Frequent crash on frame navigation events (?)

[ariya]

x...@openerp.com commented:

The crash happens right after a withFrame() block has ended (the block ends correctly as I can see an info message following it), right before quitting the block a button of the child iframe has been clicked which should:

1. Cause a navigation event to post de iframe's form and load a new page
2. New page which closes/removes the iframe after notifying the parent that it'd do so

Crashes seem to happen quite frequently on frame navigation events (loading or navigating).

I'm using phantom indirectly through casperjs

Operating system: Linux
0.0.0 Linux 3.5.0-17-generic #28-Ubuntu SMP Tue Oct 9 19:32:08 UTC 2012 i686
CPU: x86
GenuineIntel family 6 model 37 stepping 2
1 CPU

Crash reason: SIGSEGV
Crash address: 0x20

Thread 0 (crashed)
0 phantomjs!QWebFrame::frameName [AtomicString.h : 108 + 0x3]
eip = 0x080b20e0 esp = 0xbff69e00 ebp = 0xbff69e18 ebx = 0x0a5342a8
esi = 0xbff69e54 edi = 0x0b04cd68 eax = 0x00000010 ecx = 0x080abac0
edx = 0x00000000 efl = 0x00010202
Found by: given as instruction pointer in context
1 phantomjs!WebPage::setupFrame [webpage.cpp : 1448 + 0x16]
eip = 0x08061cc3 esp = 0xbff69e20 ebp = 0xbff69e88 ebx = 0x0a5342a8
esi = 0x0aee0880 edi = 0x0b04cd68
Found by: call frame info
2 phantomjs!WebPage::qt_static_metacall [moc_webpage.cpp : 279 + 0x10]
eip = 0x080abb28 esp = 0xbff69e90 ebp = 0xbff69f38 ebx = 0x0a5342a8
esi = 0x0aee0880 edi = 0x0ab7b650
Found by: call frame info
3 phantomjs!QMetaCallEvent::placeMetaCall [qobject.cpp : 524 + 0x1b]
eip = 0x09aed500 esp = 0xbff69f40 ebp = 0xbff69f58 ebx = 0x0a5342a8
esi = 0x0ab7b650 edi = 0x0ab7b650
Found by: call frame info
4 phantomjs!QObject::event [qobject.cpp : 1191 + 0xb]
eip = 0x09aee1d3 esp = 0xbff69f60 ebp = 0xbff6a068 ebx = 0x0a5342a8
esi = 0x00000000 edi = 0x0ab7b650
Found by: call frame info
5 phantomjs!QApplicationPrivate::notify_helper [qapplication.cpp : 4562 + 0xe]
eip = 0x09348cff esp = 0xbff6a070 ebp = 0xbff6a088 ebx = 0x0a5342a8
esi = 0x0af397b0 edi = 0x0ab7b650
Found by: call frame info
6 phantomjs!QApplication::notify [qapplication.cpp : 3944 + 0x4]
eip = 0x09350cd1 esp = 0xbff6a090 ebp = 0xbff6a448 ebx = 0x0a5342a8
esi = 0x0af397b0 edi = 0xbff6a69c
Found by: call frame info
7 phantomjs!QCoreApplication::notifyInternal [qcoreapplication.cpp : 946 + 0x10]
eip = 0x09adb95b esp = 0xbff6a450 ebp = 0xbff6a478 ebx = 0x0a5342a8
esi = 0x0a96f988 edi = 0x0ab7b650
Found by: call frame info
8 phantomjs!QCoreApplicationPrivate::sendPostedEvents [qcoreapplication.h : 231 + 0x24]
eip = 0x09adc6c6 esp = 0xbff6a480 ebp = 0xbff6a4e8 ebx = 0x0a5342a8
esi = 0x0af397b0 edi = 0x00000000
Found by: call frame info
9 phantomjs!QCoreApplication::sendPostedEvents [qcoreapplication.cpp : 1463 + 0x15]
eip = 0x09adca8d esp = 0xbff6a4f0 ebp = 0xbff6a508 ebx = 0x0a5342a8
esi = 0x0acdd968 edi = 0x0a9730b8
Found by: call frame info
10 phantomjs!QEventDispatcherQPA::processEvents [qcoreapplication.h : 236 + 0x13]
eip = 0x093adf5a esp = 0xbff6a510 ebp = 0xbff6a548 ebx = 0x0a5342a8
esi = 0x0acdd968 edi = 0x0a9730b8
Found by: call frame info
11 phantomjs!QEventLoop::processEvents [qeventloop.cpp : 149 + 0x8]
eip = 0x09ada7ed esp = 0xbff6a550 ebp = 0xbff6a578 ebx = 0x0a5342a8
esi = 0x0acdd968 edi = 0xbff6a5b8
Found by: call frame info
12 phantomjs!QEventLoop::exec [qeventloop.cpp : 200 + 0x11]
eip = 0x09adacd1 esp = 0xbff6a580 ebp = 0xbff6a5c8 ebx = 0x0a5342a8
esi = 0x0acdd968 edi = 0xbff6a5f0
Found by: call frame info
13 phantomjs!QCoreApplication::exec [qcoreapplication.cpp : 1218 + 0x11]
eip = 0x09adcb4d esp = 0xbff6a5d0 ebp = 0xbff6a608 ebx = 0x0a5342a8
esi = 0x0a96f988 edi = 0x0a96f988
Found by: call frame info
14 phantomjs!QApplication::exec [qapplication.cpp : 3823 + 0x4]
eip = 0x09348617 esp = 0xbff6a610 ebp = 0xbff6a618 ebx = 0x0a5342a8
esi = 0xbff6a6f0 edi = 0xbff6a69c
Found by: call frame info
15 phantomjs!main [main.cpp : 118 + 0x4]
eip = 0x0806c039 esp = 0xbff6a620 ebp = 0xbff6a6d8 ebx = 0x0a9c1400
esi = 0xbff6a6f0 edi = 0xbff6a69c
Found by: call frame info
16 libc-2.15.so + 0x194d2
eip = 0xb73ff4d3 esp = 0xbff6a6f0 ebp = 0x00000000 ebx = 0xb758c000
esi = 0x00000000 edi = 0x00000000
Found by: call frame info
17 libc-2.15.so + 0x1a5fff
eip = 0xb758c000 esp = 0xbff6a718 ebp = 0x00000000
Found by: stack scanning
18 ld-2.15.so + 0x1469f
eip = 0xb77ee6a0 esp = 0xbff6a748 ebp = 0x00000000
Found by: stack scanning
19 libc-2.15.so + 0x193e8
eip = 0xb73ff3e9 esp = 0xbff6a74c ebp = 0x00000000
Found by: stack scanning
20 ld-2.15.so + 0x20fff
eip = 0xb77fb000 esp = 0xbff6a750 ebp = 0x00000000
Found by: stack scanning
21 phantomjs + 0x23dff
eip = 0x0806be00 esp = 0xbff6a764 ebp = 0x00000000
Found by: stack scanning
22 ld-2.15.so + 0xf26f
eip = 0xb77e9270 esp = 0xbff6a778 ebp = 0x00000000
Found by: stack scanning
23 ld-2.15.so + 0x21937
eip = 0xb77fb938 esp = 0xbff6a780 ebp = 0x00000000
Found by: stack scanning

Thread 1
0 linux-gate.so + 0x424
eip = 0xb77d9424 esp = 0xb6f06278 ebp = 0x0000000b ebx = 0x0a549694
esi = 0x00000000 edi = 0x0a549678 eax = 0xfffffe00 ecx = 0x00000080
edx = 0x0000000b efl = 0x00000202
Found by: given as instruction pointer in context
1 libpthread-2.15.so + 0xa96a
eip = 0xb76ce96b esp = 0xb6f06288 ebp = 0x0000000b
Found by: stack scanning
2 phantomjs!WTF::TCMalloc_PageHeap::scavengerThread [FastMalloc.cpp : 2495 + 0x10]
eip = 0x0811b7e2 esp = 0xb6f062b0 ebp = 0x0000000b
Found by: stack scanning
3 phantomjs!WTF::TCMalloc_PageHeap::scavengerThread [FastMalloc.cpp : 2484 + 0xa]
eip = 0x0811b6fb esp = 0xb6f0630c ebp = 0x0000000b
Found by: stack scanning
4 libpthread-2.15.so + 0x17fff
eip = 0xb76dc000 esp = 0xb6f06310 ebp = 0x0000000b
Found by: stack scanning
5 libpthread-2.15.so + 0x6d4b
eip = 0xb76cad4c esp = 0xb6f06330 ebp = 0x0000000b
Found by: stack scanning

Thread 2
0 linux-gate.so + 0x424
eip = 0xb77d9424 esp = 0xb65dd01c ebp = 0xb65dd098 ebx = 0x00000008
esi = 0xb5c00994 edi = 0x00000000 eax = 0xfffffdfe ecx = 0xb5c0056c
edx = 0xb5c00780 efl = 0x00000292
Found by: given as instruction pointer in context
1 phantomjs!QEventDispatcherUNIX::select [qeventdispatcher_unix.cpp : 650 + 0x23]
eip = 0x09b06649 esp = 0xb65dd0a0 ebp = 0xb65dd0b8
Found by: previous frame's frame pointer
2 phantomjs!QEventDispatcherUNIXPrivate::doSelect [qeventdispatcher_unix.cpp : 223 + 0x34]
eip = 0x09b08007 esp = 0xb65dd0c0 ebp = 0xb65dd1c8 ebx = 0x0a5342a8
Found by: call frame info
3 phantomjs!QEventDispatcherUNIX::processEvents [qeventdispatcher_unix.cpp : 937 + 0xb]
eip = 0x09b08477 esp = 0xb65dd1d0 ebp = 0xb65dd208 ebx = 0x0a5342a8
esi = 0xb65dd1f0 edi = 0xb5c00478
Found by: call frame info
4 phantomjs!QEventLoop::processEvents [qeventloop.cpp : 149 + 0x8]
eip = 0x09ada7ed esp = 0xb65dd210 ebp = 0xb65dd238 ebx = 0x0a5342a8
esi = 0xb5c00bd8 edi = 0xb65dd278
Found by: call frame info
5 phantomjs!QEventLoop::exec [qeventloop.cpp : 200 + 0x11]
eip = 0x09adacd1 esp = 0xb65dd240 ebp = 0xb65dd288 ebx = 0x0a5342a8
esi = 0xb5c00bd8 edi = 0xb65dd2c0
Found by: call frame info
6 phantomjs!QThread::exec [qthread.cpp : 542 + 0xe]
eip = 0x099d85ba esp = 0xb65dd290 ebp = 0xb65dd2d8 ebx = 0x0a5342a8
esi = 0x0a9852c0 edi = 0xb65dd2c0
Found by: call frame info
7 phantomjs!QThread::run [qthread.cpp : 609 + 0xa]
eip = 0x099d8701 esp = 0xb65dd2e0 ebp = 0xb65dd2e8 ebx = 0x0a5342a8
esi = 0x0aaee158 edi = 0x0a99a100
Found by: call frame info
8 phantomjs!QThreadPrivate::start [qthread_unix.cpp : 338 + 0x7]
eip = 0x099db7e0 esp = 0xb65dd2f0 ebp = 0xb65dd328 ebx = 0x0a5342a8
esi = 0x0aaee158 edi = 0x0a99a100
Found by: call frame info
9 libpthread-2.15.so + 0x6d4b
eip = 0xb76cad4c esp = 0xb65dd330 ebp = 0xb65dd428 ebx = 0xb76dc000
esi = 0x00000000 edi = 0x003d0f00
Found by: call frame info
10 libc-2.15.so + 0xeed3d
eip = 0xb74d4d3e esp = 0xb65dd430 ebp = 0x00000000
Found by: previous frame's frame pointer

Thread 3
0 linux-gate.so + 0x424
eip = 0xb77d9424 esp = 0xb4896178 ebp = 0x00000001 ebx = 0x0accff7c
esi = 0x00000000 edi = 0x0accff60 eax = 0xfffffe00 ecx = 0x00000080
edx = 0x00000001 efl = 0x00000202
Found by: given as instruction pointer in context
1 libpthread-2.15.so + 0xa96a
eip = 0xb76ce96b esp = 0xb4896188 ebp = 0x00000001
Found by: stack scanning
2 phantomjs!QWaitCondition::wait [qwaitcondition_unix.cpp : 86 + 0xe]
eip = 0x099dc576 esp = 0xb48961b0 ebp = 0x00000001
Found by: stack scanning
3 libc-2.15.so + 0xa8865
eip = 0xb748e866 esp = 0xb48961bc ebp = 0x00000001
Found by: stack scanning
4 phantomjs!WTF::currentTime [CurrentTime.cpp : 291 + 0x12]
eip = 0x08bac215 esp = 0xb48961c0 ebp = 0x00000001
Found by: stack scanning
5 phantomjs!WebCore::StorageAreaSync::performImport [Locker.h : 39 + 0x7]
eip = 0x08e73aa7 esp = 0xb48961d0 ebp = 0x00000001
Found by: stack scanning
6 phantomjs!WTF::ThreadCondition::timedWait [ThreadingQt.cpp : 253 + 0x17]
eip = 0x081247d9 esp = 0xb48961f0 ebp = 0x00000001
Found by: stack scanning
7 phantomjs!QMutex::lock [qmutex.cpp : 148 + 0x4]
eip = 0x099d6629 esp = 0xb4896200 ebp = 0x00000001
Found by: stack scanning
8 phantomjs!WTF::MessageQueue<WebCore::LocalStorageTask>::waitForMessage [MessageQueue.h : 137 + 0x23]
eip = 0x08e6f7e9 esp = 0xb4896230 ebp = 0x00000001
Found by: stack scanning
9 phantomjs!WebCore::LocalStorageTask::performTask [LocalStorageTask.cpp : 84 + 0xa]
eip = 0x08e6ee7c esp = 0xb4896250 ebp = 0x00000001
Found by: stack scanning
10 phantomjs!WTF::MessageQueue<WebCore::LocalStorageTask>::waitForMessage [MessageQueue.h : 120 + 0xa]
eip = 0x08e6f76b esp = 0xb489625c ebp = 0x00000001
Found by: stack scanning
11 phantomjs!WebCore::LocalStorageThread::threadEntryPoint [LocalStorageThread.cpp : 68 + 0xb]
eip = 0x08e6fa29 esp = 0xb4896270 ebp = 0x00000001
Found by: stack scanning
12 libstdc++.so.6.0.17 + 0x48ade
eip = 0xb7623adf esp = 0xb4896280 ebp = 0x00000001
Found by: stack scanning
13 phantomjs!QMutex::unlock [qmutex.cpp : 290 + 0x4]
eip = 0x099d6779 esp = 0xb4896290 ebp = 0x00000001
Found by: stack scanning
14 phantomjs!WebCore::LocalStorageThread::threadEntryPointCallback [LocalStorageThread.cpp : 62 + 0xa]
eip = 0x08e6fa71 esp = 0xb48962b0 ebp = 0x00000001
Found by: stack scanning
15 phantomjs!WTF::threadEntryPoint [Threading.cpp : 67 + 0x5]
eip = 0x08bb9af5 esp = 0xb48962c0 ebp = 0x00000001
Found by: stack scanning
16 phantomjs + 0xe27a5f
eip = 0x08e6fa60 esp = 0xb48962cc ebp = 0x00000001
Found by: stack scanning
17 phantomjs!WTF::ThreadPrivate::run [ThreadingQt.cpp : 66 + 0x8]
eip = 0x08123d93 esp = 0xb48962e0 ebp = 0x00000001
Found by: stack scanning
18 phantomjs!QThreadPrivate::start [qthread_unix.cpp : 338 + 0x7]
eip = 0x099db7e0 esp = 0xb48962f0 ebp = 0x00000001
Found by: stack scanning
19 phantomjs!QThreadPrivate::start [qthread_unix.cpp : 299 + 0xa]
eip = 0x099db6ab esp = 0xb489631c ebp = 0x00000001
Found by: stack scanning
20 libpthread-2.15.so + 0x17fff
eip = 0xb76dc000 esp = 0xb4896320 ebp = 0x00000001
Found by: stack scanning
21 libpthread-2.15.so + 0x6d4b
eip = 0xb76cad4c esp = 0xb4896330 ebp = 0x00000001
Found by: stack scanning

Thread 4
0 linux-gate.so + 0x424
eip = 0xb77d9424 esp = 0xb3eff01c ebp = 0xb3eff098 ebx = 0x00000012
esi = 0x0acd3084 edi = 0x00000000 eax = 0xfffffdfe ecx = 0x0acd2c5c
edx = 0x0acd2e70 efl = 0x00000292
Found by: given as instruction pointer in context
1 phantomjs!QEventDispatcherUNIX::select [qeventdispatcher_unix.cpp : 650 + 0x23]
eip = 0x09b06649 esp = 0xb3eff0a0 ebp = 0xb3eff0b8
Found by: previous frame's frame pointer
2 phantomjs!QEventDispatcherUNIXPrivate::doSelect [qeventdispatcher_unix.cpp : 223 + 0x34]
eip = 0x09b08007 esp = 0xb3eff0c0 ebp = 0xb3eff1c8 ebx = 0x0a5342a8
Found by: call frame info
3 phantomjs!QEventDispatcherUNIX::processEvents [qeventdispatcher_unix.cpp : 937 + 0xb]
eip = 0x09b08477 esp = 0xb3eff1d0 ebp = 0xb3eff208 ebx = 0x0a5342a8
esi = 0xb3eff1f0 edi = 0x0acd2b68
Found by: call frame info
4 phantomjs!QEventLoop::processEvents [qeventloop.cpp : 149 + 0x8]
eip = 0x09ada7ed esp = 0xb3eff210 ebp = 0xb3eff238 ebx = 0x0a5342a8
esi = 0x0accfb10 edi = 0xb3eff278
Found by: call frame info
5 phantomjs!QEventLoop::exec [qeventloop.cpp : 200 + 0x11]
eip = 0x09adacd1 esp = 0xb3eff240 ebp = 0xb3eff288 ebx = 0x0a5342a8
esi = 0x0accfb10 edi = 0xb3eff2c0
Found by: call frame info
6 phantomjs!QThread::exec [qthread.cpp : 542 + 0xe]
eip = 0x099d85ba esp = 0xb3eff290 ebp = 0xb3eff2d8 ebx = 0x0a5342a8
esi = 0x0accf6c0 edi = 0xb3eff2c0
Found by: call frame info
7 phantomjs!QThread::run [qthread.cpp : 609 + 0xa]
eip = 0x099d8701 esp = 0xb3eff2e0 ebp = 0xb3eff2e8 ebx = 0x0a5342a8
esi = 0x0ab2fe90 edi = 0x0ab89fa0
Found by: call frame info
8 phantomjs!QThreadPrivate::start [qthread_unix.cpp : 338 + 0x7]
eip = 0x099db7e0 esp = 0xb3eff2f0 ebp = 0xb3eff328 ebx = 0x0a5342a8
esi = 0x0ab2fe90 edi = 0x0ab89fa0
Found by: call frame info
9 libpthread-2.15.so + 0x6d4b
eip = 0xb76cad4c esp = 0xb3eff330 ebp = 0xb3eff428 ebx = 0xb76dc000
esi = 0x00000000 edi = 0x003d0f00
Found by: call frame info
10 libc-2.15.so + 0xeed3d
eip = 0xb74d4d3e esp = 0xb3eff430 ebp = 0x00000000
Found by: previous frame's frame pointer

Loaded modules:
0x08048000 - 0x0a543fff phantomjs ??? (main)
0xb0bc6000 - 0xb0c63fff DejaVuSansCondensed.ttf ???
0xb0c64000 - 0xb0cfefff DejaVuSansCondensed-Bold.ttf ???
0xb2c05000 - 0xb2c56fff Ubuntu-B.ttf ???
0xb2c57000 - 0xb2c6afff n019003l.pfb ???
0xb2c6f000 - 0xb2cc5fff Ubuntu-R.ttf ???
0xb2ed3000 - 0xb2ee7fff libresolv-2.15.so ???
0xb2eea000 - 0xb2ef0fff libnss_dns-2.15.so ???
0xb2ef1000 - 0xb2efdfff libnss_files-2.15.so ???
0xb545e000 - 0xb5461fff libnss_mdns4_minimal.so.2 ???
0xb6f0f000 - 0xb6f65fff libssl.so.1.0.0 ???
0xb6f66000 - 0xb710dfff libcrypto.so.1.0.0 ???
0xb7111000 - 0xb7111fff c05880de57d1f5e948fdfacc138775d9-le32d4.cache-3 ???
0xb7112000 - 0xb7117fff 945677eb7aeaf62f1d50efc3fb3ec7d8-le32d4.cache-3 ???
0xb7118000 - 0xb7119fff 99e8ed0e538f840c565b6ed5dad60d56-le32d4.cache-3 ???
0xb711a000 - 0xb711cfff 2cd17615ca594fa2959ae173292e504c-le32d4.cache-3 ???
0xb711d000 - 0xb711dfff e7071f4a29fa870f4323321c154eba04-le32d4.cache-3 ???
0xb711e000 - 0xb7121fff 6eb3985aa4124903f6ff08ba781cd364-le32d4.cache-3 ???
0xb7122000 - 0xb7122fff 0d8c3b2ac0904cb8a57a757ad11a4a08-le32d4.cache-3 ???
0xb7123000 - 0xb7126fff a755afe4a08bf5b97852ceb7400b47bc-le32d4.cache-3 ???
0xb7127000 - 0xb712dfff 6d41288fd70b0be22e8c3a91e032eec0-le32d4.cache-3 ???
0xb712e000 - 0xb7138fff 04aabc0a78ac019cf9454389977116d2-le32d4.cache-3 ???
0xb7139000 - 0xb7139fff 1ac9eb803944fde146138c791f5cc56a-le32d4.cache-3 ???
0xb713a000 - 0xb713cfff 385c0604a188198f04d133e54aba7fe7-le32d4.cache-3 ???
0xb713d000 - 0xb713dfff dc05db6664285cc2f12bf69c139ae4c3-le32d4.cache-3 ???
0xb713e000 - 0xb713ffff 767a8244fc0220cfb567a839d0392e0b-le32d4.cache-3 ???
0xb7140000 - 0xb7140fff 4794a0821666d79190d59a36cb4f44b5-le32d4.cache-3 ???
0xb7141000 - 0xb7143fff 8801497958630a81b71ace7c5f9b32a8-le32d4.cache-3 ???
0xb7144000 - 0xb7147fff 3047814df9a2f067bd2d96a2b9c36e5a-le32d4.cache-3 ???
0xb7148000 - 0xb7148fff 56cf4f4769d0f4abc89a4895d7bd3ae1-le32d4.cache-3 ???
0xb7149000 - 0xb7149fff b9d506c9ac06c20b433354fa67a72993-le32d4.cache-3 ???
0xb714a000 - 0xb714dfff b47c4e1ecd0709278f4910c18777a504-le32d4.cache-3 ???
0xb714e000 - 0xb715afff d52a8644073d54c13679302ca1180695-le32d4.cache-3 ???
0xb715b000 - 0xb715bfff 0c9eb80ebd1c36541ebe2852d3bb0c49-le32d4.cache-3 ???
0xb715c000 - 0xb715dfff e13b20fdb08344e0e664864cc2ede53d-le32d4.cache-3 ???
0xb715e000 - 0xb7160fff 7ef2298fde41cc6eeb7af42e48b7d293-le32d4.cache-3 ???
0xb73a5000 - 0xb73ccfff libexpat.so.1.6.0 ???
0xb73cd000 - 0xb73e5fff libz.so.1.2.7 ???
0xb73e6000 - 0xb758cfff libc-2.15.so ???
0xb7590000 - 0xb75adfff libgcc_s.so.1 ???
0xb75af000 - 0xb75dafff libm-2.15.so ???
0xb75db000 - 0xb76bcfff libstdc++.so.6.0.17 ???
0xb76c4000 - 0xb76dcfff libpthread-2.15.so ???
0xb76df000 - 0xb76e7fff librt-2.15.so ???
0xb76e8000 - 0xb76ecfff libdl-2.15.so ???
0xb76ee000 - 0xb7725fff libfontconfig.so.1.6.2 ???
0xb7726000 - 0xb77bffff libfreetype.so.6.9.0 ???
0xb77d9000 - 0xb77d9fff linux-gate.so ???
0xb77da000 - 0xb77fbfff ld-2.15.so ???

Disclaimer:
This issue was migrated on 2013-03-15 from the project's former issue tracker on Google Code, Issue #1085.
🌟   1 people had starred this issue at the time of migration.

[vitallium]

vitaliy....@gmail.com commented:

 

 
Metadata Updates

• Merged into: Phantom 1.8.0 segfaults when appending and removing an iframe (YUITest) #10947 (GC-947)
• Status updated: Duplicate