Bug 1579939

Summary: [abrt] firefox: mozalloc_abort(char const*)(): firefox killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Christian Stadelmann <fedora>
Component: firefoxAssignee: Gecko Maintainer <gecko-bugs-nobody>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 28CC: alexl, gecko-bugs-nobody, holishing, jhorak, john.j5live, kengert, mikhail.zabaluev, muhammad.dawud91, pjasicek, rhughes, rstrode, sandmann, Simon.Gerhards, voxadam
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/3035d57b60a1f3fcbbb086a526131228358a2f72
Whiteboard: abrt_hash:7b61cd3935bf12bc0ae848c78e9f9677693caf87;VARIANT_ID=workstation;
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-05-28 08:39:27 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: core_backtrace
none
File: cpuinfo
none
File: dso_list
none
File: exploitable
none
File: limits
none
File: proc_pid_status none

Description Christian Stadelmann 2018-05-18 18:39:26 UTC 
Description of problem:
When starting firefox, sometimes most tabs crash immediately.

Version-Release number of selected component:
firefox-60.0-4.fc28

Additional info:
reporter:       libreport-2.9.5
backtrace_rating: 4
cmdline:        /usr/lib64/firefox/firefox -contentproc -childID 3 -isForBrowser -intPrefs 42:40|44:40|235:1|236:2| -boolPrefs 4:0|31:0|33:0|115:1|163:0|215:0|231:1|237:1|259:1|260:1|263:1|278:1|299:0|308:0| -stringPrefs 285:36;760028e7-f616-4dcb-af43-cb8fd687c9d3| -schedulerPrefs 0001,2 -greomni /usr/lib64/firefox/omni.ja -appomni /usr/lib64/firefox/browser/omni.ja -appdir /usr/lib64/firefox/browser 14327 true tab
crash_function: mozalloc_abort(char const*)
executable:     /usr/lib64/firefox/firefox
journald_cursor: s=34b5a6753f314851b59b1e4aacf15076;i=34fc3;b=43550fb15d5f4db486ebfbe153c725eb;m=3b555647;t=56c59eb425aee;x=630a862b78739ada
kernel:         4.16.8-300.fc28.x86_64
rootdir:        /
runlevel:       N 5
type:           CCpp

Truncated backtrace:
Thread no. 0 (10 frames)
 #0 mozalloc_abort(char const*) at /usr/src/debug/firefox-60.0-4.fc28.x86_64/memory/mozalloc/mozalloc_abort.cpp:33
 #1 abort() at /usr/src/debug/firefox-60.0-4.fc28.x86_64/memory/mozalloc/mozalloc_abort.cpp:80
 #2 std::__replacement_assert(char const*, int, char const*, char const*) at /usr/include/c++/8/x86_64-redhat-linux/bits/c++config.h:2389
 #3 std::vector<int, std::allocator<int> >::operator[](unsigned long) at /usr/src/debug/firefox-60.0-4.fc28.x86_64/ipc/chromium/src/chrome/common/ipc_channel_posix.cc:427
 #4 IPC::Channel::ChannelImpl::ProcessIncomingMessages() at /usr/src/debug/firefox-60.0-4.fc28.x86_64/ipc/chromium/src/chrome/common/ipc_channel_posix.cc:428
 #5 IPC::Channel::ChannelImpl::OnFileCanReadWithoutBlocking(int) at /usr/src/debug/firefox-60.0-4.fc28.x86_64/ipc/chromium/src/chrome/common/ipc_channel_posix.cc:800
 #6 event_persist_closure at /usr/src/debug/firefox-60.0-4.fc28.x86_64/ipc/chromium/src/third_party/libevent/event.c:1580
 #7 event_process_active_single_queue at /usr/src/debug/firefox-60.0-4.fc28.x86_64/ipc/chromium/src/third_party/libevent/event.c:1639
 #8 event_process_active at /usr/src/debug/firefox-60.0-4.fc28.x86_64/ipc/chromium/src/third_party/libevent/event.c:1738
 #9 event_base_loop at /usr/src/debug/firefox-60.0-4.fc28.x86_64/ipc/chromium/src/third_party/libevent/event.c:1961

Potential duplicate: bug 1553161
Comment 1 Christian Stadelmann 2018-05-18 18:39:34 UTC 
Created attachment 1438760 [details]
File: backtrace
Comment 2 Christian Stadelmann 2018-05-18 18:39:37 UTC 
Created attachment 1438761 [details]
File: core_backtrace
Comment 3 Christian Stadelmann 2018-05-18 18:39:38 UTC 
Created attachment 1438762 [details]
File: cpuinfo
Comment 4 Christian Stadelmann 2018-05-18 18:39:40 UTC 
Created attachment 1438763 [details]
File: dso_list
Comment 5 Christian Stadelmann 2018-05-18 18:39:42 UTC 
Created attachment 1438764 [details]
File: exploitable
Comment 6 Christian Stadelmann 2018-05-18 18:39:43 UTC 
Created attachment 1438765 [details]
File: limits
Comment 7 Christian Stadelmann 2018-05-18 18:39:45 UTC 
Created attachment 1438766 [details]
File: proc_pid_status
Comment 8 holishing 2018-05-19 10:39:30 UTC 
*** Bug 1580028 has been marked as a duplicate of this bug. ***
Comment 9 Mikhail Zabaluev 2018-05-22 15:46:34 UTC 
Similar problem has been detected:

Multiple crashes inside tabs.

reporter:       libreport-2.9.5
backtrace_rating: 4
cmdline:        /usr/lib64/firefox/firefox -contentproc -childID 2 -isForBrowser -boolPrefs 299:0| -stringPrefs 285:36;c6af7cb3-21d2-40f7-9817-53b5b1b7ff35| -schedulerPrefs 0001,2 -greomni /usr/lib64/firefox/omni.ja -appomni /usr/lib64/firefox/browser/omni.ja -appdir /usr/lib64/firefox/browser 3274 true tab
crash_function: mozalloc_abort(char const*)
executable:     /usr/lib64/firefox/firefox
journald_cursor: s=d7d8f800240e42629c4c442cece3a693;i=bea7;b=8d84b338c7f9496480ed7a56b1661a4a;m=2110d7b3;t=56c30c74da4d0;x=e177c3fc69da6677
kernel:         4.16.7-300.fc28.x86_64
package:        firefox-60.0-4.fc28
reason:         firefox killed by SIGSEGV
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000
Comment 10 Simon Gerhards 2018-05-24 05:55:37 UTC 
Similar problem has been detected:

I opened a new tab

reporter:       libreport-2.9.5
backtrace_rating: 4
cmdline:        /usr/lib64/firefox/firefox -contentproc -childID 19 -isForBrowser -boolPrefs 237:1|259:1|299:0| -stringPrefs 285:36;f8282fef-00a6-4f02-9772-45132f4d6ab5| -schedulerPrefs 0001,2 -greomni /usr/lib64/firefox/omni.ja -appomni /usr/lib64/firefox/browser/omni.ja -appdir /usr/lib64/firefox/browser 24460 true tab
crash_function: mozalloc_abort(char const*)
executable:     /usr/lib64/firefox/firefox
journald_cursor: s=da9b38d3b44b47b49b2568d4cdd89f74;i=159e0e;b=c70c2b435826416aad7d6e5b63454f56;m=14be7eac2e;t=56cd96dad252c;x=6cef7649fcec3fff
kernel:         4.16.9-300.fc28.x86_64
package:        firefox-60.0-4.fc28
reason:         firefox killed by SIGSEGV
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000
Comment 11 Christian Stadelmann 2018-05-28 08:39:27 UTC 
This crash is a duplicate of bug #1577277. You may want to try the update to firefox-60.0.1-3 which is linked there and will land in updates-testing today.

Since installing that update, I'm not seeing the crash any more.

*** This bug has been marked as a duplicate of bug 1577277 ***