I can reproduce bug on Debian. Just did a git clone git://git.suckless.org/surf then make.
~> cat /etc/debian_version 8.7 ~> uname -a Linux t400 3.16.0-4-686-pae #1 SMP Debian 3.16.39-1+deb8u1 (2017-02-22) i686 GNU/Linux ~/a/surf> ./surf -p http://dhl.de Vector smash protection is enabled. java version "1.7.0_121" OpenJDK Runtime Environment (IcedTea 2.6.8) (7u121-2.6.8-2~deb8u1) OpenJDK Server VM (build 24.121-b00, mixed mode) fish: “./surf -p http://dhl.de” terminated by signal SIGSEGV (Address boundary error) But when I disable Javascript, no crash: ~/a/surf> ./surf -ps http://dhl.de Vector smash protection is enabled. java version "1.7.0_121" OpenJDK Runtime Environment (IcedTea 2.6.8) (7u121-2.6.8-2~deb8u1) OpenJDK Server VM (build 24.121-b00, mixed mode)