Attachment 152679 Details for Bug 236545 – three instances of firefox-1.5.0.10 "double free or corruption"

three instances of firefox-1.5.0.10 "double free or corruption"

firefox_double_free_or_corruption-15Apr2007 (text/plain), 13.56 KB, created by major on 2007-04-16 11:22:15 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: major

Created: 2007-04-16 11:22:15 UTC

Size: 13.56 KB

patch

obsolete

>[major@sisko log]$ *** glibc detected *** /usr/lib/firefox-1.5.0.10/firefox-bin: double free or corruption (!prev): 0x0964ec00 ***
>======= Backtrace: =========
>/lib/libc.so.6[0xf74dd09d]
>/lib/libc.so.6(cfree+0x90)[0xf74e06f0]
>/usr/lib/firefox-1.5.0.10/libmozjs.so[0xf7f7d4b0]
>/usr/lib/firefox-1.5.0.10/libmozjs.so(js_Invoke+0x6e2)[0xf7f6da2b]
>/usr/lib/firefox-1.5.0.10/libmozjs.so[0xf7f749ee]
>/usr/lib/firefox-1.5.0.10/libmozjs.so(js_Invoke+0x73b)[0xf7f6da84]
>/usr/lib/firefox-1.5.0.10/libmozjs.so[0xf7f749ee]
>/usr/lib/firefox-1.5.0.10/libmozjs.so[0xf7f79359]
>/usr/lib/firefox-1.5.0.10/libmozjs.so(JS_EvaluateUCScriptForPrincipals+0x65)[0xf7f49393]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf4b3607c]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf4a52598]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf4a52742]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf4a54241]
>/usr/lib/firefox-1.5.0.10/components/libnecko.so[0xf6ff9dcd]
>/usr/lib/firefox-1.5.0.10/components/libnecko.so[0xf6ff96c2]
>/usr/lib/firefox-1.5.0.10/components/libnecko.so[0xf70565c0]
>/usr/lib/firefox-1.5.0.10/components/libnecko.so[0xf6fded91]
>/usr/lib/firefox-1.5.0.10/components/libnecko.so[0xf6fdf02f]
>/usr/lib/firefox-1.5.0.10/libxpcom_core.so[0xf7eac5ed]
>/usr/lib/firefox-1.5.0.10/libxpcom_core.so(PL_HandleEvent+0x22)[0xf7ebfc61]
>/usr/lib/firefox-1.5.0.10/libxpcom_core.so(PL_ProcessPendingEvents+0x74)[0xf7ebfeea]
>/usr/lib/firefox-1.5.0.10/libxpcom_core.so[0xf7ec1717]
>/usr/lib/firefox-1.5.0.10/components/libwidget_gtk2.so[0xf63eebca]
>/lib/libglib-2.0.so.0[0xf7826bad]
>/lib/libglib-2.0.so.0(g_main_context_dispatch+0x182)[0xf77fd442]
>/lib/libglib-2.0.so.0[0xf780041f]
>/lib/libglib-2.0.so.0(g_main_loop_run+0x1a9)[0xf78007c9]
>/usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xb4)[0xf7b554b4]
>/usr/lib/firefox-1.5.0.10/components/libwidget_gtk2.so[0xf63eefb7]
>/usr/lib/firefox-1.5.0.10/components/libtoolkitcomps.so[0xf62a7e96]
>/usr/lib/firefox-1.5.0.10/firefox-bin[0x804f67d]
>/usr/lib/firefox-1.5.0.10/firefox-bin(__gxx_personality_v0+0x294)[0x804ab90]
>/lib/libc.so.6(__libc_start_main+0xdc)[0xf748cf2c]
>/usr/lib/firefox-1.5.0.10/firefox-bin(__gxx_personality_v0+0x1e5)[0x804aae1]
>======= Memory map: ========
>08048000-08065000 r-xp 00000000 fd:03 3932905                            /usr/lib/firefox-1.5.0.10/firefox-bin
>08065000-08067000 rw-p 0001c000 fd:03 3932905                            /usr/lib/firefox-1.5.0.10/firefox-bin
>08067000-09a24000 rw-p 08067000 00:00 0                                  [heap]
>eaeef000-eaef0000 ---p eaeef000 00:00 0 
>eaef0000-eb8f0000 rw-p eaef0000 00:00 0 
>eb8f0000-eb8f1000 ---p eb8f0000 00:00 0 
>eb8f1000-ec2f1000 rw-p eb8f1000 00:00 0 
>ec2f1000-ec2f5000 r-xp 00000000 fd:03 3850302                            /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
>ec2f5000-ec2f6000 rw-p 00003000 fd:03 3850302                            /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
>ec2f6000-ecf56000 r--p 00000000 fd:03 2802641                            /usr/share/icons/hicolor/icon-theme.cache
>ecf56000-eeaa2000 r--p 00000000 fd:03 2966940                            /usr/share/icons/crystalsvg/icon-theme.cache
>eeaa2000-ef0fe000 r--p 00000000 fd:03 2851595                            /usr/share/icons/gnome/icon-theme.cache
>ef0fe000-efe6c000 r--p 00000000 fd:03 2856693                            /usr/share/icons/Bluecurve/icon-theme.cache
>efe6c000-efe7a000 r--p 00000000 fd:03 2802931                            /usr/share/icons/Clearlooks/icon-theme.cache
>efe7a000-efe93000 r--p 00000000 fd:03 2818129                            /usr/share/fonts/default/Type1/n019003l.pfb
>efe93000-eff00000 r--p 00000000 fd:03 2770512                            /usr/share/fonts/dejavu-lgc/DejaVuLGCSans.ttf
>eff00000-eff5c000 rw-p eff00000 00:00 0 
>eff5c000-f0000000 ---p eff5c000 00:00 0 
>f08fa000-f1022000 rw-p f08fa000 00:00 0 
>f1022000-f1a02000 ---p f1022000 00:00 0 
>f1a02000-f206d000 r-xp 00000000 fd:03 4129261                            /usr/lib/flash-plugin/libflashplayer.so
>f206d000-f20b6000 rw-p 0066b000 fd:03 4129261                            /usr/lib/flash-plugin/libflashplayer.so
>f20b6000-f21b1000 rw-p f20b6000 00:00 0 
>f21b9000-f2226000 r--p 00000000 fd:03 2770512                            /usr/share/fonts/dejavu-lgc/DejaVuLGCSans.ttf
>f2226000-f2238000 r--p 00000000 fd:03 3637595                            /usr/share/X11/fonts/Type1/l048036t.pfa
>f2238000-f224f000 r--p 00000000 fd:03 3637599                            /usr/share/X11/fonts/Type1/l049016t.pfa
>f224f000-f2269000 r--p 00000000 fd:03 3637601                            /usr/share/X11/fonts/Type1/l049033t.pfa
>f2269000-f2280000 r--p 00000000 fd:03 3637597                            /usr/share/X11/fonts/Type1/l049013t.pfa
>f2280000-f2292000 r--p 00000000 fd:03 3637593                            /usr/share/X11/fonts/Type1/l048033t.pfa
>f2292000-f2296000 r-xp 00000000 fd:03 3981677                            /usr/lib/firefox-1.5.0.10/plugins/libnullplugin.so
>f2296000-f2297000 rw-p 00004000 fd:03 3981677                            /usr/lib/firefox-1.5.0.10/plugins/libnullplugin.so
>f2297000-f22d4000 r-xp 00000000 fd:03 3932783                            /usr/lib/firefox-1.5.0.10/components/libgkplugin.so
>f22d4000-f22d6000 rw-p 0003d000 fd:03 3932783                            /usr/lib/firefox-1.5.0.10/components/libgkplugin.so
>f22d6000-f22da000 r-xp 00000000 fd:00 2949328                            /lib/libnss_dns-2.5.so
>f22da000-f22db000 r--p 00003000 fd:00 2949328          
>
>
>##################################################################################################################################
>
>
>
>[major@sisko ~]$ *** glibc detected *** /usr/lib/firefox-1.5.0.10/firefox-bin: double free or corruption (!prev): 0x0a56b700 ***
>======= Backtrace: =========
>/lib/libc.so.6[0xf74dd09d]
>/lib/libc.so.6(cfree+0x90)[0xf74e06f0]
>/usr/lib/libcairo.so.2[0xf78ce75b]
>/usr/lib/libcairo.so.2[0xf78ccf7a]
>/usr/lib/libcairo.so.2[0xf78ca933]
>/usr/lib/libcairo.so.2[0xf78be8e4]
>/usr/lib/libcairo.so.2(cairo_fill_preserve+0x29)[0xf78ba0e9]
>/usr/lib/libcairo.so.2(cairo_fill+0x12)[0xf78ba112]
>/usr/lib/gtk-2.0/2.10.0/engines/libclearlooks.so[0xf48b3a1f]
>/usr/lib/gtk-2.0/2.10.0/engines/libclearlooks.so[0xf48b0ea7]
>/usr/lib/libgtk-x11-2.0.so.0(gtk_paint_box+0xba)[0xf7bcbcba]
>/usr/lib/firefox-1.5.0.10/components/libgfx_gtk.so[0xf61bf1a4]
>/usr/lib/firefox-1.5.0.10/components/libgfx_gtk.so[0xf61daf5b]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5b1ac7a]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5b1b64f]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5b5cad4]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5c3e8d9]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5b3be4b]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d8d7de]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d8fbab]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d93171]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d93b22]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d95da6]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d8d581]
>/usr/lib/firefox-1.5.0.10/components/libwidget_gtk2.so[0xf65f548c]
>/usr/lib/firefox-1.5.0.10/components/libwidget_gtk2.so[0xf65f05e3]
>/usr/lib/firefox-1.5.0.10/components/libwidget_gtk2.so[0xf65f0667]
>/usr/lib/libgtk-x11-2.0.so.0[0xf7b5aa60]
>/lib/libgobject-2.0.so.0(g_closure_invoke+0x12b)[0xf787cd9b]
>/lib/libgobject-2.0.so.0[0xf788d433]
>/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x68f)[0xf788e71f]
>/lib/libgobject-2.0.so.0(g_signal_emit+0x29)[0xf788eb19]
>/usr/lib/libgtk-x11-2.0.so.0[0xf7c6f508]
>/usr/lib/libgtk-x11-2.0.so.0(gtk_main_do_event+0x3f5)[0xf7b55115]
>/usr/lib/libgdk-x11-2.0.so.0[0xf79c662f]
>/usr/lib/libgdk-x11-2.0.so.0(gdk_window_process_updates+0x138)[0xf79c67b8]
>/usr/lib/firefox-1.5.0.10/components/libwidget_gtk2.so[0xf65f0d6b]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d8fe7c]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d940fd]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d94212]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d965a9]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5b5b043]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5c45c5a]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5c45540]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5b14965]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5b3bb8a]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5c88375]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d3f594]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d70e93]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d71dff]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5b40d0f]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d5b952]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d57b0c]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d70c62]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d71dff]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5b40d0f]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5c44469]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5c447da]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5c44f2a]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5b36dc2]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5b40503]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d9240a]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf5d962ec]
>======= Memory map: ========
>08048000-08065000 r-xp 00000000 fd:03 3932905                            /usr/lib/firefox-1.5.0.10/firefox-bin
>
>
>##################################################################################################################################
>
>
>
>[major@sisko ~]$ *** glibc detected *** /usr/lib/firefox-1.5.0.10/firefox-bin: double free or corruption (!prev): 0x097b93c0 ***
>======= Backtrace: =========
>/lib/libc.so.6[0xf74dd09d]
>/lib/libc.so.6(cfree+0x90)[0xf74e06f0]
>/usr/lib/libcairo.so.2[0xf78ce75b]
>/usr/lib/libcairo.so.2[0xf78bccb0]
>/usr/lib/libcairo.so.2[0xf78be7cc]
>/usr/lib/libcairo.so.2(cairo_clip_preserve+0x29)[0xf78b9eb9]
>/usr/lib/libcairo.so.2(cairo_clip+0x12)[0xf78b9ee2]
>/usr/lib/libgdk-x11-2.0.so.0[0xf79b2fab]
>/usr/lib/libgdk-x11-2.0.so.0[0xf79b7776]
>/usr/lib/libgdk-x11-2.0.so.0[0xf79b7d37]
>/usr/lib/libpango-1.0.so.0(pango_renderer_draw_glyphs+0x65)[0xf793e435]
>/usr/lib/libpango-1.0.so.0(pango_renderer_draw_layout_line+0x5bb)[0xf793ea2b]
>/usr/lib/libgdk-x11-2.0.so.0(gdk_draw_layout_line_with_colors+0x159)[0xf79b7019]
>/usr/lib/libgdk-x11-2.0.so.0(gdk_draw_layout_line+0xd8)[0xf79b7188]
>/usr/lib/firefox-1.5.0.10/components/libgfx_gtk.so[0xf56d165a]
>/usr/lib/firefox-1.5.0.10/components/libgfx_gtk.so[0xf56d16ec]
>/usr/lib/firefox-1.5.0.10/components/libgfx_gtk.so[0xf56c6a29]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf4934db9]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf4937433]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2832]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48e30ea]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48e4c3c]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48ea2d5]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf4906810]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48e94ca]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2832]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48e30ea]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48e4c3c]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48ea2d5]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf4906810]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48e94ca]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2832]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2a7d]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf49ba7da]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2832]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2a7d]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf49cec78]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2832]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2a7d]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf49d16e1]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2832]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2a7d]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf49c5a5f]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf49c911e]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2832]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf49ccb43]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2832]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48e30ea]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48e4c3c]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48ea23f]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf4906810]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48e94ca]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2832]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2a7d]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf49ba7da]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2832]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2a7d]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf49cec78]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2832]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2a7d]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf49d16e1]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2832]
>/usr/lib/firefox-1.5.0.10/components/libgklayout.so[0xf48f2a7d]
>======= Memory map: ========
>08048000-08065000 r-
>

Actions: View

Attachments on bug 236545: 152679