Details
-
Bug
-
Resolution: Fixed
-
P1: Critical
-
None
-
5.11.3
-
None
-
Platform: TI Sitara SoC: AM335x, AM437x, AM572x and AM654x
OS: Linux Kernel 4.19
QT5: 5.11.3
Window System: Wayland/EGLFS
Description
Qt Webkit browser crashes at several websites including ti.com
Platform: TI Sitara SoC: AM335x, AM437x, AM572x and AM654x
OS: Linux Kernel 4.19
QT5: 5.11.3
Please note that there is no issue with QT5.9.7
For example:
ti.com:
ASSERTION FAILED: !thisObject->structure(vm)>prototypeChainMayInterceptStoreTo(exec>vm(), propertyName)
/home/a0850410/yocto_builds/sdk600_am5/oe-layersetup/build/arago-tmp-external-arm-toolchain/work/armv7at2hf-neon-linux-gnueabi/qtwebkit/5.11.3+gitAUTOINC+beaeeb9988-r0.arago6/git/Source/JavaScriptCore/runtime/JSObjectInlines.h(54) : static void JSC::JSObject::putInline(JSC::JSCell*, JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&)
Thread 1 "browser" received signal SIGSEGV, Segmentation fault.
0xb392b83e in WTFCrash () from /usr/lib/libQt5WebKit.so.5
(gdb)
(gdb)
(gdb) backtrace
#0 0xb392b83e in WTFCrash () from /usr/lib/libQt5WebKit.so.5
#1 0xb34c38ca in JSC::JSObject::put(JSC::JSCell*, JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&) () from /usr/lib/libQt5WebKit.so.5
#2 0xb346f990 in JSC::JSArrayBufferView::put(JSC::JSCell*, JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&) ()
from /usr/lib/libQt5WebKit.so.5
#3 0xb34759b0 in JSC::JSDataView::put(JSC::JSCell*, JSC::ExecState*, JSC::PropertyName, JSC::JSValue, JSC::PutPropertySlot&) ()
from /usr/lib/libQt5WebKit.so.5
#4 0xb3818656 in llint_slow_path_put_by_val () from /usr/lib/libQt5WebKit.so.5
#5 0xb36d422e in llint_entry () from /usr/lib/libQt5WebKit.so.5
#6 0xb36d6462 in llint_entry () from /usr/lib/libQt5WebKit.so.5
#7 0xa49256fc in ?? ()
cnn.com:
ASSERTION FAILED: !m_beginTime
/home/a0850410/yocto_builds/sdk600_am5/oe-layersetup/build/arago-tmp-external-arm-toolchain/work/armv7at2hf-neon-linux-gnueabi/qtwebkit/5.11.3+gitAUTOINC+beaeeb9988-r0.arago6/git/Source/WebCore/svg/animation/SMILTimeContainer.cpp(130) : void WebCore::SMILTimeContainer::begin()
Thread 1 "browser" received signal SIGSEGV, Segmentation fault.
0xb392b83e in WTFCrash () from /usr/lib/libQt5WebKit.so.5
(gdb) backtrace
#0 0xb392b83e in WTFCrash () from /usr/lib/libQt5WebKit.so.5
#1 0xb492c446 in WebCore::SMILTimeContainer::begin() ()
from /usr/lib/libQt5WebKit.so.5
#2 0xb47db3ee in WebCore::SVGDocumentExtensions::startAnimations() ()
from /usr/lib/libQt5WebKit.so.5
#3 0xb3c64982 in WebCore::Document::implicitClose() ()
from /usr/lib/libQt5WebKit.so.5
#4 0xb3ed5616 in WebCore::FrameLoader::checkCompleted() ()
from /usr/lib/libQt5WebKit.so.5
#5 0xb3ed5790 in WebCore::FrameLoader::completed() ()
from /usr/lib/libQt5WebKit.so.5
#6 0xb3ed5626 in WebCore::FrameLoader::checkCompleted() ()
from /usr/lib/libQt5WebKit.so.5
#7 0xb3f03f8a in WebCore::SubframeLoader::loadSubframe(WebCore::HTMLFrameOwnerElement&, WebCore::URL const&, WTF::String const&, WTF::String const&) ()
from /usr/lib/libQt5WebKit.so.5
#8 0xb3f04212 in WebCore::SubframeLoader::loadOrRedirectSubframe(WebCore::HTMLFrameOwnerElement&, WebCore::URL const&, WTF::AtomicString const&, WebCore::LockHistory, WebCore::LockBackForwardList) () from /usr/lib/libQt5WebKit.so.5
#9 0xb3f04980 in WebCore::SubframeLoader::requestFrame(WebCore::HTMLFrameOwnerElement&, WTF::String const&, WTF::AtomicString const&, WebCore::LockHistory, WebCore::LockBackForwardList) () from /usr/lib/libQt5WebKit.so.5
#10 0xb3b78d2c in WebCore::HTMLFrameElementBase::openURL(WebCore::LockHistory,
ebCore::LockBackForwardList) () from /usr/lib/libQt5WebKit.so.5
#11 0xb3c5f036 in WebCore::ContainerNode::notifyChildInserted(WebCore::Node&, WebCore::ContainerNode::ChildChangeSource) () from /usr/lib/libQt5WebKit.so.5
#12 0xb3c5f09e in WebCore::ContainerNode::updateTreeAfterInsertion(WebCore::Node&) () from /usr/lib/libQt5WebKit.so.5
#13 0xb3c6ca90 in WebCore::ContainerNode::appendChild(WTF::Ref<WebCore::Node>&&, int&) () from /usr/lib/libQt5WebKit.so.5
#14 0xb3c6d376 in WebCore::Node::appendChild(WTF::PassRefPtr<WebCore::Node>, int&) () from /usr/lib/libQt5WebKit.so.5
#15 0xb3d5598a in WebCore::JSNode::appendChild(JSC::ExecState&) ()
from /usr/lib/libQt5WebKit.so.5
#16 0xb431e602 in WebCore::jsNodePrototypeFunctionAppendChild(JSC::ExecState*)
() from /usr/lib/libQt5WebKit.so.5
#17 0xad4479a8 in ?? ()
Options