Bug 1553161

Summary: [abrt] firefox: mozalloc_abort(char const*)(): firefox killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Saurabh Pradhan <pradhanphy>
Component: firefoxAssignee: Gecko Maintainer <gecko-bugs-nobody>
Status: CLOSED WORKSFORME QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 29CC: alexl, gecko-bugs-nobody, jhorak, john.j5live, pjasicek, rhughes, rstrode, sandmann
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/8a6cf7930d5335bd538422f4930dbeec2ab84994
Whiteboard: abrt_hash:7b61cd3935bf12bc0ae848c78e9f9677693caf87;
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-08-23 05:30:34 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: cpuinfo
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: mountinfo
none
File: open_fds
none
File: proc_pid_status none

Description Saurabh Pradhan 2018-03-08 12:48:30 UTC 
Version-Release number of selected component:
firefox-58.0.2-1.fc28

Additional info:
reporter:       libreport-2.9.3
backtrace_rating: 4
cmdline:        /usr/lib64/firefox/firefox -contentproc -childID 10 -isForBrowser -intPrefs 5:50|6:-1|18:0|28:1000|34:20|35:5|36:10|45:128|46:10000|51:0|53:400|54:1|55:0|56:0|61:0|62:120|63:120|99:2|100:1|115:5000|125:0|127:0|138:10000|158:24|159:32768|161:1|162:0|170:4|174:1048576|175:100|176:5000|178:600|179:4|180:1|188:20|191:3|204:60000| -boolPrefs 1:0|2:0|4:0|26:1|27:1|30:0|33:1|37:1|38:0|39:0|40:0|43:1|44:1|47:0|48:0|49:0|50:0|52:0|57:1|58:1|59:0|60:1|64:1|65:1|66:0|67:1|68:1|69:0|70:1|73:0|74:0|77:1|78:1|82:1|83:1|84:0|85:0|86:0|88:0|89:0|90:1|91:1|92:1|95:1|96:0|98:0|101:1|102:0|109:0|114:0|117:1|119:1|120:1|122:1|126:0|128:0|130:1|132:1|133:1|139:1|140:0|141:1|143:0|156:0|157:0|160:1|163:1|165:1|167:1|168:0|177:1|182:0|183:1|184:0|185:1|186:0|187:0|189:1|190:1|193:1|196:0|197:0|198:1|199:1|200:0|201:1|202:1|203:1|205:0|206:0|208:0|217:1|218:1|219:0|220:0|221:0| -stringPrefs 3:7;default|97:0;|142:3;1.0|154:332;  |155:4;high| -schedulerPrefs 0001,2 -greomni /usr/lib64/firefox/omni.ja -appomni /usr/lib64/firefox/browser/omni.ja -appdir /usr/lib64/firefox/browser 5195 true tab
crash_function: mozalloc_abort(char const*)
executable:     /usr/lib64/firefox/firefox
journald_cursor: s=6aac8b307c614da2bb188a8ab6017c17;i=5daaa;b=038f60e476a44728bb36709ce8e034c5;m=2227488c3;t=566e5fc23879c;x=2babd9a553e37993
kernel:         4.16.0-0.rc3.git4.1.fc29.x86_64
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 0 (10 frames)
 #0 mozalloc_abort(char const*) at /usr/src/debug/firefox-58.0.2-1.fc28.x86_64/memory/mozalloc/mozalloc_abort.cpp:33
 #1 abort() at /usr/src/debug/firefox-58.0.2-1.fc28.x86_64/memory/mozalloc/mozalloc_abort.cpp:80
 #2 std::__replacement_assert(char const*, int, char const*, char const*) at /usr/include/c++/8/x86_64-redhat-linux/bits/c++config.h:2389
 #3 std::vector<int, std::allocator<int> >::operator[](unsigned long) at /usr/src/debug/firefox-58.0.2-1.fc28.x86_64/ipc/chromium/src/chrome/common/ipc_channel_posix.cc:427
 #4 IPC::Channel::ChannelImpl::ProcessIncomingMessages() at /usr/src/debug/firefox-58.0.2-1.fc28.x86_64/ipc/chromium/src/chrome/common/ipc_channel_posix.cc:428
 #5 IPC::Channel::ChannelImpl::OnFileCanReadWithoutBlocking(int) at /usr/src/debug/firefox-58.0.2-1.fc28.x86_64/ipc/chromium/src/chrome/common/ipc_channel_posix.cc:800
 #6 event_persist_closure at /usr/src/debug/firefox-58.0.2-1.fc28.x86_64/ipc/chromium/src/third_party/libevent/event.c:1580
 #7 event_process_active_single_queue at /usr/src/debug/firefox-58.0.2-1.fc28.x86_64/ipc/chromium/src/third_party/libevent/event.c:1639
 #8 event_process_active at /usr/src/debug/firefox-58.0.2-1.fc28.x86_64/ipc/chromium/src/third_party/libevent/event.c:1738
 #9 event_base_loop at /usr/src/debug/firefox-58.0.2-1.fc28.x86_64/ipc/chromium/src/third_party/libevent/event.c:1961
Comment 1 Saurabh Pradhan 2018-03-08 12:48:38 UTC 
Created attachment 1405828 [details]
File: backtrace
Comment 2 Saurabh Pradhan 2018-03-08 12:48:40 UTC 
Created attachment 1405829 [details]
File: cgroup
Comment 3 Saurabh Pradhan 2018-03-08 12:48:42 UTC 
Created attachment 1405830 [details]
File: core_backtrace
Comment 4 Saurabh Pradhan 2018-03-08 12:48:44 UTC 
Created attachment 1405831 [details]
File: cpuinfo
Comment 5 Saurabh Pradhan 2018-03-08 12:48:46 UTC 
Created attachment 1405832 [details]
File: dso_list
Comment 6 Saurabh Pradhan 2018-03-08 12:48:48 UTC 
Created attachment 1405833 [details]
File: environ
Comment 7 Saurabh Pradhan 2018-03-08 12:48:49 UTC 
Created attachment 1405834 [details]
File: exploitable
Comment 8 Saurabh Pradhan 2018-03-08 12:48:51 UTC 
Created attachment 1405835 [details]
File: limits
Comment 9 Saurabh Pradhan 2018-03-08 12:48:53 UTC 
Created attachment 1405836 [details]
File: maps
Comment 10 Saurabh Pradhan 2018-03-08 12:48:55 UTC 
Created attachment 1405837 [details]
File: mountinfo
Comment 11 Saurabh Pradhan 2018-03-08 12:48:57 UTC 
Created attachment 1405838 [details]
File: open_fds
Comment 12 Saurabh Pradhan 2018-03-08 12:48:58 UTC 
Created attachment 1405839 [details]
File: proc_pid_status
Comment 13 Jan Kurik 2018-08-14 10:11:41 UTC 
This bug appears to have been reported against 'rawhide' during the Fedora 29 development cycle.
Changing version to '29'.
Comment 14 Martin Stransky 2019-08-23 05:30:34 UTC 
Hello,

abrt reported bugs come from various sources/scenarios and usually can't be reproduced. This is automated bug processing which is applied to all abrt reported bugs which are supposed to be non-reproducible.

If you can reproduce the bug (you have a testcase), please reopen it and assign it directly to me - stransky.

Thanks.