Bug 1045940

Summary: crash [ @ firefox: nsWeakFrame::InitInternal()] - baseline JIT
Product: [Fedora] Fedora Reporter: Doug Huffman <doug.huffman1>
Component: firefoxAssignee: Martin Stransky <stransky>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 19CC: doug.huffman1, gecko-bugs-nobody, stransky
Target Milestone: ---Keywords: Reopened
Target Release: ---   
Hardware: i686   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/27982ddcdb58c71070256641f492468544616dde
Whiteboard: abrt_hash:3065b1013a9e0eb12d46ca7ef3cb357653853500
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-01-19 17:44:39 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description Doug Huffman 2013-12-23 00:03:43 UTC
Description of problem:
browsing

Version-Release number of selected component:
firefox-26.0-2.fc19

Additional info:
reporter:       libreport-2.1.10
backtrace_rating: 4
cmdline:        /usr/lib/firefox/firefox
crash_function: nsWeakFrame::InitInternal
executable:     /usr/lib/firefox/firefox
kernel:         3.11.10-200.fc19.i686.PAE
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 nsWeakFrame::InitInternal at /usr/src/debug/xulrunner-26.0/mozilla-release/layout/generic/nsIFrame.h:584
 #1 Init at /usr/src/debug/xulrunner-26.0/mozilla-release/layout/generic/nsIFrame.h:3272
 #2 nsWeakFrame at /usr/src/debug/xulrunner-26.0/mozilla-release/layout/generic/nsIFrame.h:3210
 #3 nsXULPopupManager::HidePopupCallback at /usr/src/debug/xulrunner-26.0/mozilla-release/layout/xul/base/src/nsXULPopupManager.cpp:931
 #4 nsXULPopupManager::FirePopupHidingEvent at /usr/src/debug/xulrunner-26.0/mozilla-release/layout/xul/base/src/nsXULPopupManager.cpp:1285
 #5 nsXULPopupManager::HidePopup at /usr/src/debug/xulrunner-26.0/mozilla-release/layout/xul/base/src/nsXULPopupManager.cpp:884
 #6 nsXULPopupManager::Rollup at /usr/src/debug/xulrunner-26.0/mozilla-release/layout/xul/base/src/nsXULPopupManager.cpp:210
 #7 nsWindow::CheckForRollup at /usr/src/debug/xulrunner-26.0/mozilla-release/widget/gtk2/nsWindow.cpp:4718
 #8 nsWindow::GrabPointer at /usr/src/debug/xulrunner-26.0/mozilla-release/widget/gtk2/nsWindow.cpp:4359
 #9 nsWindow::EnsureGrabs at /usr/src/debug/xulrunner-26.0/mozilla-release/widget/gtk2/nsWindow.cpp:3906

Comment 1 Doug Huffman 2013-12-23 00:03:51 UTC
Created attachment 840536 [details]
File: backtrace

Comment 2 Doug Huffman 2013-12-23 00:03:53 UTC
Created attachment 840537 [details]
File: cgroup

Comment 3 Doug Huffman 2013-12-23 00:03:55 UTC
Created attachment 840538 [details]
File: core_backtrace

Comment 4 Doug Huffman 2013-12-23 00:03:57 UTC
Created attachment 840539 [details]
File: dso_list

Comment 5 Doug Huffman 2013-12-23 00:03:59 UTC
Created attachment 840540 [details]
File: environ

Comment 6 Doug Huffman 2013-12-23 00:04:01 UTC
Created attachment 840541 [details]
File: exploitable

Comment 7 Doug Huffman 2013-12-23 00:04:02 UTC
Created attachment 840542 [details]
File: limits

Comment 8 Doug Huffman 2013-12-23 00:04:05 UTC
Created attachment 840543 [details]
File: maps

Comment 9 Doug Huffman 2013-12-23 00:04:07 UTC
Created attachment 840544 [details]
File: open_fds

Comment 10 Doug Huffman 2013-12-23 00:04:09 UTC
Created attachment 840545 [details]
File: proc_pid_status

Comment 11 Doug Huffman 2013-12-23 00:04:11 UTC
Created attachment 840546 [details]
File: var_log_messages

Comment 12 Martin Stransky 2014-01-06 12:56:36 UTC
This is an automated bug update. If you can reproduce the bug, please reopen and remove the [abrt] string from subject.

Thanks!

Comment 13 Doug Huffman 2014-01-06 13:14:34 UTC
The fix, from Firefox, was to set about:config javascript.options.baselinejit.content to FALSE.  Toggling to TRUE reproduces the bug.

Comment 14 Martin Stransky 2014-01-06 13:45:34 UTC
Can you please test an upstream package from mozilla.com? If javascript.options.baselinejit.* options works for you it means it hits a bug in new baseline JIT compiler.

Comment 15 Doug Huffman 2014-01-06 17:58:15 UTC
Thanks Martin, but I barely understand your request/question.  I am a linux/Fedora newbie in over my head.

javascript.options.baselinejit.* DOES NOT work for me and must be optioned=FALSE for my FF browser to not crash on wikipedia.org.

Comment 16 Martin Stransky 2014-01-07 08:12:37 UTC
I mean to download a binary Firefox package from http://www.mozilla.org and test if the bug is there too or it's something Fedora specific. Just download the tarball from:

http://www.mozilla.org/en-US/products/download.html?product=firefox-26.0&os=linux&lang=en-US

unpack it in some dir and run.

Thanks!

Comment 17 Fedora End Of Life 2015-01-09 20:56:22 UTC
This message is a notice that Fedora 19 is now at end of life. Fedora 
has stopped maintaining and issuing updates for Fedora 19. It is 
Fedora's policy to close all bug reports from releases that are no 
longer maintained. Approximately 4 (four) weeks from now this bug will
be closed as EOL if it remains open with a Fedora 'version' of '19'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 19 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 18 Martin Stransky 2015-01-19 17:44:39 UTC
Seems to be working fine now.