SegFaults on ikigaitribe.medium.com

Nigaikaze · Unread post by **Nigaikaze** » 2023-01-25, 04:40

Operating system: Linux - KDE Neon (which is basically just KDE 5.26.5 sitting on Ubuntu 22.04)
Browser version: 32.0.0
32-bit or 64-bit browser?: 64-bit - this is the mainline GTK2 tarball from linux.palemoon.org
Problem URL: https://ikigaitribe.medium.com/ and https://ikigaitribe.medium.com/ikigai-k ... 90eaf52293
Browser theme (if not default): default
Installed add-ons: none, clean profile
Installed plugins: (about:plugins): none, clean profile

If possible, please include the output of help->troubleshooting information (as text):

I can't remember the last time PM flat-out crashed on me. I'm seeing segmentation faults when I go to https://ikigaitribe.medium.com/ikigai-k ... 90eaf52293, and even the top level URL of https://ikigaitribe.medium.com. Sometimes it's right away, sometimes it takes a moment or two, sometimes I have enough time to navigate to a click or two before it faults and crashes. This is on a clean, unmodified profile with no extensions.

I'm not used to using gdb, but here are two segfaults that it caught:

#1:

Code: Select all

(pale moon:12098): Gtk-WARNING **: 22:03:56.153: Unable to locate theme engine in module_path: "hcengine",
[New Thread 0x7fffe49ff640 (LWP 12120)]
[Thread 0x7fffe49ff640 (LWP 12120) exited]
[New Thread 0x7fffe49ff640 (LWP 12121)]
[New Thread 0x7fffe3fff640 (LWP 12122)]
[Thread 0x7fffe49ff640 (LWP 12121) exited]
[Thread 0x7fffe3fff640 (LWP 12122) exited]
[New Thread 0x7fffe3fff640 (LWP 12123)]
[New Thread 0x7fffe49ff640 (LWP 12124)]
[Thread 0x7fffe3fff640 (LWP 12123) exited]
[Thread 0x7fffe49ff640 (LWP 12124) exited]
[New Thread 0x7fffe49ff640 (LWP 12125)]
[New Thread 0x7fffe3fff640 (LWP 12126)]
[Thread 0x7fffe49ff640 (LWP 12125) exited]
[Thread 0x7fffe3fff640 (LWP 12126) exited]
[New Thread 0x7fffe6636640 (LWP 12127)]
[New Thread 0x7fffe3fff640 (LWP 12128)]
[New Thread 0x7fffe49ff640 (LWP 12129)]
[New Thread 0x7fffe1cff640 (LWP 12130)]
[New Thread 0x7fffe12ff640 (LWP 12131)]
[New Thread 0x7fffe04ff640 (LWP 12132)]
[New Thread 0x7fffdfcfe640 (LWP 12133)]
[New Thread 0x7fffdf0ff640 (LWP 12134)]
[New Thread 0x7fffde6ff640 (LWP 12135)]
[Thread 0x7fffe49ff640 (LWP 12129) exited]
[Thread 0x7fffe04ff640 (LWP 12132) exited]
[Thread 0x7fffdfcfe640 (LWP 12133) exited]
[New Thread 0x7fffde4fe640 (LWP 12136)]
[New Thread 0x7fffddcfd640 (LWP 12137)]
[New Thread 0x7fffdd4fc640 (LWP 12138)]
[New Thread 0x7fffdccfb640 (LWP 12139)]
[New Thread 0x7fffdc4fa640 (LWP 12140)]
[New Thread 0x7fffdbcf9640 (LWP 12141)]
[New Thread 0x7fffdb4f8640 (LWP 12142)]
[New Thread 0x7fffdacf7640 (LWP 12143)]
[New Thread 0x7fffda4f6640 (LWP 12144)]
[New Thread 0x7fffd9cf5640 (LWP 12145)]
[New Thread 0x7fffdfcfe640 (LWP 12146)]
[Thread 0x7fffdf0ff640 (LWP 12134) exited]
[New Thread 0x7fffdf0ff640 (LWP 12147)]
[New Thread 0x7fffe04ff640 (LWP 12148)]
[New Thread 0x7fffe49ff640 (LWP 12149)]
[New Thread 0x7fffd58ff640 (LWP 12150)]
[New Thread 0x7fffd4eff640 (LWP 12152)]
[New Thread 0x7fffd44ff640 (LWP 12153)]
[New Thread 0x7fffd3cfe640 (LWP 12154)]
[New Thread 0x7fffd34fd640 (LWP 12155)]
[New Thread 0x7fffd2cfc640 (LWP 12156)]
[New Thread 0x7fffd20ff640 (LWP 12157)]
[New Thread 0x7fffd10ff640 (LWP 12158)]
[New Thread 0x7fffd08fe640 (LWP 12159)]
[New Thread 0x7fffd00fd640 (LWP 12160)]
[New Thread 0x7fffcf8fc640 (LWP 12161)]
[New Thread 0x7fffcf0fb640 (LWP 12162)]
[Thread 0x7fffcf8fc640 (LWP 12161) exited]
[Thread 0x7fffdfcfe640 (LWP 12146) exited]
[New Thread 0x7fffdfcfe640 (LWP 12163)]
[New Thread 0x7fffde86b640 (LWP 12164)]
[New Thread 0x7fffcf8fc640 (LWP 12165)]
[New Thread 0x7fffcddff640 (LWP 12166)]
[New Thread 0x7fffcceff640 (LWP 12167)]
[New Thread 0x7fffcbdff640 (LWP 12168)]
[New Thread 0x7fffcb3ff640 (LWP 12169)]
[New Thread 0x7fffcaeff640 (LWP 12170)]
[New Thread 0x7fffca6fe640 (LWP 12171)]
[Thread 0x7fffca6fe640 (LWP 12171) exited]
[Thread 0x7fffd00fd640 (LWP 12160) exited]
[Thread 0x7fffe04ff640 (LWP 12148) exited]
[New Thread 0x7fffe04ff640 (LWP 12173)]
[New Thread 0x7fffd00fd640 (LWP 12174)]
[New Thread 0x7fffca6fe640 (LWP 12175)]

Thread 1 "palemoon" received signal SIGSEGV, Segmentation fault.
0x00007ffff5e3ae06 in ?? () from /opt/palemoon/libxul.so
(gdb)

#2:

Code: Select all

(pale moon:12568): Gtk-WARNING **: 22:07:48.359: Unable to locate theme engine in module_path: "hcengine",
[New Thread 0x7fffe49ff640 (LWP 12590)]
[Thread 0x7fffe49ff640 (LWP 12590) exited]
[New Thread 0x7fffe49ff640 (LWP 12591)]
[New Thread 0x7fffe3fff640 (LWP 12592)]
[Thread 0x7fffe49ff640 (LWP 12591) exited]
[Thread 0x7fffe3fff640 (LWP 12592) exited]
[New Thread 0x7fffe3fff640 (LWP 12593)]
[New Thread 0x7fffe49ff640 (LWP 12594)]
[Thread 0x7fffe3fff640 (LWP 12593) exited]
[Thread 0x7fffe49ff640 (LWP 12594) exited]
[New Thread 0x7fffe49ff640 (LWP 12595)]
[New Thread 0x7fffe3fff640 (LWP 12596)]
[Thread 0x7fffe49ff640 (LWP 12595) exited]
[Thread 0x7fffe3fff640 (LWP 12596) exited]
[New Thread 0x7fffe6636640 (LWP 12597)]
[New Thread 0x7fffe3fff640 (LWP 12598)]
[New Thread 0x7fffe49ff640 (LWP 12599)]
[New Thread 0x7fffe1cff640 (LWP 12600)]
[New Thread 0x7fffe12ff640 (LWP 12601)]
[New Thread 0x7fffe04ff640 (LWP 12602)]
[New Thread 0x7fffdfcfe640 (LWP 12603)]
[New Thread 0x7fffdf0ff640 (LWP 12604)]
[New Thread 0x7fffde8fe640 (LWP 12605)]
[Thread 0x7fffe49ff640 (LWP 12599) exited]
[Thread 0x7fffe04ff640 (LWP 12602) exited]
[Thread 0x7fffdfcfe640 (LWP 12603) exited]
[New Thread 0x7fffde4ff640 (LWP 12606)]
[New Thread 0x7fffddcfe640 (LWP 12607)]
[New Thread 0x7fffdd4fd640 (LWP 12608)]
[New Thread 0x7fffdccfc640 (LWP 12609)]
[New Thread 0x7fffdc4fb640 (LWP 12610)]
[New Thread 0x7fffdbcfa640 (LWP 12611)]
[New Thread 0x7fffdb4f9640 (LWP 12612)]
[New Thread 0x7fffdacf8640 (LWP 12613)]
[New Thread 0x7fffda4f7640 (LWP 12614)]
[New Thread 0x7fffd9cf6640 (LWP 12615)]
[New Thread 0x7fffdfcfe640 (LWP 12616)]
[New Thread 0x7fffe04ff640 (LWP 12617)]
[New Thread 0x7fffe49ff640 (LWP 12618)]
[New Thread 0x7fffd58ff640 (LWP 12619)]
[New Thread 0x7fffd50fe640 (LWP 12620)]
[New Thread 0x7fffd46ff640 (LWP 12621)]
[Thread 0x7fffd46ff640 (LWP 12621) exited]
[Thread 0x7fffdf0ff640 (LWP 12604) exited]
[New Thread 0x7fffdf0ff640 (LWP 12623)]
[New Thread 0x7fffd46ff640 (LWP 12624)]
[New Thread 0x7fffd3cff640 (LWP 12625)]
[New Thread 0x7fffd34fe640 (LWP 12626)]
[New Thread 0x7fffd2cfd640 (LWP 12627)]
[New Thread 0x7fffd24fc640 (LWP 12628)]
[New Thread 0x7fffd17ff640 (LWP 12629)]
[New Thread 0x7fffd08ff640 (LWP 12630)]
[New Thread 0x7fffcfeff640 (LWP 12631)]
[New Thread 0x7fffde66a640 (LWP 12632)]
[New Thread 0x7fffcf0ff640 (LWP 12633)]
[New Thread 0x7fffce3ff640 (LWP 12634)]
[New Thread 0x7fffcd9ff640 (LWP 12635)]
[New Thread 0x7fffcceff640 (LWP 12636)]
[New Thread 0x7fffcbeff640 (LWP 12637)]
[New Thread 0x7fffcb6fe640 (LWP 12638)]
[New Thread 0x7fffcb1ff640 (LWP 12639)]
[New Thread 0x7fffca9fe640 (LWP 12640)]
[Thread 0x7fffca9fe640 (LWP 12640) exited]
[Thread 0x7fffd50fe640 (LWP 12620) exited]
[New Thread 0x7fffd50fe640 (LWP 12641)]
[New Thread 0x7fffca9fe640 (LWP 12642)]
[New Thread 0x7fffb9eff640 (LWP 12643)]
[New Thread 0x7fffaffff640 (LWP 12644)]
[New Thread 0x7fffaf7fe640 (LWP 12645)]
[Thread 0x7fffaffff640 (LWP 12644) exited]
[Thread 0x7fffcb1ff640 (LWP 12639) exited]
[New Thread 0x7fffcb1ff640 (LWP 12646)]
[New Thread 0x7fffaffff640 (LWP 12647)]
[New Thread 0x7fffae2ff640 (LWP 12648)]
[Thread 0x7fffae2ff640 (LWP 12648) exited]
[Thread 0x7fffaffff640 (LWP 12647) exited]
[Thread 0x7fffe04ff640 (LWP 12617) exited]
[Thread 0x7fffce3ff640 (LWP 12634) exited]
[Thread 0x7fffcbeff640 (LWP 12637) exited]
[New Thread 0x7fffcbeff640 (LWP 12649)]

Thread 1 "palemoon" received signal SIGSEGV, Segmentation fault.
0x00007ffff61c4040 in ?? () from /opt/palemoon/libxul.so
(gdb)

Whatever other information you need me to provide, just let me know.

Unread post by **moonbat** » 2023-01-25, 04:51

Just a nitpick for readability's sake - can you edit your post and put the extra debugging/troubleshooting info in code tags instead of show/hide tags?
Code tags are via the 5th button in the toolbar with </> on it.

Nigaikaze · Unread post by **Nigaikaze** » 2023-01-25, 04:56

moonbat wrote: ↑
2023-01-25, 04:51
can you edit your post and put the extra debugging/troubleshooting info in code tags

Done. Sorry 'bout that.

Unread post by **moonbat** » 2023-01-25, 05:20

Can't figure much here besides the crash being in libxul and for some reason it's looking for the theme engine. Over to Moonchild.

Nigaikaze · Unread post by **Nigaikaze** » 2023-01-25, 05:21

Well, whaddaya know ... also got it to crash on those URLs on dbsoft's PM 32.0.0 for Mac OS. This is on a fresh new install (e.g., clean profile) on a 2018 Mac Mini running Ventura 13.2. I don't have a Windows box handy so I can't test it on Windows.

The details from the Apple problem report where "palemoon quit unexpectedly" are in the attached .txt file (too many characters to include in this post).

Nigaikaze · Unread post by **Nigaikaze** » 2023-01-25, 05:24

moonbat wrote: ↑
2023-01-25, 05:20
for some reason it's looking for the theme engine.

Yeah, I'm pretty sure that's not related to this specific crash. I've had that warning pop up every single time I've run Pale Moon from a terminal on every single one of my Linux boxes. And that dates back a long time, across many prior PM versions that all behaved themselves amazingly well.

gepus · Unread post by **gepus** » 2023-01-25, 08:05

I can reproduce the crash (Win7/Pale Moon 32) for ikigaitribe.medium.com if I disable cookies.

Workarounds:
- No crash with cookies enabled.
or
- No crash with JavaScript disabled.

BTW,

Code: Select all

Empty string passed to getElementById(). 
This site appears to use a scroll-linked positioning effect. This may not work well with asynchronous panning;

Unread post by **vannilla** » 2023-01-25, 08:35

When you can reproduce the crash with gdb, can you also run the bt command and provide that output too?
Without a debug build it won't be that useful, but at least we can get a general idea on where the segfault happens.

dbsoft · Unread post by **dbsoft** » 2023-01-25, 09:43

I compiled with debug and loaded that page, here is the debugger info I got, haven't looked into it in depth yet:

Code: Select all

Process 74303 stopped
* thread #1, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0x6bd1bc900)
    frame #0: 0x000000010c436c8e XUL`js::CreateRegExpMatchResult(JSContext*, js::RegExpShared&, JS::Handle<JSString*>, js::MatchPairs const&, JS::MutableHandle<JS::Value>) [inlined] JS::Rooted<JS::Value>::set(this=<unavailable>, value=<unavailable>) at RootingAPI.h:812:13 [opt]
   809 	     * interchangeably with a MutableHandleValue.
   810 	     */
   811 	    void set(const T& value) {
-> 812 	        ptr = value;
   813 	    }
   814 	    void set(T&& value) {
   815 	        ptr = mozilla::Move(value);
Target 0: (palemoon) stopped.

and the call stack:

Code: Select all

(lldb) bt
* thread #1, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0x6bd1bc900)
  * frame #0: 0x000000010c436c8e XUL`js::CreateRegExpMatchResult(JSContext*, js::RegExpShared&, JS::Handle<JSString*>, js::MatchPairs const&, JS::MutableHandle<JS::Value>) [inlined] JS::Rooted<JS::Value>::set(this=<unavailable>, value=<unavailable>) at RootingAPI.h:812:13 [opt]
    frame #1: 0x000000010c436c8e XUL`js::CreateRegExpMatchResult(JSContext*, js::RegExpShared&, JS::Handle<JSString*>, js::MatchPairs const&, JS::MutableHandle<JS::Value>) [inlined] JS::Rooted<JS::Value>::operator=(this=<unavailable>, p=<unavailable>) at RootingAPI.h:819:5 [opt]
    frame #2: 0x000000010c436c8e XUL`js::CreateRegExpMatchResult(cx=0x00000001023c3000, re=0x00006000071cc2d0, input=JS::HandleString @ 0x00007ff7bfef8bf0, matches=0x00007ff7bfef8d58, rval=JS::MutableHandleValue @ 0x00007ff7bfef8be8) at RegExp.cpp:115:17 [opt]
    frame #3: 0x000000010c43ae35 XUL`RegExpMatcherImpl(cx=0x00000001023c3000, regexp=JS::HandleObject @ r13, string=JS::HandleString @ r15, lastIndex=<unavailable>, staticsUpdate=<unavailable>, rval=JS::MutableHandleValue @ r14) at RegExp.cpp:1076:12 [opt]

Kris_88 · Unread post by **Kris_88** » 2023-01-25, 09:46

I can confirm.
Windows 10, 64 bit.
Pale Moon 32.0.0, 64 bit, portable

Faulting application name: Palemoon.exe, version: 6.0.0.8423, time stamp: 0x63ce7e8d
Faulting module name: xul.dll, version: 6.0.0.8423, time stamp: 0x63ce8030
Exception code: 0xc0000005
Fault offset: 0x0000000002243e35
Faulting process id: 0x1308

Unread post by **Moonchild** » 2023-01-25, 12:18

It would be something on medium.com, of course
Filed Issue #2093 (UXP) for tracking this.

Goodydino · Unread post by **Goodydino** » 2023-01-27, 02:13

SeaMonkey does not crash with those pages, it simply closes them and you are left with a blank tab.

Unread post by **Moonchild** » 2023-01-27, 03:18

Goodydino wrote: ↑
2023-01-27, 02:13
SeaMonkey does not crash with those pages, it simply closes them and you are left with a blank tab.

Not sure why you think SeaMonkey's JS engine is the same as ours. It is not.

Pale Moon forum

SegFaults on ikigaitribe.medium.com

SegFaults on ikigaitribe.medium.com

Re: SegFaults on ikigaitribe.medium.com

Re: SegFaults on ikigaitribe.medium.com

Re: SegFaults on ikigaitribe.medium.com

Re: SegFaults on ikigaitribe.medium.com

Re: SegFaults on ikigaitribe.medium.com

Re: SegFaults on ikigaitribe.medium.com

Re: SegFaults on ikigaitribe.medium.com

Re: SegFaults on ikigaitribe.medium.com

Re: SegFaults on ikigaitribe.medium.com

Re: SegFaults on ikigaitribe.medium.com

Re: SegFaults on ikigaitribe.medium.com

Re: SegFaults on ikigaitribe.medium.com