couchjs segfault in libmozjs.so

Bug #714980 reported by Jason Gerard DeRose
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
couchdb (Ubuntu)
New
Undecided
Unassigned

Bug Description

Binary package hint: couchdb

from dmesg:

...
[18335.207248] couchjs[26911]: segfault at 78 ip 00007f650640c11e sp 00007fffe6175fe0 error 4 in libmozjs.so[7f65062f8000+30a000]
[18335.304737] couchjs[26921]: segfault at 78 ip 00007fed0676811e sp 00007fff73cd7c80 error 4 in libmozjs.so[7fed06654000+30a000]
[18335.400104] couchjs[26931]: segfault at 78 ip 00007fa84f09711e sp 00007fff873cfa30 error 4 in libmozjs.so[7fa84ef83000+30a000]
[18335.506561] couchjs[26941]: segfault at 78 ip 00007f008c00b11e sp 00007fff93f49900 error 4 in libmozjs.so[7f008bef7000+30a000]

With some help from CardinalFang in #desktopcouch, can reproduce with these steps.

1) $ killall beam beam.smp desktopcouch-service

2) $ /usr/lib/desktopcouch/desktopcouch-service

3) $ firefox ~/.local/share/desktop-couch/couchdb.html

4) Visit a view like http://localhost:45855/dmedia/_design/file/_view/bytes

I attached what I think is a core dump file, hopefully it's useful. CardinalFang mentioned that apport should be catching this, but it's not:

jderose@jgd-ws:~$ cat /proc/sys/kernel/core_pattern
(08:05:52 PM) jderose: |/usr/share/apport/apport %p %s %c

ProblemType: Bug
DistroRelease: Ubuntu 11.04
Package: couchdb (not installed)
ProcVersionSignature: Ubuntu 2.6.38-2.29-generic 2.6.38-rc3
Uname: Linux 2.6.38-2-generic x86_64
Architecture: amd64
CheckboxSubmission: fdbdfcded0c0bb479a6b52e9ec5af131
CheckboxSystem: edda5d4f616ca792bf437989cb597002
Date: Mon Feb 7 20:32:16 2011
EcryptfsInUse: Yes
InstallationMedia: Ubuntu 10.10 "Maverick Meerkat" - Release amd64 (20101007.1)
ProcEnviron:
 LANGUAGE=en_US:en
 PATH=(custom, user)
 LANG=en_US.UTF-8
 LC_MESSAGES=en_US.utf8
 SHELL=/bin/bash
SourcePackage: couchdb

Revision history for this message
Jason Gerard DeRose (jderose) wrote :
Revision history for this message
Jason Gerard DeRose (jderose) wrote :

Ah, just in case this is something triggered because of the specific dmedia view functions, here's the code:

map = """
function(doc) {
    if (doc.type == 'dmedia/file' && typeof(doc.bytes) == 'number') {
        emit(doc.bytes, doc.bytes);
    }
}
"""

reduce = '_sum'

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Bug attachments

Remote bug watches

Bug watches keep track of this bug in other bug trackers.