 IA__g_main_context_dispatch (context=0x9509088)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/glib/gmain.c:2513
#21 0xb61616b3 in g_main_context_iterate (context=0x9509088, block=1, 
    dispatch=1, self=0x94e0258)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/glib/gmain.c:2591
#22 0xb6161b7a in IA__g_main_loop_run (loop=0x953c6f0)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/glib/gmain.c:2799
#23 0xb654d109 in IA__gtk_main ()
    at /build/buildd-gtk+2.0_2.18.4-1-i386-1vBdiD/gtk+2.0-2.18.4/gtk/gtkmain.c:1218
#24 0x080711af in main (argc=)
    at /build/buildd-epiphany-browser_2.29.3-1-i386-oYKDhT/epiphany-browser-2.29.3/src/ephy-main.c:780

Thread 2 (Thread 0xb353ab70 (LWP 906)):
#0  0xb78ce424 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb603b0a5 in pthread_cond_wait@@GLIBC_2.3.2 ()
    at ../nptl/sysdeps/unix/sysv/linux/i386/i686/../i486/pthread_cond_wait.S:122
No locals.
#2  0xb6a72551 in WTF::TCMalloc_PageHeap::scavengerThread (this=0xb750cac0)
    at ../JavaScriptCore/wtf/FastMalloc.cpp:2299
No locals.
#3  0xb6a72581 in WTF::TCMalloc_PageHeap::runScavengerThread (
    context=0xb750cac0) at ../JavaScriptCore/wtf/FastMalloc.cpp:1433
No locals.
#4  0xb6037585 in start_thread (arg=0xb353ab70) at pthread_create.c:300
        __res = <value optimized out>
        __ignore1 = <value optimized out>
        __ignore2 = <value optimized out>
        pd = 0xb353ab70
        now = <value optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1241223180, 0, 4001536, 
                -1286364168, 1577362829, -5738617}, mask_was_saved = 0}}, 
          priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, 
              cleanup = 0x0, canceltype = 0}}}
        not_first_call = <value optimized out>
#5  0xb5fb92be in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130
No locals.

Thread 1 (Thread 0xb441ba40 (LWP 905)):
#0  0xb78ce424 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb603ef0b in waitpid () from /lib/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb6196a57 in IA__g_spawn_sync (working_directory=0x0, argv=0x9871568, 
    envp=0x0, flags=<value optimized out>, child_setup=0, user_data=0x0, 
    standard_output=0x0, standard_error=0x0, exit_status=0x0, error=0xbf8ae558)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/glib/gspawn.c:386
        outpipe = -1
        errpipe = -1
        pid = 909
        fds = {__fds_bits = {160, 0, 8, 0, -1239576188, 0, 160031240, 
            -1081416808, -1239950719, 8, 160031240, 4, -1239576188, 0, 
            159847796, -1081416712, -1239963395, 160031240, -1240047552, 0, 
            -1240047430, 160060424, -1241329676, 9, -1081416728, -1081416732, 
            159847784, 3, 0, 891429377, 160031240, 2841304}}
        ret = <value optimized out>
        outstr = 0x0
        errstr = 0x0
        failed = 0
        status = <value optimized out>
        __PRETTY_FUNCTION__ = "IA__g_spawn_sync"
#3  0xb6196d7c in IA__g_spawn_command_line_sync (
    command_line=0x9837a40 "bug-buddy --appname=\"epiphany\" --pid=905", 
    standard_output=0x0, standard_error=0x0, exit_status=0x0, error=0xbf8ae558)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/glib/gspawn.c:700
        retval = 0
        argv = 0x9871568
        __PRETTY_FUNCTION__ = "IA__g_spawn_command_line_sync"
#4  0xb78b3a54 in ?? () from /usr/lib/gtk-2.0/modules/libgnomebreakpad.so
No symbol table info available.
#5  <signal handler called>
No symbol table info available.
#6  0xb6214cd6 in value_lcopy_boolean (value=0xbf8aebd8, n_collect_values=1, 
    collect_values=0xbf8aeb58, collect_flags=0)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/gobject/gvaluetypes.c:79
        bool_p = 0xb61ec686
#7  0xb6203458 in IA__g_signal_emit_valist (instance=0x96ade78, signal_id=33, 
    detail=0, 
    var_args=0xbf8aec70 "\344I}\266\344I}\266\230???f1U\266x\336j\t at .a\t\230}d\t\230\366!\266\320\060U\266\340\233\210\t(???\343\335\036\266\340\233\210\t\020???\002")
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/gobject/gsignal.c:2992
        _flags = 0
        _vtable = 0x94e3850
        _cvalues = {{v_int = -1239497082, v_long = -1239497082, 
            v_int64 = 3055470214, v_double = 1.5096028646286018e-314, 
            v_pointer = 0xb61ec686}, {v_int = 0, v_long = 0, v_int64 = 0, 
            v_double = 0, v_pointer = 0x0}, {v_int = 0, v_long = 0, 
            v_int64 = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, 
            v_long = 0, v_int64 = 0, v_double = 0, v_pointer = 0x0}, {
            v_int = 0, v_long = 0, v_int64 = 0, v_double = 0, 
            v_pointer = 0x0}, {v_int = 0, v_long = 0, v_int64 = 0, 
            v_double = 0, v_pointer = 0x0}, {v_int = 0, v_long = 0, 
            v_int64 = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, 
            v_long = 0, v_int64 = 0, v_double = 0, v_pointer = 0x0}}
        _lcopy_format = 0x94e3872 "p"
        _n_values = <value optimized out>
        return_value = {g_type = 20, data = {{v_int = 1, v_uint = 1, 
              v_long = 1, v_ulong = 1, v_int64 = 1, v_uint64 = 1, 
              v_float = 1.40129846e-45, v_double = 4.9406564584124654e-324, 
              v_pointer = 0x1}, {v_int = 0, v_uint = 0, v_long = 0, 
              v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, 
              v_double = 0, v_pointer = 0x0}}}
        error = <value optimized out>
        signal_return_type = 20
        param_values = 0x956ab54
        node = 0xbf8aeb58
        i = 1
        n_params = 1
        __PRETTY_FUNCTION__ = "IA__g_signal_emit_valist"
#8  0xb6203655 in IA__g_signal_emit_by_name (instance=0x96ade78, 
    detailed_signal=0x80f638c "button-press-event")
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/gobject/gsignal.c:3074
        detail = 0
        signal_id = 33
        __PRETTY_FUNCTION__ = "IA__g_signal_emit_by_name"
#9  0x080b91ad in button_press_cb (widget=0x96ade78, event=0x9612e40, 
    action=0x9647d98)
    at /build/buildd-epiphany-browser_2.29.3-1-i386-oYKDhT/epiphany-browser-2.29.3/src/bookmarks/ephy-bookmark-action.c:446
No locals.
#10 0xb6553166 in _gtk_marshal_BOOLEAN__BOXED (closure=0x9889be0, 
    return_value=0xbf8aee10, n_param_values=2, param_values=0x988f118, 
    invocation_hint=0xbf8aedfc, marshal_data=0x80b9170)
    at /build/buildd-gtk+2.0_2.18.4-1-i386-1vBdiD/gtk+2.0-2.18.4/gtk/gtkmarshalers.c:84
        data1 = 0x96ade78
        data2 = <value optimized out>
        v_return = <value optimized out>
        __PRETTY_FUNCTION__ = "_gtk_marshal_BOOLEAN__BOXED"
#11 0xb61edde3 in IA__g_closure_invoke (closure=0x9889be0, 
    return_value=0xbf8aee10, n_param_values=2, param_values=0x988f118, 
    invocation_hint=0xbf8aedfc)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/gobject/gclosure.c:767
        marshal = 0xb65530d0 <_gtk_marshal_BOOLEAN__BOXED>
        marshal_data = 0x0
        __PRETTY_FUNCTION__ = "IA__g_closure_invoke"
#12 0xb6201f0f in signal_emit_unlocked_R (node=0x950ace8, detail=0, 
    instance=0x96ade78, emission_return=0xbf8aef48, 
    instance_and_params=0x988f118)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/gobject/gsignal.c:3247
        tmp = <value optimized out>
        handler = 0x98aa000
        accumulator = 0x950ac38
        emission = {next = 0x0, instance = 0x96ade78, ihint = {signal_id = 33, 
            detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, 
          chain_type = 4}
        class_closure = 0x950aca8
        handler_list = 0x98aa000
        return_accu = 0xbf8aee10
        accu = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, 
              v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, 
              v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, 
              v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, 
              v_double = 0, v_pointer = 0x0}}}
        signal_id = 33
        max_sequential_handler_number = 1968
        return_value_altered = 0
#13 0xb62031ef in IA__g_signal_emit_valist (instance=0x96ade78, signal_id=33, 
    detail=0, 
    var_args=0xbf8aefa0 "\270???@.a\tx\336j\tOcg\266x\336j\t\300\005Q\t")
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/gobject/gsignal.c:2990
        return_value = {g_type = 20, data = {{v_int = 0, v_uint = 0, 
              v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, 
              v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, 
              v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, 
              v_double = 0, v_pointer = 0x0}}}
        error = <value optimized out>
        signal_return_type = 20
        param_values = 0x988f12c
        node = 0x950ace8
        i = 1
        n_params = 1
        __PRETTY_FUNCTION__ = "IA__g_signal_emit_valist"
#14 0xb62037b6 in IA__g_signal_emit (instance=0x96ade78, signal_id=33, 
    detail=0)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/gobject/gsignal.c:3037
No locals.
#15 0xb666f4f6 in gtk_widget_event_internal (widget=0x96ade78, event=0x9612e40)
    at /build/buildd-gtk+2.0_2.18.4-1-i386-1vBdiD/gtk+2.0-2.18.4/gtk/gtkwidget.c:4767
        signal_num = <value optimized out>
        return_val = 0
#16 0xb654b8fc in IA__gtk_propagate_event (widget=0x96ade78, event=0x9612e40)
    at /build/buildd-gtk+2.0_2.18.4-1-i386-1vBdiD/gtk+2.0-2.18.4/gtk/gtkmain.c:2417
        tmp = 0x9547a70
        handled_event = 157363776
        __PRETTY_FUNCTION__ = "IA__gtk_propagate_event"
#17 0xb654cd77 in IA__gtk_main_do_event (event=0x9612e40)
    at /build/buildd-gtk+2.0_2.18.4-1-i386-1vBdiD/gtk+2.0-2.18.4/gtk/gtkmain.c:1607
        event_widget = 0x96ade78
        grab_widget = 0x96ade78
        window_group = 0x9547a70
        rewritten_event = 0x0
        tmp_list = <value optimized out>
        __PRETTY_FUNCTION__ = "IA__gtk_main_do_event"
#18 0xb638e74a in gdk_event_dispatch (source=0x9509040, callback=0, 
    user_data=0x0)
    at /build/buildd-gtk+2.0_2.18.4-1-i386-1vBdiD/gtk+2.0-2.18.4/gdk/x11/gdkevents-x11.c:2372
        display = <value optimized out>
        event = <value optimized out>
#19 0xb615df28 in g_main_dispatch (context=0x9509088)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/glib/gmain.c:1960
        __PRETTY_FUNCTION__ = "g_main_dispatch"
#20 IA__g_main_context_dispatch (context=0x9509088)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/glib/gmain.c:2513
No locals.
#21 0xb61616b3 in g_main_context_iterate (context=0x9509088, block=1, 
    dispatch=1, self=0x94e0258)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/glib/gmain.c:2591
        max_priority = 0
        timeout = 0
        some_ready = 1
        nfds = 12
        allocated_nfds = <value optimized out>
        fds = 0x9842e98
        __PRETTY_FUNCTION__ = "g_main_context_iterate"
#22 0xb6161b7a in IA__g_main_loop_run (loop=0x953c6f0)
    at /build/buildd-glib2.0_2.22.3-1-i386-Y6yR35/glib2.0-2.22.3/glib/gmain.c:2799
        self = 0x94e0258
        __PRETTY_FUNCTION__ = "IA__g_main_loop_run"
#23 0xb654d109 in IA__gtk_main ()
    at /build/buildd-gtk+2.0_2.18.4-1-i386-1vBdiD/gtk+2.0-2.18.4/gtk/gtkmain.c:1218
        tmp_list = 0x27
        functions = 0x0
        init = 0x0
        loop = 0x953c6f0
#24 0x080711af in main (argc=)
    at /build/buildd-epiphany-browser_2.29.3-1-i386-oYKDhT/epiphany-browser-2.29.3/src/ephy-main.c:780
        option_context = <value optimized out>
        option_group = <value optimized out>
        proxy = <value optimized out>
        error = 0x0
        user_time = 60959954
A debugging session is active.

	Inferior 1 [process 905] will be detached.

Quit anyway? (y or n) [answered Y; input not from terminal]


----------- .xsession-errors (3306 sec old) ---------------------
(Pidgin:3873): Json-CRITICAL **: json_node_get_int: assertion `node != NULL' failed
(Pidgin:3873): Json-CRITICAL **: json_node_get_int: assertion `node != NULL' failed
(Pidgin:3873): Json-CRITICAL **: json_node_get_int: assertion `node != NULL' failed
(Pidgin:3873): Json-CRITICAL **: json_node_get_int: assertion `node != NULL' failed
(Pidgin:3873): Json-CRITICAL **: json_node_get_int: assertion `node != NULL' failed
(Pidgin:3873): Json-CRITICAL **: json_node_get_int: assertion `node != NULL' failed
(Pidgin:3873): Json-CRITICAL **: json_node_get_int: assertion `node != NULL' failed
...Too much output, ignoring rest...
--------------------------------------------------


More information about the pkg-gnome-maintainers mailing list