WebKit apps crash after a while in Trusty
Adam Dingle
adam at medovina.org
Tue Jan 21 16:58:30 UTC 2014
On Tue, Jan 21, 2014 at 10:43 AM, Chad Miller
<chad.miller at canonical.com> wrote:
> Hi Adam. I'm surprised you didn't get an apport window to report it.
> I'm interested in that part, if you have time, after all this is
> over.
>
I did get an apport window, but I think the report failed to submit
since it would need to use a web browser to do that, and my default
browser (Epiphany) won't run due to this very crash!
>
> I'm not sure I will be able to help with the "low graphics" part of
> your complaint. Chromium shouldn't crash, though, regardless.
>
> What version of chromium-browser is that? Will you please install
> the "chromium-browser-dbg" package and run "chromium-browser --debug"
> from a terminal? "r" to run. Paste "bt full" on crash.
>
I have chromium-browser 31.0.1650.63-0ubuntu1~20131204.1. So OK - I've
included the Chromium stack trace below. It looks like it's dying in
PulseAudio code. Oddly, if I run Epiphany in gdb then the stack trace
there looks completely different - Epiphany seems to be crashing
somewhere in WebKit. I'll include that stack trace below as well.
All this behavior is odd enough that yesterday I did a clean install of
14.04 from the latest daily image. But these crashes are still
occurring. I'd be curious to know if anyone else is seeing similar
trouble.
== Chromium stack trace ==
#0 pa_shm_cleanup () at pulsecore/shm.c:388
seg = {id = 556059904, ptr = 0x7fffaffff000, size = 67108904,
do_unlink = false, shared = true}
fn =
"jNº\000\000\000\000@\351\001\334\377\177\000\000\377\377\377\377\000\000\000\000\063\000\000\000\000\000\000\000\320\031\016\344\377\177\000\000\350\344\373\367\377\177\000\000\001\000\000\000[",
'\000' <repeats 19 times>, "n\000\000\000w", '\000' <repeats 11 times>,
"\237\325\377\377\377\177\000\000\000\000\000\000\000\000\000\000\bc
WUU\000\000|\000\000\000\377\177\000\000\260\325\377\377\377\177\000"
m = 0x7fffb3fff000
id = 556059904
d = 0x5555572111d0
de = <optimized out>
__func__ = "pa_shm_cleanup"
#1 0x00007fffdc04f554 in pa_shm_create_rw (m=m at entry=0x55555720bb90,
size=67108864,
shared=shared at entry=true, mode=mode at entry=448) at
pulsecore/shm.c:119
fn =
"\000\000\000\000\000\000\000\000\351@\031\344\377\177\000\000\200\273
WUU\000\000`\027I\344\377\177\000"
fd = -1
__func__ = "pa_shm_create_rw"
__PRETTY_FUNCTION__ = "pa_shm_create_rw"
#2 0x00007fffdc042ad6 in pa_mempool_new (shared=<optimized out>,
size=0) at pulsecore/memblock.c:734
t1 = "\340\231 WUU\000\000\365", <incomplete sequence \337>
t2 = "и WUU\000\000\240\005"
__func__ = "pa_mempool_new"
#3 0x00007fffdc4948cf in pa_context_new_with_proplist
(mainloop=0x555557209678,
name=0x7ffff250fd55 "Chrome input", p=<optimized out>) at
pulse/context.c:175
__func__ = "pa_context_new_with_proplist"
__PRETTY_FUNCTION__ = "pa_context_new_with_proplist"
#4 0x00007ffff2428192 in media::AudioManagerPulse::Init
(this=this at entry=0x555557202a40)
at media/audio/pulse/audio_manager_pulse.cc:243
paths = {_M_t = {
_M_impl =
{<std::allocator<std::_Rb_tree_node<std::pair<media_audio_pulse::StubModules
const, std::vector<std::basic_string<char, std::char_traits<char>,
std::allocator<char> >, std::allocator<std::basic_string<char,
std::char_traits<char>, std::allocator<char> > > > > > >> =
{<__gnu_cxx::new_allocator<std::_Rb_tree_node<std::pair<media_audio_pulse::StubModules
const, std::vector<std::basic_string<char, std::char_traits<char>,
std::allocator<char> >, std::allocator<std::basic_string<char,
std::char_traits<char>, std::allocator<char> > > > > > >> = {<No data
fields>}, <No data fields>},
_M_key_compare =
{<std::binary_function<media_audio_pulse::StubModules,
media_audio_pulse::StubModules, bool>> = {<No data fields>}, <No data
fields>}, _M_header = {_M_color = std::_S_red,
_M_parent = 0x5555572030b0, _M_left = 0x5555572030b0,
_M_right = 0x5555572030b0},
_M_node_count = 1}}}
auto_lock = {pa_mainloop_ = 0x555557209580}
pa_mainloop_api = <optimized out>
#5 0x00007ffff242833e in media::AudioManagerPulse::Create ()
at media/audio/pulse/audio_manager_pulse.cc:44
ret = {impl_ = {data_ =
{<base::DefaultDeleter<media::AudioManagerPulse>> = {<No data fields>},
ptr = 0x555557202a40}}}
#6 0x00007ffff242686b in media::CreateAudioManager () at
media/audio/linux/audio_manager_linux.cc:378
manager = <optimized out>
#7 0x00007ffff2418ad8 in media::AudioManager::Create () at
media/audio/audio_manager.cc:33
No locals.
#8 0x00007ffff39e4baa in content::BrowserMainLoop::MainMessageLoopStart
(this=0x555557176a20)
at content/browser/browser_main_loop.cc:431
trace_event_unique_atomic430 = 140737342890212
trace_event_unique_catstatic430 = 0x7ffff75460e4
<base::debug::(anonymous namespace)::g_category_group_enabled+4> ""
trace_event_unique_profileScope430 = {p_data_ = 0x0, data_ = {
category_group_enabled = 0x7ffff39e6117
<content::BrowserMainLoop::InitializeToolkit()+199>
"M\205\344t\tI\213\034$\200;", name = 0x555557176e70 "\220\300\003WUU"}}
trace_event_unique_atomic383 = 140737342890212
trace_event_unique_catstatic383 = <optimized out>
trace_event_unique_profileScope383 = {p_data_ = 0x0, data_ = {
category_group_enabled = 0x555557155710
"\320\345s\364\377\177", name = 0x0}}
#9 0x00007ffff39e793e in content::BrowserMainRunnerImpl::Initialize
(this=0x555557176910, parameters=...)
at content/browser/browser_main_runner.cc:93
trace_event_unique_atomic42 = 140737342890212
trace_event_unique_catstatic42 = <optimized out>
trace_event_unique_profileScope42 = {p_data_ = 0x0, data_ = {
category_group_enabled = 0x7fffffffdb10 "(R\027WUU",
name = 0x20 <error: Cannot access memory at address 0x20>}}
#10 0x00007ffff39e07da in content::BrowserMain (parameters=...) at
content/browser/browser_main.cc:22
main_runner = {impl_ = {
data_ = {<base::DefaultDeleter<content::BrowserMainRunner>>
= {<No data fields>},
ptr = 0x555557176910}}}
exit_code = <optimized out>
#11 0x00007ffff39c77a5 in content::ContentMainRunnerImpl::Run
(this=0x555557155710)
at content/app/content_main_runner.cc:777
command_line = @0x555557156dd0: {static
current_process_commandline_ = 0x555557156dd0,
argv_ = {<std::_Vector_base<std::basic_string<char,
std::char_traits<char>, std::allocator<char> >,
std::allocator<std::basic_string<char, std::char_traits<char>,
std::allocator<char> > > >> = {
_M_impl = {<std::allocator<std::basic_string<char,
std::char_traits<char>, std::allocator<char> > >> =
{<__gnu_cxx::new_allocator<std::basic_string<char,
std::char_traits<char>, std::allocator<char> > >> = {<No data fields>},
<No data fields>}, _M_start = 0x555557156d00, _M_finish =
0x555557156d08,
_M_end_of_storage = 0x555557156d08}}, <No data
fields>}, switches_ = {_M_t = {
_M_impl =
{<std::allocator<std::_Rb_tree_node<std::pair<std::basic_string<char,
std::char_traits<char>, std::allocator<char> > const,
std::basic_string<char, std::char_traits<char>, std::allocator<char> >
> > >> =
{<__gnu_cxx::new_allocator<std::_Rb_tree_node<std::pair<std::basic_string<char,
std::char_traits<char>, std::allocator<char> > const,
std::basic_string<char, std::char_traits<char>, std::allocator<char> >
> > >> = {<No data fields>}, <No data fields>},
_M_key_compare =
{<std::binary_function<std::basic_string<char, std::char_traits<char>,
std::allocator<char> >, std::basic_string<char, std::char_traits<char>,
std::allocator<char> >, bool>> = {<No data fields>}, <No data fields>},
_M_header = {_M_color = std::_S_red, _M_parent = 0x0,
_M_left = 0x555557156df0, _M_right = 0x555557156df0},
_M_node_count = 0}}},
begin_args_ = 1}
process_type = {static npos = <optimized out>,
_M_dataplus = {<std::allocator<char>> =
{<__gnu_cxx::new_allocator<char>> = {<No data fields>}, <No data
fields>}, _M_p = 0x7fffe4cb83f8
<std::string::_Rep::_S_empty_rep_storage+24> ""}}
main_params = {command_line = @0x555557156dd0, ui_task = 0x0}
#12 0x00007ffff39c5c99 in content::ContentMain (argc=argc at entry=1,
argv=argv at entry=0x7fffffffdd28,
delegate=delegate at entry=0x7fffffffdbe0) at
content/app/content_main.cc:35
main_runner = {impl_ = {
data_ = {<base::DefaultDeleter<content::ContentMainRunner>>
= {<No data fields>},
ptr = 0x555557155710}}}
exit_code = -1
#13 0x00005555557cf082 in ChromeMain (argc=1, argv=0x7fffffffdd28) at
chrome/app/chrome_main.cc:39
chrome_main_delegate = {<content::ContentMainDelegate> = {
_vptr.ContentMainDelegate = 0x55555702e7d0 <vtable for
ChromeMainDelegate+16>},
chrome_content_client_ = {<content::ContentClient> = {
_vptr.ContentClient = 0x55555702e850 <vtable for
chrome::ChromeContentClient+16>,
browser_ = 0x5555570e6728
<g_chrome_content_browser_client+8>, plugin_ = 0x0,
renderer_ = 0x0, utility_ = 0x0},
static kPDFPluginName = 0x5555567a2793 "Chrome PDF Viewer",
static kNaClPluginName = 0x5555567a2785 "Native Client",
static kNaClOldPluginName = 0x10102464c457f <error: Cannot
access memory at address 0x10102464c457f>, static
kRemotingViewerPluginPath = 0x0}, startup_timer_ = {impl_ = {
data_ =
{<base::DefaultDeleter<base::StatsScope<base::StatsCounterTimer> >> =
{<No data fields>}, ptr = 0x5555571755c0}}}, stats_counter_timer_ =
{impl_ = {
data_ = {<base::DefaultDeleter<base::StatsCounterTimer>>
= {<No data fields>},
ptr = 0x555557175130}}}}
#14 0x00005555557cee76 in main (argc=<optimized out>, argv=<optimized
out>)
at chrome/app/chrome_exe_main_gtk.cc:43
return_code = <optimized out>
quit
A debugging session is active.
Inferior 1 [process 12058] will be killed.
Quit anyway? (y or n)
== Epiphany stack trace ==
#0 __memcpy_sse2_unaligned () at
../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:39
#1 0x00007ffff64437de in memcpy (__len=<optimized out>,
__src=<optimized out>, __dest=<optimized out>)
at /usr/include/x86_64-linux-gnu/bits/string3.h:51
#2 CoreIPC::Connection::sendOutgoingMessage
(this=this at entry=0x7ffff7ea4d80, encoder=...)
at ../Source/WebKit2/Platform/CoreIPC/unix/ConnectionUnix.cpp:423
#3 0x00007ffff643ac17 in CoreIPC::Connection::sendOutgoingMessages
(this=0x7ffff7ea4d80)
at ../Source/WebKit2/Platform/CoreIPC/Connection.cpp:728
#4 0x00007ffff644444e in operator() (this=<optimized out>) at
../Source/WTF/wtf/Functional.h:704
#5 performWork (this=<optimized out>) at
../Source/WebKit2/Platform/gtk/WorkQueueGtk.cpp:49
#6 WorkQueue::EventSource::performWorkOnce (eventSource=<optimized out>)
at ../Source/WebKit2/Platform/gtk/WorkQueueGtk.cpp:55
#7 0x00007ffff2199a35 in g_main_dispatch (context=0xb7b2b0)
at /build/buildd/glib2.0-2.39.3/./glib/gmain.c:3068
#8 g_main_context_dispatch (context=context at entry=0xb7b2b0)
at /build/buildd/glib2.0-2.39.3/./glib/gmain.c:3643
#9 0x00007ffff2199d98 in g_main_context_iterate (context=0xb7b2b0,
block=block at entry=1,
dispatch=dispatch at entry=1, self=<optimized out>) at
/build/buildd/glib2.0-2.39.3/./glib/gmain.c:3714
#10 0x00007ffff219a05a in g_main_loop_run (loop=0xb86b30)
at /build/buildd/glib2.0-2.39.3/./glib/gmain.c:3908
#11 0x00007ffff03a2a7a in WTF::wtfThreadEntryPoint
(param=0x7ffff7e430b0)
at ../Source/WTF/wtf/ThreadingPthreads.cpp:195
#12 0x00007ffff1912182 in start_thread (arg=0x7fff627fc700) at
pthread_create.c:312
#13 0x00007ffff163db5d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:111
adam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-desktop/attachments/20140121/8ed7a0ac/attachment-0001.html>
More information about the ubuntu-desktop
mailing list