bug#52883: xwidget-webkit webinspector segfaults emacs on sway

bug#52883: xwidget-webkit webinspector segfaults emacs on sway

[akira]

Steps to reproduce:

- run an emacs -Q compiled --with-xwidgets under xwayland on sway
- M-x xwidget-webkit-browse-url RET then type in any valid website
- right click on any element then select 'Inspect Element'
- the xwidget will freeze and be difficult to interact with
- C-x k to kill the buffer then emacs will segfault

bug#52883: xwidget-webkit webinspector segfaults emacs on sway

[Po Lu via Bug reports for GNU Emacs, the Swiss army knife of text editors]

akira@akirakyle.com writes:

> Steps to reproduce:
>
> - run an emacs -Q compiled --with-xwidgets under xwayland on sway
> - M-x xwidget-webkit-browse-url RET then type in any valid website
> - right click on any element then select 'Inspect Element'
> - the xwidget will freeze and be difficult to interact with
> - C-x k to kill the buffer then emacs will segfault

Please tell the versions of WebKitGTK and GTK+ you have installed, and
also show the backtrace of the segfault.

On a modern GNU/Linux system, it should be enough to simply say
"coredumpctl debug emacs", wait for the gdb prompt to appear, and then
type "bt" followed by RET.

Thanks.

bug#52883: xwidget-webkit webinspector segfaults emacs on sway

[Akira Kyle]

This was on emacs from current master, under webkitgtk 2.32.1, and gkt+ 3.24.27

Here's the backtrace:
#0  0x0000ffffadbb9970 in raise () from
/nix/store/nvl1z67g91dfm0gfv0w0xd0h22cixq5i-glibc-2.32-46/lib/libpthread.so.0
#1  0x0000000000585300 in terminate_due_to_signal (sig=11,
backtrace_limit=40) at emacs.c:443
#2  0x00000000005b4a50 in handle_fatal_signal (sig=11) at sysdep.c:1780
#3  0x00000000005b4a1c in deliver_thread_signal (sig=11,
handler=0x5b4a38 <handle_fatal_signal>) at sysdep.c:1772
#4  0x00000000005b4a94 in deliver_fatal_thread_signal (sig=11) at sysdep.c:1792
#5  0x00000000005b4cb0 in handle_sigsegv (sig=11,
siginfo=0xffffc585f4c0, arg=0xffffc585f540) at sysdep.c:1885
#6  0x0000ffffaf77f2b8 in WTF::jscSignalHandler(int, siginfo_t*,
void*) () from /nix/store/kc6gkrrkrk2icp4pd76h3rrca6rmjc4v-webkitgtk-2.32.1/lib/libjavascriptcoregtk-4.0.so.18
#7  <signal handler called>
#8  0x0000ffffb06e761c in
WebKit::WebInspectorProxy::closeFrontendPageAndWindow() () from
/nix/store/kc6gkrrkrk2icp4pd76h3rrca6rmjc4v-webkitgtk-2.32.1/lib/libwebkit2gtk-4.0.so.37
#9  0x0000ffffb06e77ac in WebKit::WebInspectorProxy::invalidate() ()
from /nix/store/kc6gkrrkrk2icp4pd76h3rrca6rmjc4v-webkitgtk-2.32.1/lib/libwebkit2gtk-4.0.so.37
#10 0x0000ffffb05d0d94 in WebKit::WebPageProxy::close() () from
/nix/store/kc6gkrrkrk2icp4pd76h3rrca6rmjc4v-webkitgtk-2.32.1/lib/libwebkit2gtk-4.0.so.37
#11 0x0000ffffb06b0754 in webkitWebViewBaseDispose(_GObject*) () from
/nix/store/kc6gkrrkrk2icp4pd76h3rrca6rmjc4v-webkitgtk-2.32.1/lib/libwebkit2gtk-4.0.so.37
#12 0x0000ffffb0688c04 in webkitWebViewDispose(_GObject*) () from
/nix/store/kc6gkrrkrk2icp4pd76h3rrca6rmjc4v-webkitgtk-2.32.1/lib/libwebkit2gtk-4.0.so.37
#13 0x0000ffffb3f9b5f4 in g_object_run_dispose () from
/nix/store/bl4wjlfq1mmzw8x7jk2sf5hl4cyn3yj9-glib-2.68.2/lib/libgobject-2.0.so.0
#14 0x00000000006eaec0 in kill_xwidget (xw=0x3ca90e40) at xwidget.c:3458
#15 0x00000000006eb048 in kill_buffer_xwidgets (buffer=0x3ca909d5) at
xwidget.c:3496
#16 0x00000000005bf234 in Fkill_buffer (buffer_or_name=0x3c8f3c44) at
buffer.c:1891
#17 0x0000000000652bc8 in funcall_subr (subr=0xb197d0 <Skill_buffer>,
numargs=1, args=0xffffc5860cd0) at eval.c:3153
#18 0x00000000006527a0 in Ffuncall (nargs=2, args=0xffffc5860cc8) at eval.c:3078
#19 0x00000000006485a4 in Ffuncall_interactively (nargs=2,
args=0xffffc5860cc8) at callint.c:260
#20 0x0000000000652a9c in funcall_subr (subr=0xb1e090
<Sfuncall_interactively>, numargs=2, args=0xffffc5860cc8) at
eval.c:3133
#21 0x00000000006527a0 in Ffuncall (nargs=3, args=0xffffc5860cc0) at eval.c:3078
#22 0x000000000064a618 in Fcall_interactively
(function=0xffffa82f0f28, record_flag=0x0, keys=0x3bc5be0d) at
callint.c:798
#23 0x0000000000652c2c in funcall_subr (subr=0xb1e0c0
<Scall_interactively>, numargs=3, args=0xffffc5861090) at eval.c:3158
#24 0x00000000006527a0 in Ffuncall (nargs=4, args=0xffffc5861088) at eval.c:3078
#25 0x00000000006a36ac in exec_byte_code (bytestr=0xffffa8f4df3c,
vector=0xffffa8f4dba5, maxdepth=0x36, args_template=0x1006, nargs=1,
args=0xffffc5861618) at bytecode.c:632
#26 0x0000000000652eb8 in fetch_and_exec_byte_code
(fun=0xffffa8f4db75, syms_left=0x1006, nargs=1, args=0xffffc5861610)
at eval.c:3202
#27 0x00000000006532b8 in funcall_lambda (fun=0xffffa8f4db75, nargs=1,
arg_vector=0xffffc5861610) at eval.c:3283
#28 0x00000000006527fc in Ffuncall (nargs=2, args=0xffffc5861608) at eval.c:3082
#29 0x0000000000651f10 in call1 (fn=0x4680, arg1=0xffffa82f0f28) at eval.c:2938
#30 0x000000000058d8e4 in command_loop_1 () at keyboard.c:1507
#31 0x000000000064e604 in internal_condition_case (bfun=0x58cfa4
<command_loop_1>, handlers=0x90, hfun=0x58c438 <cmd_error>) at
eval.c:1492
#32 0x000000000058cbc0 in command_loop_2 (handlers=0x90) at keyboard.c:1135
#33 0x000000000064dcf4 in internal_catch (tag=0xecd0, func=0x58cb98
<command_loop_2>, arg=0x90) at eval.c:1223
#34 0x000000000058cb54 in command_loop () at keyboard.c:1113
#35 0x000000000058beb8 in recursive_edit_1 () at keyboard.c:722
#36 0x000000000058c08c in Frecursive_edit () at keyboard.c:805
#37 0x0000000000588174 in main (argc=2, argv=0xffffc5861b68) at emacs.c:2422

On Wed, Dec 29, 2021 at 6:39 PM Po Lu <luangruo@yahoo.com> wrote:
>
> akira@akirakyle.com writes:
>
> > Steps to reproduce:
> >
> > - run an emacs -Q compiled --with-xwidgets under xwayland on sway
> > - M-x xwidget-webkit-browse-url RET then type in any valid website
> > - right click on any element then select 'Inspect Element'
> > - the xwidget will freeze and be difficult to interact with
> > - C-x k to kill the buffer then emacs will segfault
>
> Please tell the versions of WebKitGTK and GTK+ you have installed, and
> also show the backtrace of the segfault.
>
> On a modern GNU/Linux system, it should be enough to simply say
> "coredumpctl debug emacs", wait for the gdb prompt to appear, and then
> type "bt" followed by RET.
>
> Thanks.

bug#52883: xwidget-webkit webinspector segfaults emacs on sway

[Po Lu via Bug reports for GNU Emacs, the Swiss army knife of text editors]

Akira Kyle <akira@akirakyle.com> writes:

> This was on emacs from current master, under webkitgtk 2.32.1, and gkt+ 3.24.27

> WebKit::WebInspectorProxy::closeFrontendPageAndWindow() () from
> /nix/store/kc6gkrrkrk2icp4pd76h3rrca6rmjc4v-webkitgtk-2.32.1/lib/libwebkit2gtk-4.0.so.37
> #9  0x0000ffffb06e77ac in WebKit::WebInspectorProxy::invalidate() ()

Thanks, but that's a bug in WebKitGTK 2.32; you should upgrade to
2.34.3 and rebuild Emacs.

bug#52883: xwidget-webkit webinspector segfaults emacs on sway

[Akira Kyle]

still segfaults

emacs a4893515c2, webkitgtk 3.24.3, gtk+ 3.24.30

#0  0x0000ffff9857e428 in raise () from
/nix/store/0y64vbl8hc0xqq5ag6wwj5r3pr0l6z2s-glibc-2.33-56/lib/libpthread.so.0
#1  0x0000000000585bc8 in terminate_due_to_signal (sig=11,
backtrace_limit=40) at emacs.c:443
#2  0x00000000005b5318 in handle_fatal_signal (sig=11) at sysdep.c:1780
#3  0x00000000005b52e4 in deliver_thread_signal (sig=11,
handler=0x5b5300 <handle_fatal_signal>) at sysdep.c:1772
#4  0x00000000005b535c in deliver_fatal_thread_signal (sig=11) at sysdep.c:1792
#5  0x00000000005b5578 in handle_sigsegv (sig=11,
siginfo=0xffffe67ce800, arg=0xffffe67ce880) at sysdep.c:1885
#6  0x0000ffff9a230518 in WTF::jscSignalHandler(int, siginfo_t*,
void*) () from /nix/store/69hwcjpw69chmrdsirx5bh6pmvfz10xf-webkitgtk-2.34.3/lib/libjavascriptcoregtk-4.0.so.18
#7  <signal handler called>
#8  0x0000ffff9b1d7744 in
WebKit::WebInspectorUIProxy::closeFrontendPageAndWindow() () from
/nix/store/69hwcjpw69chmrdsirx5bh6pmvfz10xf-webkitgtk-2.34.3/lib/libwebkit2gtk-4.0.so.37
#9  0x0000ffff9b1d78e4 in WebKit::WebInspectorUIProxy::invalidate() ()
from /nix/store/69hwcjpw69chmrdsirx5bh6pmvfz10xf-webkitgtk-2.34.3/lib/libwebkit2gtk-4.0.so.37
#10 0x0000ffff9b0bcfb8 in WebKit::WebPageProxy::close() () from
/nix/store/69hwcjpw69chmrdsirx5bh6pmvfz10xf-webkitgtk-2.34.3/lib/libwebkit2gtk-4.0.so.37
#11 0x0000ffff9b19fbcc in webkitWebViewBaseDispose(_GObject*) () from
/nix/store/69hwcjpw69chmrdsirx5bh6pmvfz10xf-webkitgtk-2.34.3/lib/libwebkit2gtk-4.0.so.37
#12 0x0000ffff9b1793ec in webkitWebViewDispose(_GObject*) () from
/nix/store/69hwcjpw69chmrdsirx5bh6pmvfz10xf-webkitgtk-2.34.3/lib/libwebkit2gtk-4.0.so.37
#13 0x0000ffff9ebd97cc in g_object_run_dispose () from
/nix/store/k8d3sjmp7mkmblilk85nl6m0ds0kkykz-glib-2.70.1/lib/libgobject-2.0.so.0
#14 0x00000000006eb788 in kill_xwidget (xw=0x3edc7c30) at xwidget.c:3458
#15 0x00000000006eb910 in kill_buffer_xwidgets (buffer=0x3edc77c5) at
xwidget.c:3496
#16 0x00000000005bfafc in Fkill_buffer (buffer_or_name=0x3ed25104) at
buffer.c:1891
#17 0x0000000000653490 in funcall_subr (subr=0xb1a7e8 <Skill_buffer>,
numargs=1, args=0xffffe67d0010) at eval.c:3153
#18 0x0000000000653068 in Ffuncall (nargs=2, args=0xffffe67d0008) at eval.c:3078
#19 0x0000000000648e6c in Ffuncall_interactively (nargs=2,
args=0xffffe67d0008) at callint.c:260
#20 0x0000000000653364 in funcall_subr (subr=0xb1f0a8
<Sfuncall_interactively>, numargs=2, args=0xffffe67d0008) at
eval.c:3133
#21 0x0000000000653068 in Ffuncall (nargs=3, args=0xffffe67d0000) at eval.c:3078
#22 0x000000000064aee0 in Fcall_interactively
(function=0xffff92a6fce8, record_flag=0x0, keys=0x3ec6e03d) at
callint.c:798
#23 0x00000000006534f4 in funcall_subr (subr=0xb1f0d8
<Scall_interactively>, numargs=3, args=0xffffe67d03d0) at eval.c:3158
#24 0x0000000000653068 in Ffuncall (nargs=4, args=0xffffe67d03c8) at eval.c:3078
#25 0x00000000006a3f74 in exec_byte_code (bytestr=0xffff936cdfdc,
vector=0xffff936cdc45, maxdepth=0x36, args_template=0x1006, nargs=1,
args=0xffffe67d0958) at bytecode.c:632
#26 0x0000000000653780 in fetch_and_exec_byte_code
(fun=0xffff936cdc15, syms_left=0x1006, nargs=1, args=0xffffe67d0950)
at eval.c:3202
#27 0x0000000000653b80 in funcall_lambda (fun=0xffff936cdc15, nargs=1,
arg_vector=0xffffe67d0950) at eval.c:3283
#28 0x00000000006530c4 in Ffuncall (nargs=2, args=0xffffe67d0948) at eval.c:3082
#29 0x00000000006527d8 in call1 (fn=0x4680, arg1=0xffff92a6fce8) at eval.c:2938
#30 0x000000000058e1ac in command_loop_1 () at keyboard.c:1507
#31 0x000000000064eecc in internal_condition_case (bfun=0x58d86c
<command_loop_1>, handlers=0x90, hfun=0x58cd00 <cmd_error>) at
eval.c:1492
#32 0x000000000058d488 in command_loop_2 (handlers=0x90) at keyboard.c:1135
#33 0x000000000064e5bc in internal_catch (tag=0xecd0, func=0x58d460
<command_loop_2>, arg=0x90) at eval.c:1223
#34 0x000000000058d41c in command_loop () at keyboard.c:1113
#35 0x000000000058c780 in recursive_edit_1 () at keyboard.c:722
#36 0x000000000058c954 in Frecursive_edit () at keyboard.c:805
#37 0x0000000000588a3c in main (argc=2, argv=0xffffe67d0ea8) at emacs.c:2422

On Wed, Dec 29, 2021 at 8:28 PM Po Lu <luangruo@yahoo.com> wrote:
>
> Akira Kyle <akira@akirakyle.com> writes:
>
> > This was on emacs from current master, under webkitgtk 2.32.1, and gkt+ 3.24.27
>
> > WebKit::WebInspectorProxy::closeFrontendPageAndWindow() () from
> > /nix/store/kc6gkrrkrk2icp4pd76h3rrca6rmjc4v-webkitgtk-2.32.1/lib/libwebkit2gtk-4.0.so.37
> > #9  0x0000ffffb06e77ac in WebKit::WebInspectorProxy::invalidate() ()
>
> Thanks, but that's a bug in WebKitGTK 2.32; you should upgrade to
> 2.34.3 and rebuild Emacs.

bug#52883: xwidget-webkit webinspector segfaults emacs on sway

[Po Lu via Bug reports for GNU Emacs, the Swiss army knife of text editors]

Akira Kyle <akira@akirakyle.com> writes:

Can you install the source and debuginfo packages for WebKitGTK, step to
the frame that contains `platformCloseFrontendPageAndWindow', and type:

  (gdb) p *m_client

Thanks.

bug#52883: xwidget-webkit webinspector segfaults emacs on sway

[Lars Ingebrigtsen]

Po Lu <luangruo@yahoo.com> writes:

> Akira Kyle <akira@akirakyle.com> writes:
>
> Can you install the source and debuginfo packages for WebKitGTK, step to
> the frame that contains `platformCloseFrontendPageAndWindow', and type:
>
>   (gdb) p *m_client

This was two weeks ago -- Akira, is it possible for you to do this?  

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no

bug#52883: xwidget-webkit webinspector segfaults emacs on sway

[Akira Kyle]

On Sat, Jan 15, 2022 at 10:58 AM, Lars Ingebrigtsen 
<larsi@gnus.org> wrote:

> Po Lu <luangruo@yahoo.com> writes:
>
>> Akira Kyle <akira@akirakyle.com> writes:
>>
>> Can you install the source and debuginfo packages for 
>> WebKitGTK, step to
>> the frame that contains `platformCloseFrontendPageAndWindow', 
>> and type:
>>
>>   (gdb) p *m_client
>
> This was two weeks ago -- Akira, is it possible for you to do 
> this?  

I may not get around to doing this anytime soon since the system 
where this segfault happens runs nixos for which I'm not familiar 
with how to correctly install the debuginfo version of 
webkitgtk. With my semester courses starting, I have limited time 
to spend debugging.

bug#52883: xwidget-webkit webinspector segfaults emacs on sway

[Po Lu via Bug reports for GNU Emacs, the Swiss army knife of text editors]

Akira Kyle <akira@akirakyle.com> writes:

> I may not get around to doing this anytime soon since the system where
> this segfault happens runs nixos for which I'm not familiar with how
> to correctly install the debuginfo version of webkitgtk. With my
> semester courses starting, I have limited time to spend debugging.

Fair enough, I hope you will be able to test this soon.  In the
meantime, let's keep this bug open: it clearly hasn't been fixed yet.

Thanks.