Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-76743

Qt Webkit demo browser crashes at several websites

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • P1: Critical
    • None
    • 5.11.3
    • WebKit
    • None
    • Platform: TI Sitara SoC: AM335x, AM437x, AM572x and AM654x
      OS: Linux Kernel 4.19
      QT5: 5.11.3

      Window System: Wayland/EGLFS
    • Linux/Wayland

    Description

      Qt Webkit browser crashes at several websites including ti.com

      Platform: TI Sitara SoC: AM335x, AM437x, AM572x and AM654x
      OS: Linux Kernel 4.19
      QT5: 5.11.3

      Please note that there is no issue with QT5.9.7

      For example:
      ti.com:
      ASSERTION FAILED: !thisObject->structure(vm)>prototypeChainMayInterceptStoreTo(exec>vm(), propertyName)
      /home/a0850410/yocto_builds/sdk600_am5/oe-layersetup/build/arago-tmp-external-arm-toolchain/work/armv7at2hf-neon-linux-gnueabi/qtwebkit/5.11.3+gitAUTOINC+beaeeb9988-r0.arago6/git/Source/JavaScriptCore/runtime/JSObjectInlines.h(54) : static void JSC::JSObject::putInline(JSC::JSCell*, JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&)

      Thread 1 "browser" received signal SIGSEGV, Segmentation fault.
      0xb392b83e in WTFCrash () from /usr/lib/libQt5WebKit.so.5
      (gdb)
      (gdb)
      (gdb) backtrace
      #0 0xb392b83e in WTFCrash () from /usr/lib/libQt5WebKit.so.5
      #1 0xb34c38ca in JSC::JSObject::put(JSC::JSCell*, JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&) () from /usr/lib/libQt5WebKit.so.5
      #2 0xb346f990 in JSC::JSArrayBufferView::put(JSC::JSCell*, JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&) ()
      from /usr/lib/libQt5WebKit.so.5
      #3 0xb34759b0 in JSC::JSDataView::put(JSC::JSCell*, JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&) ()
      from /usr/lib/libQt5WebKit.so.5
      #4 0xb3818656 in llint_slow_path_put_by_val () from /usr/lib/libQt5WebKit.so.5
      #5 0xb36d422e in llint_entry () from /usr/lib/libQt5WebKit.so.5
      #6 0xb36d6462 in llint_entry () from /usr/lib/libQt5WebKit.so.5
      #7 0xa49256fc in ?? ()

      cnn.com:
      ASSERTION FAILED: !m_beginTime
      /home/a0850410/yocto_builds/sdk600_am5/oe-layersetup/build/arago-tmp-external-arm-toolchain/work/armv7at2hf-neon-linux-gnueabi/qtwebkit/5.11.3+gitAUTOINC+beaeeb9988-r0.arago6/git/Source/WebCore/svg/animation/SMILTimeContainer.cpp(130) : void WebCore::SMILTimeContainer::begin()

      Thread 1 "browser" received signal SIGSEGV, Segmentation fault.
      0xb392b83e in WTFCrash () from /usr/lib/libQt5WebKit.so.5
      (gdb) backtrace
      #0 0xb392b83e in WTFCrash () from /usr/lib/libQt5WebKit.so.5
      #1 0xb492c446 in WebCore::SMILTimeContainer::begin() ()
      from /usr/lib/libQt5WebKit.so.5
      #2 0xb47db3ee in WebCore::SVGDocumentExtensions::startAnimations() ()
      from /usr/lib/libQt5WebKit.so.5
      #3 0xb3c64982 in WebCore::Document::implicitClose() ()
      from /usr/lib/libQt5WebKit.so.5
      #4 0xb3ed5616 in WebCore::FrameLoader::checkCompleted() ()
      from /usr/lib/libQt5WebKit.so.5
      #5 0xb3ed5790 in WebCore::FrameLoader::completed() ()
      from /usr/lib/libQt5WebKit.so.5
      #6 0xb3ed5626 in WebCore::FrameLoader::checkCompleted() ()
      from /usr/lib/libQt5WebKit.so.5
      #7 0xb3f03f8a in WebCore::SubframeLoader::loadSubframe(WebCore::HTMLFrameOwnerElement&, WebCore::URL const&, WTF::String const&, WTF::String const&) ()
      from /usr/lib/libQt5WebKit.so.5
      #8 0xb3f04212 in WebCore::SubframeLoader::loadOrRedirectSubframe(WebCore::HTMLFrameOwnerElement&, WebCore::URL const&, WTF::AtomicString const&, WebCore::LockHistory, WebCore::LockBackForwardList) () from /usr/lib/libQt5WebKit.so.5
      #9 0xb3f04980 in WebCore::SubframeLoader::requestFrame(WebCore::HTMLFrameOwnerElement&, WTF::String const&, WTF::AtomicString const&, WebCore::LockHistory, WebCore::LockBackForwardList) () from /usr/lib/libQt5WebKit.so.5
      #10 0xb3b78d2c in WebCore::HTMLFrameElementBase::openURL(WebCore::LockHistory,
      ebCore::LockBackForwardList) () from /usr/lib/libQt5WebKit.so.5
      #11 0xb3c5f036 in WebCore::ContainerNode::notifyChildInserted(WebCore::Node&, WebCore::ContainerNode::ChildChangeSource) () from /usr/lib/libQt5WebKit.so.5
      #12 0xb3c5f09e in WebCore::ContainerNode::updateTreeAfterInsertion(WebCore::Node&) () from /usr/lib/libQt5WebKit.so.5
      #13 0xb3c6ca90 in WebCore::ContainerNode::appendChild(WTF::Ref<WebCore::Node>&&, int&) () from /usr/lib/libQt5WebKit.so.5
      #14 0xb3c6d376 in WebCore::Node::appendChild(WTF::PassRefPtr<WebCore::Node>, int&) () from /usr/lib/libQt5WebKit.so.5
      #15 0xb3d5598a in WebCore::JSNode::appendChild(JSC::ExecState&) ()
      from /usr/lib/libQt5WebKit.so.5
      #16 0xb431e602 in WebCore::jsNodePrototypeFunctionAppendChild(JSC::ExecState*)
      () from /usr/lib/libQt5WebKit.so.5
      #17 0xad4479a8 in ?? ()


      • Options

      Attachments

      Attachments

        1. config.opt
          2 kB
        2. qtbase_%.bbappend
          1 kB
        3. qtbase_git.bb
          15 kB
        4. qtwebkit_%.bbappend
          0.4 kB
        5. qtwebkit_git.bb
          3 kB
        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            annulen Konstantin Tokarev
            ericruei Eric Ruei
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes