Go to:
Gentoo Home
Documentation
Forums
Lists
Bugs
Planet
Store
Wiki
Get Gentoo!
Gentoo's Bugzilla – Attachment 221919 Details for
Bug 303080
>=www-client/chromium-bin-4.0.295.0_p35884 crashing while trying to upload file
Home
|
New
–
[Ex]
|
Browse
|
Search
|
Privacy Policy
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
valgrind output
val.out.txt (text/plain), 62.72 KB, created by
Karl H
on 2010-03-03 11:00:16 UTC
(
hide
)
Description:
valgrind output
Filename:
MIME Type:
Creator:
Karl H
Created:
2010-03-03 11:00:16 UTC
Size:
62.72 KB
patch
obsolete
>==19630== >==19630== Conditional jump or move depends on uninitialised value(s) >==19630== at 0x4602112: composite_pixel (pixops.c:568) >==19630== by 0x4602A2A: process_pixel (pixops.c:1164) >==19630== by 0x4603CA7: pixops_process (pixops.c:1355) >==19630== by 0x4604A83: _pixops_composite (pixops.c:1798) >==19630== by 0x45FD757: gdk_pixbuf_composite (gdk-pixbuf-scale.c:142) >==19630== by 0x44141CF: gtk_drag_get_cursor (gtkdnd.c:752) >==19630== by 0x441737A: gtk_drag_begin_internal (gtkdnd.c:2330) >==19630== by 0x8383EC7: TabGtk::StartDragging(gfx::Point) (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8383FD4: TabGtk::DidProcessEvent(_GdkEvent*) (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x85BD1C4: base::MessagePumpForUI::DidProcessEvent(_GdkEvent*) (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x459484A: gdk_event_dispatch (gdkevents-x11.c:2367) >==19630== by 0x475E9FE: g_main_context_dispatch (gmain.c:1960) >==20521== >==20521== Use of uninitialised value of size 4 >==20521== at 0x88147D4: v8::internal::Invoke(bool, v8::internal::Handle<v8::internal::JSFunction>, v8::internal::Handle<v8::internal::Object>, int, >v8::internal::Object***, bool*) (in /opt/chromium.org/chrome-linux/chrome) >==20521== by 0x8CDA5A5: void std::__push_heap<WebCore::TimerHeapIterator, int, WebCore::TimerHeapElement>(WebCore::TimerHeapIterator, int, int, >WebCore::TimerHeapElement) (in /opt/chromium.org/chrome-linux/chrome) >==20521== by 0x8CDA7F6: WebCore::TimerBase::heapDecreaseKey() (in /opt/chromium.org/chrome-linux/chrome) >==20521== by 0x8CDA95A: WebCore::TimerBase::setNextFireTime(double) (in /opt/chromium.org/chrome-linux/chrome) >==20521== by 0x8C69E0C: WebCore::Frame::keepAlive() (in /opt/chromium.org/chrome-linux/chrome) >==20521== by 0x8AE68F1: WebCore::V8Proxy::runScript(v8::Handle<v8::Script>, bool) (in /opt/chromium.org/chrome-linux/chrome) >==20521== by 0x8AE6B60: WebCore::V8Proxy::evaluate(WebCore::ScriptSourceCode const&, WebCore::Node*) (in /opt/chromium.org/chrome-linux/chrome) >==20521== by 0x8AD1241: WebCore::ScriptController::evaluate(WebCore::ScriptSourceCode const&) (in /opt/chromium.org/chrome-linux/chrome) >==20521== by 0x8ACEF1A: WebCore::ScriptController::executeScript(WebCore::ScriptSourceCode const&) (in /opt/chromium.org/chrome-linux/chrome) >==20521== by 0x8BD6144: WebCore::HTMLTokenizer::scriptExecution(WebCore::ScriptSourceCode const&, WebCore::HTMLTokenizer::State) (in >/opt/chromium.org/chrome-linux/chrome) >==20521== by 0x8BD9144: WebCore::HTMLTokenizer::scriptHandler(WebCore::HTMLTokenizer::State) (in /opt/chromium.org/chrome-linux/chrome) >==20521== by 0x8BD9C9D: WebCore::HTMLTokenizer::parseNonHTMLText(WebCore::SegmentedString&, WebCore::HTMLTokenizer::State) (in >/opt/chromium.org/chrome-linux/chrome) >==20521== >==20521== Conditional jump or move depends on uninitialised value(s) >==20521== at 0x881482A: v8::internal::Invoke(bool, v8::internal::Handle<v8::internal::JSFunction>, v8::internal::Handle<v8::internal::Object>, int, >v8::internal::Object***, bool*) (in /opt/chromium.org/chrome-linux/chrome) >==20521== by 0x8CDA5A5: void std::__push_heap<WebCore::TimerHeapIterator, int, WebCore::TimerHeapElement>(WebCore::TimerHeapIterator, int, int, >WebCore::TimerHeapElement) (in /opt/chromium.org/chrome-linux/chrome) >==20521== >==20521== Jump to the invalid address stated on the next line >==20521== at 0x0: ??? >==20521== Address 0x0 is not stack'd, malloc'd or (recently) free'd >==20521== >==20521== Process terminating with default action of signal 11 (SIGSEGV) >==20521== Bad permissions for mapped region at address 0x0 >==20521== at 0x0: ??? >==20521== >==20521== ERROR SUMMARY: 18 errors from 11 contexts (suppressed: 0 from 0) >==20521== malloc/free: in use at exit: 2,018,763 bytes in 11,669 blocks. >==20521== malloc/free: 28,249 allocs, 16,580 frees, 7,941,119 bytes allocated. >==20521== For counts of detected errors, rerun with: -v >==20521== Use --track-origins=yes to see where uninitialised values come from >[19630:19630:14182289328:ERROR:/b/slave/chromium-rel-linux/build/src/chrome/common/temp_scaffolding_stubs.h(41)] Not implemented reached in void >printing::PrintViewManager::Stop() >==20521== searching for pointers to 11,669 not-freed blocks. >==20521== checked 13,560,772 bytes. >==20521== >==20521== LEAK SUMMARY: >==20521== definitely lost: 256 bytes in 1 blocks. >==20521== possibly lost: 134,351 bytes in 746 blocks. >==20521== still reachable: 1,884,156 bytes in 10,922 blocks. >==20521== suppressed: 0 bytes in 0 blocks. >==20521== Rerun with --leak-check=full to see details of leaked memory. >==20929== >==20929== Invalid read of size 4 >==20929== at 0x7552FFF: ??? >==20929== by 0x7552FA0: ??? >==20929== by 0x75C8A83: ??? >==20929== by 0x754A918: ??? >==20929== by 0x753F741: ??? >==20929== by 0x88147AA: v8::internal::Invoke(bool, v8::internal::Handle<v8::internal::JSFunction>, v8::internal::Handle<v8::internal::Object>, int, >v8::internal::Object***, bool*) (in /opt/chromium.org/chrome-linux/chrome) >==20929== by 0x90C3305: webkit_glue::WebKitClientImpl::memoryUsageMB() (in /opt/chromium.org/chrome-linux/chrome) >==20929== by 0x8AA24FC: WebCore::ChromiumBridge::traceEventBegin(char const*, void*, char const*) (in /opt/chromium.org/chrome-linux/chrome) >==20929== by 0x8AE6B60: WebCore::V8Proxy::evaluate(WebCore::ScriptSourceCode const&, WebCore::Node*) (in /opt/chromium.org/chrome-linux/chrome) >==20929== by 0x8AD1241: WebCore::ScriptController::evaluate(WebCore::ScriptSourceCode const&) (in /opt/chromium.org/chrome-linux/chrome) >==20929== by 0x8ACEF1A: WebCore::ScriptController::executeScript(WebCore::ScriptSourceCode const&) (in /opt/chromium.org/chrome-linux/chrome) >==20929== by 0x8BD6144: WebCore::HTMLTokenizer::scriptExecution(WebCore::ScriptSourceCode const&, WebCore::HTMLTokenizer::State) (in >/opt/chromium.org/chrome-linux/chrome) >==20929== Address 0x19 is not stack'd, malloc'd or (recently) free'd >==20929== >==20929== Process terminating with default action of signal 11 (SIGSEGV) >==20929== Access not within mapped region at address 0x19 >==20929== at 0x7552FFF: ??? >==20929== by 0x7552FA0: ??? >==20929== by 0x75C8A83: ??? >==20929== by 0x754A918: ??? >==20929== by 0x753F741: ??? >==20929== by 0x88147AA: v8::internal::Invoke(bool, v8::internal::Handle<v8::internal::JSFunction>, v8::internal::Handle<v8::internal::Object>, int, >v8::internal::Object***, bool*) (in /opt/chromium.org/chrome-linux/chrome) >==20929== by 0x90C3305: webkit_glue::WebKitClientImpl::memoryUsageMB() (in /opt/chromium.org/chrome-linux/chrome) >==20929== by 0x8AA24FC: WebCore::ChromiumBridge::traceEventBegin(char const*, void*, char const*) (in /opt/chromium.org/chrome-linux/chrome) >==20929== by 0x8AE6B60: WebCore::V8Proxy::evaluate(WebCore::ScriptSourceCode const&, WebCore::Node*) (in /opt/chromium.org/chrome-linux/chrome) >==20929== by 0x8AD1241: WebCore::ScriptController::evaluate(WebCore::ScriptSourceCode const&) (in /opt/chromium.org/chrome-linux/chrome) >==20929== by 0x8ACEF1A: WebCore::ScriptController::executeScript(WebCore::ScriptSourceCode const&) (in /opt/chromium.org/chrome-linux/chrome) >==20929== by 0x8BD6144: WebCore::HTMLTokenizer::scriptExecution(WebCore::ScriptSourceCode const&, WebCore::HTMLTokenizer::State) (in >/opt/chromium.org/chrome-linux/chrome) >==20929== If you believe this happened as a result of a stack overflow in your >==20929== program's main thread (unlikely but possible), you can try to increase >==20929== the size of the main thread stack using the --main-stacksize= flag. >==20929== The main thread stack size used in this run was 8388608. >==20929== >==20929== ERROR SUMMARY: 16 errors from 9 contexts (suppressed: 0 from 0) >==20929== malloc/free: in use at exit: 2,271,262 bytes in 11,502 blocks. >==20929== malloc/free: 31,189 allocs, 19,687 frees, 13,555,618 bytes allocated. >==20929== For counts of detected errors, rerun with: -v >==20929== Use --track-origins=yes to see where uninitialised values come from >==20929== searching for pointers to 11,502 not-freed blocks. >==20929== checked 13,695,712 bytes. >==20929== >==20929== LEAK SUMMARY: >==20929== definitely lost: 0 bytes in 0 blocks. >==20929== possibly lost: 135,147 bytes in 756 blocks. >==20929== still reachable: 2,136,115 bytes in 10,746 blocks. >==20929== suppressed: 0 bytes in 0 blocks. >==20929== Rerun with --leak-check=full to see details of leaked memory. >==19630== >==19630== Conditional jump or move depends on uninitialised value(s) >==19630== at 0x460232B: composite_line (pixops.c:638) >==19630== by 0x4603BD0: pixops_process (pixops.c:1340) >==19630== by 0x4604A83: _pixops_composite (pixops.c:1798) >==19630== by 0x45FD757: gdk_pixbuf_composite (gdk-pixbuf-scale.c:142) >==19630== by 0x4414231: gtk_drag_get_cursor (gtkdnd.c:759) >==19630== by 0x441737A: gtk_drag_begin_internal (gtkdnd.c:2330) >==19630== by 0x8383EC7: TabGtk::StartDragging(gfx::Point) (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8383FD4: TabGtk::DidProcessEvent(_GdkEvent*) (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x85BD1C4: base::MessagePumpForUI::DidProcessEvent(_GdkEvent*) (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x459484A: gdk_event_dispatch (gdkevents-x11.c:2367) >==19630== by 0x475E9FE: g_main_context_dispatch (gmain.c:1960) >==19630== by 0x47622EA: g_main_context_iterate (gmain.c:2591) >==20636== >==20636== Jump to the invalid address stated on the next line >==20636== at 0xEC950EB5: ??? >==20636== by 0x739ECFE: ??? >==20636== by 0x73AE560: ??? >==20636== by 0x73B91DB: ??? >==20636== by 0x73AC918: ??? >==20636== by 0x73A1741: ??? >==20636== by 0x88147AA: v8::internal::Invoke(bool, v8::internal::Handle<v8::internal::JSFunction>, v8::internal::Handle<v8::internal::Object>, int, >v8::internal::Object***, bool*) (in /opt/chromium.org/chrome-linux/chrome) >==20636== by 0x87F6919: v8::Object::Get(v8::Handle<v8::Value>) (in /opt/chromium.org/chrome-linux/chrome) >==20636== by 0x8537DF3: EventBindings::CallFunction(std::string const&, int, v8::Handle<v8::Value>*, RenderView*) (in >/opt/chromium.org/chrome-linux/chrome) >==20636== by 0x8541A9F: RendererExtensionBindings::Invoke(std::string const&, ListValue const&, RenderView*) (in /opt/chromium.org/chrome-linux/chrome) >==20636== by 0x84E680D: RenderThread::OnExtensionMessageInvoke(std::string const&, ListValue const&) (in /opt/chromium.org/chrome-linux/chrome) >==20636== by 0x84E84A5: RenderThread::OnControlMessageReceived(IPC::Message const&) (in /opt/chromium.org/chrome-linux/chrome) >==20636== Address 0xec950eb5 is not stack'd, malloc'd or (recently) free'd >==20636== >==20636== Process terminating with default action of signal 11 (SIGSEGV) >==20636== Bad permissions for mapped region at address 0xEC950EB5 >==20636== at 0xEC950EB5: ??? >==20636== by 0x739ECFE: ??? >==20636== by 0x73AE560: ??? >==20636== by 0x73B91DB: ??? >==20636== by 0x73AC918: ??? >==20636== by 0x73A1741: ??? >==20636== by 0x88147AA: v8::internal::Invoke(bool, v8::internal::Handle<v8::internal::JSFunction>, v8::internal::Handle<v8::internal::Object>, int, >v8::internal::Object***, bool*) (in /opt/chromium.org/chrome-linux/chrome) >==20636== by 0x87F6919: v8::Object::Get(v8::Handle<v8::Value>) (in /opt/chromium.org/chrome-linux/chrome) >==20636== by 0x8537DF3: EventBindings::CallFunction(std::string const&, int, v8::Handle<v8::Value>*, RenderView*) (in >/opt/chromium.org/chrome-linux/chrome) >==20636== by 0x8541A9F: RendererExtensionBindings::Invoke(std::string const&, ListValue const&, RenderView*) (in /opt/chromium.org/chrome-linux/chrome) >==20636== by 0x84E680D: RenderThread::OnExtensionMessageInvoke(std::string const&, ListValue const&) (in /opt/chromium.org/chrome-linux/chrome) >==20636== by 0x84E84A5: RenderThread::OnControlMessageReceived(IPC::Message const&) (in /opt/chromium.org/chrome-linux/chrome) >==20636== >==20636== ERROR SUMMARY: 16 errors from 9 contexts (suppressed: 0 from 0) >==20636== malloc/free: in use at exit: 1,041,656 bytes in 6,634 blocks. >==20636== malloc/free: 14,789 allocs, 8,155 frees, 5,014,222 bytes allocated. >==20636== For counts of detected errors, rerun with: -v >==20636== Use --track-origins=yes to see where uninitialised values come from >==20636== searching for pointers to 6,634 not-freed blocks. >==20636== checked 12,401,412 bytes. >==20636== >==20636== LEAK SUMMARY: >==20636== definitely lost: 0 bytes in 0 blocks. >==20636== possibly lost: 208,451 bytes in 757 blocks. >==20636== still reachable: 833,205 bytes in 5,877 blocks. >==20636== suppressed: 0 bytes in 0 blocks. >==20636== Rerun with --leak-check=full to see details of leaked memory. >==21477== >==21477== Invalid read of size 1 >==21477== at 0x88451AB: v8::internal::String::ReadBlock(v8::internal::String*, v8::internal::String::ReadBlockBuffer*, unsigned int*, unsigned int) (in >/opt/chromium.org/chrome-linux/chrome) >==21477== Address 0x14 is not stack'd, malloc'd or (recently) free'd >==21477== >==21477== Process terminating with default action of signal 11 (SIGSEGV) >==21477== Access not within mapped region at address 0x14 >==21477== at 0x88451AB: v8::internal::String::ReadBlock(v8::internal::String*, v8::internal::String::ReadBlockBuffer*, unsigned int*, unsigned int) (in >/opt/chromium.org/chrome-linux/chrome) >==21477== If you believe this happened as a result of a stack overflow in your >==21477== program's main thread (unlikely but possible), you can try to increase >==21477== the size of the main thread stack using the --main-stacksize= flag. >==21477== The main thread stack size used in this run was 8388608. >==21477== >==21477== ERROR SUMMARY: 16 errors from 9 contexts (suppressed: 0 from 0) >==21477== malloc/free: in use at exit: 1,818,665 bytes in 8,508 blocks. >==21477== malloc/free: 25,609 allocs, 17,101 frees, 8,827,961 bytes allocated. >==21477== For counts of detected errors, rerun with: -v >==21477== Use --track-origins=yes to see where uninitialised values come from >==21477== searching for pointers to 8,508 not-freed blocks. >==21477== checked 13,952,852 bytes. >==21477== >==21477== LEAK SUMMARY: >==21477== definitely lost: 430 bytes in 9 blocks. >==21477== possibly lost: 134,386 bytes in 747 blocks. >==21477== still reachable: 1,683,849 bytes in 7,752 blocks. >==21477== suppressed: 0 bytes in 0 blocks. >==21477== Rerun with --leak-check=full to see details of leaked memory. >==19630== >==19630== Thread 18: >==19630== Syscall param write(buf) points to uninitialised byte(s) >==19630== at 0x499BF9B: (within /lib/libpthread-2.10.1.so) >==19630== by 0x897D175: pager_write_pagelist (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x897F02B: sqlite3PagerCommitPhaseOne (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89B5299: sqlite3BtreeCommitPhaseOne (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89934AE: sqlite3VdbeHalt (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89C22B0: sqlite3VdbeExec (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8991911: sqlite3_step (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x85E42BA: sql::Statement::Run() (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x85E32BE: sql::Connection::CommitTransaction() (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x813988F: history::HistoryBackend::Commit() (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x859A31C: MessageLoop::RunTask(Task*) (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x859A3ED: MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const&) (in /opt/chromium.org/chrome-linux/chrome) >==19630== Address 0x10f04a3e is 134 bytes inside a block of size 4,240 alloc'd >==19630== at 0x40264EF: malloc (vg_replace_malloc.c:207) >==19630== by 0x85A7924: malloc (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89799DC: sqlite3MemMalloc (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8979061: mallocWithAlarm (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8979216: sqlite3Malloc (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8980AE7: pcache1Alloc (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8980D1E: pcache1Fetch (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8980295: sqlite3PcacheFetch (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x897E681: sqlite3PagerAcquire2 (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x897E985: sqlite3PagerAcquire (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89AE8FF: btreeGetPage (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89B1BBC: allocateBtreePage (in /opt/chromium.org/chrome-linux/chrome) >==19630== >==19630== Syscall param write(buf) points to uninitialised byte(s) >==19630== at 0x499BF9B: (within /lib/libpthread-2.10.1.so) >==19630== by 0x897D175: pager_write_pagelist (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x897D76F: pagerStress (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x898032E: sqlite3PcacheFetch (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x897E681: sqlite3PagerAcquire2 (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x897E985: sqlite3PagerAcquire (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89AEC22: accessPayload (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8994F3B: sqlite3VdbeMemFromBtree (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89C2225: sqlite3VdbeExec (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8991911: sqlite3_step (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x899DFAD: leavesReaderStep (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89A099C: segdirNextIndex (in /opt/chromium.org/chrome-linux/chrome) >==19630== Address 0xe4a5aa0 is 136 bytes inside a block of size 1,168 alloc'd >==19630== at 0x40264EF: malloc (vg_replace_malloc.c:207) >==19630== by 0x85A7924: malloc (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89799DC: sqlite3MemMalloc (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8979061: mallocWithAlarm (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8979216: sqlite3Malloc (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8980AE7: pcache1Alloc (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8980D1E: pcache1Fetch (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8980295: sqlite3PcacheFetch (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x897E681: sqlite3PagerAcquire2 (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x897E985: sqlite3PagerAcquire (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89AE8FF: btreeGetPage (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89B1BBC: allocateBtreePage (in /opt/chromium.org/chrome-linux/chrome) >==19630== >==19630== Syscall param write(buf) points to uninitialised byte(s) >==19630== at 0x499BF9B: (within /lib/libpthread-2.10.1.so) >==19630== by 0x897D6DB: pager_write (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x897EC8A: sqlite3PagerWrite (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89B10E2: freePage2 (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89B13F5: clearCell (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89B4996: sqlite3BtreeDelete (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89BF994: sqlite3VdbeExec (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8991911: sqlite3_step (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x899CD06: sql_single_step (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x899F799: segdir_delete (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89A0A33: segdirNextIndex (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89A0A8D: flushPendingTerms (in /opt/chromium.org/chrome-linux/chrome) >==19630== Address 0xdf3bb54 is 1,052 bytes inside a block of size 1,168 alloc'd >==19630== at 0x40264EF: malloc (vg_replace_malloc.c:207) >==19630== by 0x85A7924: malloc (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89799DC: sqlite3MemMalloc (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8979061: mallocWithAlarm (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8979216: sqlite3Malloc (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8980AE7: pcache1Alloc (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8980D1E: pcache1Fetch (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8980295: sqlite3PcacheFetch (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x897E681: sqlite3PagerAcquire2 (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x897E985: sqlite3PagerAcquire (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89AE8FF: btreeGetPage (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89B1BBC: allocateBtreePage (in /opt/chromium.org/chrome-linux/chrome) >==22886== >==22886== ERROR SUMMARY: 15 errors from 8 contexts (suppressed: 0 from 0) >==22886== malloc/free: in use at exit: 491,853 bytes in 4,748 blocks. >==22886== malloc/free: 11,096 allocs, 6,348 frees, 1,451,158 bytes allocated. >==22886== For counts of detected errors, rerun with: -v >==22886== Use --track-origins=yes to see where uninitialised values come from >==22886== searching for pointers to 4,748 not-freed blocks. >==22886== checked 10,350,464 bytes. >==22886== >==22886== LEAK SUMMARY: >==22886== definitely lost: 1,626 bytes in 18 blocks. >==22886== possibly lost: 132,802 bytes in 707 blocks. >==22886== still reachable: 357,425 bytes in 4,023 blocks. >==22886== suppressed: 0 bytes in 0 blocks. >==22886== Rerun with --leak-check=full to see details of leaked memory. >==22778== >==22778== Invalid read of size 1 >==22778== at 0x88451AB: v8::internal::String::ReadBlock(v8::internal::String*, v8::internal::String::ReadBlockBuffer*, unsigned int*, unsigned int) (in >/opt/chromium.org/chrome-linux/chrome) >==22778== Address 0x14 is not stack'd, malloc'd or (recently) free'd >==22778== >==22778== Process terminating with default action of signal 11 (SIGSEGV) >==22778== Access not within mapped region at address 0x14 >==22778== at 0x88451AB: v8::internal::String::ReadBlock(v8::internal::String*, v8::internal::String::ReadBlockBuffer*, unsigned int*, unsigned int) (in >/opt/chromium.org/chrome-linux/chrome) >==22778== If you believe this happened as a result of a stack overflow in your >==22778== program's main thread (unlikely but possible), you can try to increase >==22778== the size of the main thread stack using the --main-stacksize= flag. >==22778== The main thread stack size used in this run was 8388608. >==22778== >==22778== ERROR SUMMARY: 16 errors from 9 contexts (suppressed: 0 from 0) >==22778== malloc/free: in use at exit: 1,820,744 bytes in 8,526 blocks. >==22778== malloc/free: 24,705 allocs, 16,179 frees, 8,827,997 bytes allocated. >==22778== For counts of detected errors, rerun with: -v >==22778== Use --track-origins=yes to see where uninitialised values come from >==22778== searching for pointers to 8,526 not-freed blocks. >==22778== checked 13,957,064 bytes. >==22778== >==22778== LEAK SUMMARY: >==22778== definitely lost: 0 bytes in 0 blocks. >==22778== possibly lost: 134,649 bytes in 754 blocks. >==22778== still reachable: 1,686,095 bytes in 7,772 blocks. >==22778== suppressed: 0 bytes in 0 blocks. >==22778== Rerun with --leak-check=full to see details of leaked memory. >==22941== >==22941== Invalid read of size 1 >==22941== at 0x7ED243F: ??? >==22941== by 0x7534CFE: ??? >==22941== by 0x7E9FBDB: ??? >==22941== by 0x7542918: ??? >==22941== by 0x7537741: ??? >==22941== by 0x88147AA: v8::internal::Invoke(bool, v8::internal::Handle<v8::internal::JSFunction>, v8::internal::Handle<v8::internal::Object>, int, >v8::internal::Object***, bool*) (in /opt/chromium.org/chrome-linux/chrome) >==22941== by 0x90C3305: webkit_glue::WebKitClientImpl::memoryUsageMB() (in /opt/chromium.org/chrome-linux/chrome) >==22941== by 0x8F: ??? >==22941== Address 0x771458e is 65,502 bytes inside a block of size 157,764 free'd >==22941== at 0x40252EB: free (vg_replace_malloc.c:323) >==22941== by 0x6230B5F: (within /usr/lib/opengl/nvidia/lib/libnvidia-tls.so.190.53) >==22941== by 0x4A2BFB8: FcFontSort (fcmatch.c:835) >==22941== by 0x894BA6C: FontConfigDirect::Match(std::string*, unsigned int*, bool, unsigned int, std::string const&, bool*, bool*) (in >/opt/chromium.org/chrome-linux/chrome) >==22941== by 0x894AE20: SkFontHost::CreateTypeface(SkTypeface const*, char const*, SkTypeface::Style) (in /opt/chromium.org/chrome-linux/chrome) >==22941== by 0x8942873: SkTypeface::CreateFromName(char const*, SkTypeface::Style) (in /opt/chromium.org/chrome-linux/chrome) >==22941== by 0x8F0E075: WebCore::FontCache::createFontPlatformData(WebCore::FontDescription const&, WebCore::AtomicString const&) (in >/opt/chromium.org/chrome-linux/chrome) >==22941== by 0x8CA3DD7: WebCore::FontCache::getCachedFontPlatformData(WebCore::FontDescription const&, WebCore::AtomicString const&, bool) (in >/opt/chromium.org/chrome-linux/chrome) >==22941== by 0x8F0E485: WebCore::FontCache::getFontDataForCharacters(WebCore::Font const&, unsigned short const*, int) (in >/opt/chromium.org/chrome-linux/chrome) >==22941== by 0x8CA5CBA: WebCore::Font::glyphDataForCharacter(int, bool, bool) const (in /opt/chromium.org/chrome-linux/chrome) >==22941== by 0x8CAFA3B: WebCore::WidthIterator::advance(int, WebCore::GlyphBuffer*) (in /opt/chromium.org/chrome-linux/chrome) >==22941== by 0x8CA52A1: WebCore::Font::floatWidthForSimpleText(WebCore::TextRun const&, WebCore::GlyphBuffer*, WTF::HashSet<WebCore::SimpleFontData >const*, WTF::PtrHash<WebCore::SimpleFontData const*>, WTF::HashTraits<WebCore::SimpleFontData const*> >*) const (in /opt/chromium.org/chrome-linux/chrome) >==22941== >==22941== Invalid read of size 1 >==22941== at 0x8D0A54F: WebCore::RenderBlock::determineStartPosition(bool&, bool&, bool&, WebCore::BidiResolver<WebCore::InlineIterator, >WebCore::BidiRun>&, WTF::Vector<WebCore::RenderBlock::FloatWithRect, 0u>&, unsigned int&) (in /opt/chromium.org/chrome-linux/chrome) >==22941== by 0x534CFFBD: ??? >==22941== Address 0x3 is not stack'd, malloc'd or (recently) free'd >==22941== >==22941== Process terminating with default action of signal 11 (SIGSEGV) >==22941== Access not within mapped region at address 0x3 >==22941== at 0x8D0A54F: WebCore::RenderBlock::determineStartPosition(bool&, bool&, bool&, WebCore::BidiResolver<WebCore::InlineIterator, >WebCore::BidiRun>&, WTF::Vector<WebCore::RenderBlock::FloatWithRect, 0u>&, unsigned int&) (in /opt/chromium.org/chrome-linux/chrome) >==22941== by 0x534CFFBD: ??? >==22941== If you believe this happened as a result of a stack overflow in your >==22941== program's main thread (unlikely but possible), you can try to increase >==22941== the size of the main thread stack using the --main-stacksize= flag. >==22941== The main thread stack size used in this run was 8388608. >==22941== >==22941== ERROR SUMMARY: 18 errors from 10 contexts (suppressed: 0 from 0) >==22941== malloc/free: in use at exit: 4,463,608 bytes in 18,356 blocks. >==22941== malloc/free: 65,228 allocs, 46,872 frees, 28,841,791 bytes allocated. >==22941== For counts of detected errors, rerun with: -v >==22941== Use --track-origins=yes to see where uninitialised values come from >==22941== searching for pointers to 18,356 not-freed blocks. >==22941== checked 19,640,028 bytes. >==22941== >==22941== LEAK SUMMARY: >==22941== definitely lost: 0 bytes in 0 blocks. >==22941== possibly lost: 152,561 bytes in 788 blocks. >==22941== still reachable: 4,311,047 bytes in 17,568 blocks. >==22941== suppressed: 0 bytes in 0 blocks. >==22941== Rerun with --leak-check=full to see details of leaked memory. >==19630== >==19630== Thread 9: >==19630== Syscall param write(buf) points to uninitialised byte(s) >==19630== at 0x499BF9B: (within /lib/libpthread-2.10.1.so) >==19630== by 0x897C32A: subjournalPage (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x897D610: pager_write (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x897EC8A: sqlite3PagerWrite (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89B10E2: freePage2 (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89B1450: freePage (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89B1554: clearDatabasePage (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89B1502: clearDatabasePage (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89B15A1: clearDatabasePage (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89B15FE: sqlite3BtreeClearTable (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89B168F: sqlite3BtreeDropTable (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89C1863: sqlite3VdbeExec (in /opt/chromium.org/chrome-linux/chrome) >==19630== Address 0xdec68c0 is 232 bytes inside a block of size 1,168 alloc'd >==19630== at 0x40264EF: malloc (vg_replace_malloc.c:207) >==19630== by 0x85A7924: malloc (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89799DC: sqlite3MemMalloc (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8979061: mallocWithAlarm (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8979216: sqlite3Malloc (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8980AE7: pcache1Alloc (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8980D1E: pcache1Fetch (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x8980295: sqlite3PcacheFetch (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x897E681: sqlite3PagerAcquire2 (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x897E985: sqlite3PagerAcquire (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89AE8FF: btreeGetPage (in /opt/chromium.org/chrome-linux/chrome) >==19630== by 0x89B1BBC: allocateBtreePage (in /opt/chromium.org/chrome-linux/chrome) >
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=221919">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 303080
: 221919
