[Interest] Crash in qtscript

[Narayanarao Rao]

Our environment is Qt 4.8.0, MIPS 32 bit Qt/QML application with OpenGL ES
2.0 graphics. We randomly see a crash in qml with the following stack trace:

stack_trace = Caught SIGSEGV (11)Fault at memory location 0x0 due to
address not mapped to object (1).
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](+182378)[2c4ce378]:
_ZN5QTWTF8fastFreeEPv
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](+129eb8)[2c475eb8]:
_ZN5QTJSC8JSStringD1Ev
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](+cf5d8)[2c41b5d8]:
_ZN5QTJSC4Heap8allocateEj
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](+92924)[2c3de924]:
_ZN5QTJSC11Interpreter14privateExecuteENS0_13ExecutionFlagEPNS_12RegisterFileEPNS_9ExecStateEPNS_7JSValueE
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](+9eb90)[2c3eab90]:
_ZN5QTJSC11Interpreter7executeEPNS_18FunctionExecutableEPNS_9ExecStateEPNS_10JSFunctionEPNS_8JSObjectERKNS_7ArgListEPNS_14ScopeChainNodeEPNS_7JSValueE
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](+10303c)[2c44f03c]:
_ZN5QTJSC10JSFunction4callEPNS_9ExecStateENS_7JSValueERKNS_7ArgListE
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](+cbfd4)[2c417fd4]:
_ZN5QTJSC4callEPNS_9ExecStateENS_7JSValueENS_8CallTypeERKNS_8CallDataES2_RKNS_7ArgListE
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](_ZN12QScriptValue4callERKS_RK5QListIS_E+410)[2c522cbc]
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+231cc4)[2b9edcc4]:
_ZN30QDeclarativeQtScriptExpression4evalEP7QObjectPb
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+235ad4)[2b9f1ad4]:
_ZN30QDeclarativeQtScriptExpression11scriptValueEP7QObjectPb
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+235e88)[2b9f1e88]:
_ZN29QDeclarativeExpressionPrivate11scriptValueEP7QObjectPb
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+236020)[2b9f2020]:
_ZN29QDeclarativeExpressionPrivate5valueEP7QObjectPb
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+28f5f8)[2ba4b5f8]:
_ZN23QDeclarativeBoundSignal11qt_metacallEN11QMetaObject4CallEiPPv
/apps/uiapps/common/qt/lib/libQtCore.so.4[2d774000](_ZN11QMetaObject8activateEP7QObjectPKS_iPPv+5ec)[2d9b6c58]
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+2121f4)[2b9ce1f4]:
_ZN25QDeclarativeVMEMetaObject8metaCallEN11QMetaObject4CallEiPPv
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+212c88)[2b9cec88]:
_ZN25QDeclarativeVMEMetaObject8metaCallEN11QMetaObject4CallEiPPv
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+211ae4)[2b9cdae4]:
_ZN25QDeclarativeVMEMetaObject8metaCallEN11QMetaObject4CallEiPPv
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+32868c)[2bae468c]:
_ZN29QDeclarativeObjectScriptClass11setPropertyEP7QObjectRKPvRK12QScriptValueP14QScriptContextP23QDeclarativeContextData
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+328948)[2bae4948]:
_ZN29QDeclarativeObjectScriptClass11setPropertyEPN23QScriptDeclarativeClass6ObjectERKPvRK12QScriptValue
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](+20714c)[2c55314c]:
_ZN7QScript25DeclarativeObjectDelegate3putEP13QScriptObjectPN5QTJSC9ExecStateERKNS3_10IdentifierENS3_7JSValueERNS3_15PutPropertySlotE
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](+91d3c)[2c3ddd3c]:
_ZN5QTJSC11Interpreter14privateExecuteENS0_13ExecutionFlagEPNS_12RegisterFileEPNS_9ExecStateEPNS_7JSValueE
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](+9eb90)[2c3eab90]:
_ZN5QTJSC11Interpreter7executeEPNS_18FunctionExecutableEPNS_9ExecStateEPNS_10JSFunctionEPNS_8JSObjectERKNS_7ArgListEPNS_14ScopeChainNodeEPNS_7JSValueE
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](+10303c)[2c44f03c]:
_ZN5QTJSC10JSFunction4callEPNS_9ExecStateENS_7JSValueERKNS_7ArgListE
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](+cbfd4)[2c417fd4]:
_ZN5QTJSC4callEPNS_9ExecStateENS_7JSValueENS_8CallTypeERKNS_8CallDataES2_RKNS_7ArgListE
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](_ZN12QScriptValue4callERKS_RK5QListIS_E+410)[2c522cbc]
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+231cc4)[2b9edcc4]:
_ZN30QDeclarativeQtScriptExpression4evalEP7QObjectPb
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+235ad4)[2b9f1ad4]:
_ZN30QDeclarativeQtScriptExpression11scriptValueEP7QObjectPb
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+235e88)[2b9f1e88]:
_ZN29QDeclarativeExpressionPrivate11scriptValueEP7QObjectPb
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+236020)[2b9f2020]:
_ZN29QDeclarativeExpressionPrivate5valueEP7QObjectPb
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+28f5f8)[2ba4b5f8]:
_ZN23QDeclarativeBoundSignal11qt_metacallEN11QMetaObject4CallEiPPv
/apps/uiapps/common/qt/lib/libQtCore.so.4[2d774000](_ZN11QMetaObject8activateEP7QObjectPKS_iPPv+5ec)[2d9b6c58]
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+2121f4)[2b9ce1f4]:
_ZN25QDeclarativeVMEMetaObject8metaCallEN11QMetaObject4CallEiPPv
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+211ae4)[2b9cdae4]:
_ZN25QDeclarativeVMEMetaObject8metaCallEN11QMetaObject4CallEiPPv
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+328574)[2bae4574]:
_ZN29QDeclarativeObjectScriptClass11setPropertyEP7QObjectRKPvRK12QScriptValueP14QScriptContextP23QDeclarativeContextData
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+32d324)[2bae9324]:
_ZN30QDeclarativeContextScriptClass11setPropertyEPN23QScriptDeclarativeClass6ObjectERKPvRK12QScriptValue
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](+20714c)[2c55314c]:
_ZN7QScript25DeclarativeObjectDelegate3putEP13QScriptObjectPN5QTJSC9ExecStateERKNS3_10IdentifierENS3_7JSValueERNS3_15PutPropertySlotE
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](+91d3c)[2c3ddd3c]:
_ZN5QTJSC11Interpreter14privateExecuteENS0_13ExecutionFlagEPNS_12RegisterFileEPNS_9ExecStateEPNS_7JSValueE
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](+9eb90)[2c3eab90]:
_ZN5QTJSC11Interpreter7executeEPNS_18FunctionExecutableEPNS_9ExecStateEPNS_10JSFunctionEPNS_8JSObjectERKNS_7ArgListEPNS_14ScopeChainNodeEPNS_7JSValueE
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](+10303c)[2c44f03c]:
_ZN5QTJSC10JSFunction4callEPNS_9ExecStateENS_7JSValueERKNS_7ArgListE
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](+cbfd4)[2c417fd4]:
_ZN5QTJSC4callEPNS_9ExecStateENS_7JSValueENS_8CallTypeERKNS_8CallDataES2_RKNS_7ArgListE
/apps/uiapps/common/qt/lib/libQtScript.so.4[2c34c000](_ZN12QScriptValue4callERKS_RK5QListIS_E+410)[2c522cbc]
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+231cc4)[2b9edcc4]:
_ZN30QDeclarativeQtScriptExpression4evalEP7QObjectPb
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+235ad4)[2b9f1ad4]:
_ZN30QDeclarativeQtScriptExpression11scriptValueEP7QObjectPb
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+235e88)[2b9f1e88]:
_ZN29QDeclarativeExpressionPrivate11scriptValueEP7QObjectPb
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+236020)[2b9f2020]:
_ZN29QDeclarativeExpressionPrivate5valueEP7QObjectPb
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+28f5f8)[2ba4b5f8]:
_ZN23QDeclarativeBoundSignal11qt_metacallEN11QMetaObject4CallEiPPv
/apps/uiapps/common/qt/lib/libQtCore.so.4[2d774000](_ZN11QMetaObject8activateEP7QObjectPKS_iPPv+5ec)[2d9b6c58]
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+3be680)[2bb7a680]:
_ZN24QDeclarativeKeysAttached7pressedEP20QDeclarativeKeyEvent
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+188a98)[2b944a98]:
_ZN24QDeclarativeKeysAttached10keyPressedEP9QKeyEventb
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](_ZN16QDeclarativeItem18keyPressPreHandlerEP9QKeyEvent+68)[2b93ba54]
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+1eb730)[2b9a7730]:
_ZN20QDeclarativeListView13keyPressEventEP9QKeyEvent
/apps/uiapps/common/qt/lib/libQtGui.so.4[2c77c000](_ZN13QGraphicsItem10sceneEventEP6QEvent+43c)[2d24339c]
/apps/uiapps/common/qt/lib/libQtDeclarative.so.4[2b7bc000](+154618)[2b910618]:
_ZN21QDeclarativeFlickable10sceneEventEP6QEvent
/apps/uiapps/common/qt/lib/libQtGui.so.4[2c77c000](_ZN14QGraphicsScene13keyPressEventEP9QKeyEvent+a0)[2d26d008]
/apps/uiapps/common/qt/lib/libQtGui.so.4[2c77c000](_ZN14QGraphicsScene5eventEP6QEvent+1f0)[2d28204c]
/apps/uiapps/common/qt/lib/libQtGui.so.4[2c77c000](_ZN19QApplicationPrivate13notify_helperEP7QObjectP6QEvent+f0)[2c96a9e8]
/apps/uiapps/common/qt/lib/libQtGui.so.4[2c77c000](_ZN12QApplication6notifyEP7QObjectP6QEvent+1ac)[2c972d20]
/apps/uiapps/common/qt/lib/libQtCore.so.4[2d774000](_ZN16QCoreApplication14notifyInternalEP7QObjectP6QEvent+a4)[2d993dd8]
/apps/uiapps/common/qt/lib/libQtCore.so.4[2d774000](_ZN23QCoreApplicationPrivate16sendPostedEventsEP7QObjectiP11QThreadData+418)[2d99a790]
/apps/uiapps/common/qt/lib/libQtCore.so.4[2d774000](_ZN20QEventDispatcherUNIX13processEventsE6QFlagsIN10QEventLoop17ProcessEventsFlagEE+5c)[2d9e03b8]
/apps/uiapps/common/qt/lib/libQtGui.so.4[2c77c000](+2aa244)[2ca26244]
/apps/uiapps/common/qt/lib/libQtCore.so.4[2d774000](_ZN10QEventLoop13processEventsE6QFlagsINS_17ProcessEventsFlagEE+58)[2d9921a0]
/apps/uiapps/common/qt/lib/libQtCore.so.4[2d774000](_ZN10QEventLoop4execE6QFlagsINS_17ProcessEventsFlagEE+1f0)[2d99286c]
/apps/uiapps/common/qt/lib/libQtCore.so.4[2d774000](_ZN16QCoreApplication4execEv+d8)[2d99aacc]./qtmediahub[400000](+13440)[413440]
/lib/libc.so.6[2e4e8000](__libc_start_main+108)[2e4fea28]
./qtmediahub[400000](_ZN5QIconD1Ev+78)[40c328]

>From the stack trace, looks like there is some memory corruption happening,
which makes fastfree crash intentionally. Any suggestions on how to go
about debugging this issue? Let me know if you need more details
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.qt-project.org/pipermail/interest/attachments/20140526/c04e99ae/attachment.html>