Bug 99814

Here is GDB backtrace: ----------------------- $ gdb WebKitBuild/Debug/bin/DumpRenderTree GNU gdb (GDB) 7.0.1-debian Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /mnt/raptor1/WebKit/WebKitBuild/Debug/bin/DumpRenderTree...done. (gdb) run LayoutTests/ietestcenter/Javascript/15.4.4.14-3-23.html Starting program: /mnt/raptor1/WebKit/WebKitBuild/Debug/bin/DumpRenderTree LayoutTests/ietestcenter/Javascript/15.4.4.14-3-23.html [Thread debugging using libthread_db enabled] [New Thread 0xf175db70 (LWP 25724)] [Thread 0xf175db70 (LWP 25724) exited] [New Thread 0xf175db70 (LWP 25725)] [New Thread 0xf0fe8b70 (LWP 25726)] Program received signal SIGSEGV, Segmentation fault. 0xf6aaf307 in llint_op_put_to_base () from /mnt/raptor1/WebKit/WebKitBuild/Debug/lib/libQtWebKitWidgets.so.5 (gdb) bt #0 0xf6aaf307 in llint_op_put_to_base () from /mnt/raptor1/WebKit/WebKitBuild/Debug/lib/libQtWebKitWidgets.so.5 #1 0xf1100190 in ?? () #2 0xf6a5289f in JSC::JITCode::execute (this=0xf0e3e454, stack=0x80f873c, callFrame=0xf1100190, globalData=0x80f2748) at /mnt/raptor1/WebKit/Source/JavaScriptCore/jit/JITCode.h:134 #3 0xf6a4fe31 in JSC::Interpreter::executeCall (this=0x80f8730, callFrame=0xf1100118, function=0xf103f860, callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at /mnt/raptor1/WebKit/Source/JavaScriptCore/interpreter/Interpreter.cpp:966 #4 0xf6b1a953 in JSC::call (exec=0xf1100118, functionObject=..., callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...) at /mnt/raptor1/WebKit/Source/JavaScriptCore/runtime/CallData.cpp:39 #5 0xf6b62027 in callDefaultValueFunction (exec=0xf1100118, object=0xf101fe80, propertyName=...) at /mnt/raptor1/WebKit/Source/JavaScriptCore/runtime/JSObject.cpp:930 #6 0xf6b622ce in JSC::JSObject::defaultValue (object=0xf101fe80, exec=0xf1100118, hint=JSC::PreferNumber) at /mnt/raptor1/WebKit/Source/JavaScriptCore/runtime/JSObject.cpp:958 #7 0xf55c8d0c in JSC::JSObject::toPrimitive (this=0xf101fe80, exec=0xf1100118, preferredType=JSC::PreferNumber) at /mnt/raptor1/WebKit/Source/JavaScriptCore/runtime/JSObject.h:1254 #8 0xf6b62d49 in JSC::JSObject::toNumber (this=0xf101fe80, exec=0xf1100118) at /mnt/raptor1/WebKit/Source/JavaScriptCore/runtime/JSObject.cpp:1115 #9 0xf6b4147b in JSC::JSCell::toNumber (this=0xf101fe80, exec=0xf1100118) at /mnt/raptor1/WebKit/Source/JavaScriptCore/runtime/JSCell.cpp:158 #10 0xf6b7d187 in JSC::JSValue::toNumberSlowCase (this=0xffffb698, exec=0xf1100118) at /mnt/raptor1/WebKit/Source/JavaScriptCore/runtime/JSValue.cpp:62 #11 0xf53cfc2a in JSC::JSValue::toNumber (this=0xffffb698, exec=0xf1100118) at /mnt/raptor1/WebKit/Source/JavaScriptCore/runtime/JSCell.h:293 #12 0xf5514386 in JSC::JSValue::toInt32 (this=0xffffb698, exec=0xf1100118) at /mnt/raptor1/WebKit/Source/JavaScriptCore/runtime/JSValueInlineMethods.h:37 #13 0xf552d5f6 in JSC::JSValue::toUInt32 (this=0xffffb698, exec=0xf1100118) at /mnt/raptor1/WebKit/Source/JavaScriptCore/runtime/JSValueInlineMethods.h:43 #14 0xf6b15209 in arrayProtoFuncIndexOf (exec=0xf1100118) at /mnt/raptor1/WebKit/Source/JavaScriptCore/runtime/ArrayPrototype.cpp:1252 #15 0xf16096cf in ?? () #16 0xf6a5289f in JSC::JITCode::execute (this=0xf0e5fe54, stack=0x80f873c, callFrame=0xf1100038, globalData=0x80f2748) at /mnt/raptor1/WebKit/Source/JavaScriptCore/jit/JITCode.h:134 #17 0xf6a4f79e in JSC::Interpreter::execute (this=0x80f8730, program=0xf0e5fe40, callFrame=0xf10bfb9c, thisObj=0xf10fffe0) at /mnt/raptor1/WebKit/Source/JavaScriptCore/interpreter/Interpreter.cpp:895 #18 0xf6b1cad7 in JSC::evaluate (exec=0xf10bfb9c, source=..., thisValue=..., returnedException=0xffffc2ac) at /mnt/raptor1/WebKit/Source/JavaScriptCore/runtime/Completion.cpp:75 #19 0xf5564921 in WebCore::JSMainThreadExecState::evaluate (exec=0xf10bfb9c, source=..., thisValue=..., exception=0xffffc2ac) at /mnt/raptor1/WebKit/Source/WebCore/bindings/js/JSMainThreadExecState.h:77 #20 0xf5581910 in WebCore::ScriptController::evaluateInWorld (this=0x80d5d3c, sourceCode=..., world=0x80f9788) at /mnt/raptor1/WebKit/Source/WebCore/bindings/js/ScriptController.cpp:141 #21 0xf5581a10 in WebCore::ScriptController::evaluate (this=0x80d5d3c, sourceCode=...) at /mnt/raptor1/WebKit/Source/WebCore/bindings/js/ScriptController.cpp:158 #22 0xf58698a2 in WebCore::ScriptElement::executeScript (this=0x8169074, sourceCode=...) at /mnt/raptor1/WebKit/Source/WebCore/dom/ScriptElement.cpp:301 #23 0xf5a076ad in WebCore::HTMLScriptRunner::executePendingScriptAndDispatchEvent (this=0x81242d0, pendingScript=...) at /mnt/raptor1/WebKit/Source/WebCore/html/parser/HTMLScriptRunner.cpp:139 #24 0xf5a07525 in WebCore::HTMLScriptRunner::executeParsingBlockingScript (this=0x81242d0) at /mnt/raptor1/WebKit/Source/WebCore/html/parser/HTMLScriptRunner.cpp:118 #25 0xf5a07a15 in WebCore::HTMLScriptRunner::executeParsingBlockingScripts (this=0x81242d0) at /mnt/raptor1/WebKit/Source/WebCore/html/parser/HTMLScriptRunner.cpp:190 #26 0xf5a07bcf in WebCore::HTMLScriptRunner::executeScriptsWaitingForLoad (this=0x81242d0, cachedScript=0x812e9f8) at /mnt/raptor1/WebKit/Source/WebCore/html/parser/HTMLScriptRunner.cpp:199 #27 0xf59fb3b1 in WebCore::HTMLDocumentParser::notifyFinished (this=0x81231b8, cachedResource=0x812e9f8) ---Type <return> to continue, or q <return> to quit--- at /mnt/raptor1/WebKit/Source/WebCore/html/parser/HTMLDocumentParser.cpp:514 #28 0xf5b506bc in WebCore::CachedResource::checkNotify (this=0x812e9f8) at /mnt/raptor1/WebKit/Source/WebCore/loader/cache/CachedResource.cpp:296 #29 0xf5b5b80d in WebCore::CachedScript::data (this=0x812e9f8, data=..., allDataReceived=true) at /mnt/raptor1/WebKit/Source/WebCore/loader/cache/CachedScript.cpp:90 #30 0xf5bb348f in WebCore::SubresourceLoader::didFinishLoading (this=0x812ed30, finishTime=0) at /mnt/raptor1/WebKit/Source/WebCore/loader/SubresourceLoader.cpp:264 #31 0xf5ba99e5 in WebCore::ResourceLoader::didFinishLoading (this=0x812ed30, finishTime=0) at /mnt/raptor1/WebKit/Source/WebCore/loader/ResourceLoader.cpp:442 #32 0xf5fdb46b in WebCore::QNetworkReplyHandler::finish (this=0x812f608) at /mnt/raptor1/WebKit/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:556 #33 0xf5fda113 in WebCore::QNetworkReplyHandlerCallQueue::flush (this=0x812f628) at /mnt/raptor1/WebKit/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:297 #34 0xf5fd9e5c in WebCore::QNetworkReplyHandlerCallQueue::push (this=0x812f628, method=0xf5fdb2ba <WebCore::QNetworkReplyHandler::finish()>) at /mnt/raptor1/WebKit/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:263 #35 0xf5fdad42 in WebCore::QNetworkReplyWrapper::didReceiveFinished (this=0x8130290) at /mnt/raptor1/WebKit/Source/WebCore/platform/network/qt/QNetworkReplyHandler.cpp:451 #36 0xf5fdd0be in WebCore::QNetworkReplyWrapper::qt_static_metacall (_o=0x8130290, _c=QMetaObject::InvokeMetaMethod, _id=1, _a=0xffffc7ec) at .moc/release-shared/moc_QNetworkReplyHandler.cpp:175 #37 0xf41ade23 in QMetaObject::activate(QObject*, int, int, void**) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtCore.so.5 #38 0xf41ae82a in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtCore.so.5 #39 0xf4867237 in QNetworkReply::finished() () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtNetwork.so.5 #40 0xf48674a0 in ?? () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtNetwork.so.5 #41 0xf41a7867 in QMetaCallEvent::placeMetaCall(QObject*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtCore.so.5 #42 0xf41a802d in QObject::event(QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtCore.so.5 #43 0xf4a9a0fc in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtWidgets.so.5 #44 0xf4aa19a2 in QApplication::notify(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtWidgets.so.5 #45 0xf418088b in QCoreApplication::notifyInternal(QObject*, QEvent*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtCore.so.5 #46 0xf4185a6a in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtCore.so.5 #47 0xf418604d in QCoreApplication::sendPostedEvents(QObject*, int) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtCore.so.5 #48 0xf41d11c4 in ?? () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtCore.so.5 #49 0xf7b91305 in g_main_context_dispatch () from /lib/libglib-2.0.so.0 #50 0xf7b94fe8 in ?? () from /lib/libglib-2.0.so.0 #51 0xf7b951c8 in g_main_context_iteration () from /lib/libglib-2.0.so.0 #52 0xf41d0c63 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtCore.so.5 #53 0xf417ed59 in QEventLoop::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtCore.so.5 #54 0xf417f727 in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtCore.so.5 #55 0xf4186109 in QCoreApplication::exec() () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtCore.so.5 #56 0xf4428317 in QGuiApplication::exec() () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtGui.so.5 #57 0xf4a9a187 in QApplication::exec() () from /usr/local/Trolltech/Qt5/Qt-5.0.0-r38/lib/libQtWidgets.so.5 #58 0x0806f34e in main (argc=2, argv=0xffffd334) at /mnt/raptor1/WebKit/Tools/DumpRenderTree/qt/DumpRenderTreeMain.cpp:195 (gdb)

Created attachment 169598 [details] workaround I think we should disable LLINT on Qt 32 bit until proper fix. I tested, tests pass with disabled LLINT.

Comment on attachment 169598 [details] workaround Rejecting attachment 169598 [details] from commit-queue. Failed to run "['/mnt/git/webkit-commit-queue/Tools/Scripts/webkit-patch', '--status-host=queues.webkit.org', '-..." exit_code: 1 ERROR: /mnt/git/webkit-commit-queue/LayoutTests/ChangeLog neither lists a valid reviewer nor contains the string "Unreviewed" or "Rubber stamp" (case insensitive). Full output: http://queues.webkit.org/results/14464411

Committed r131889: <http://trac.webkit.org/changeset/131889>

Reopen, because the bug isn't fixed, only workaround landed.

Ouch, I broke the GTK build with c++ comment. Fix landed in r131897.

Created attachment 169672 [details] Patch

Committed r131932: <http://trac.webkit.org/changeset/131932>