Bug 235938
Summary: | firefox crashes displaying gmail/spam folder | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Tom London <selinux> |
Component: | freetype | Assignee: | Behdad Esfahbod <behdad> |
Status: | CLOSED RAWHIDE | QA Contact: | Brock Organ <borgan> |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | rawhide | CC: | behdad, stransky, wtogami |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2007-04-11 13:24:27 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Tom London
2007-04-10 21:33:10 UTC
This works with firefox 2.0.0.3 under Windows. Fails every time here... Get a similar crash running with '-safe-mode': [tbl@localhost ~]$ firefox -safe-mode *** glibc detected *** /usr/lib/firefox-2.0.0.3/firefox-bin: malloc(): memory corruption: 0x08e9ff68 *** ======= Backtrace: ========= /lib/libc.so.6[0x47b492bc] /lib/libc.so.6(__libc_malloc+0x7e)[0x47b4a9ee] /lib/libglib-2.0.so.0(g_malloc+0x36)[0x47ccaa56] /lib/libglib-2.0.so.0(g_slice_alloc+0x138)[0x47cda7b8] /usr/lib/libpango-1.0.so.0(pango_script_iter_new+0x29)[0x48438cd9] /usr/lib/libpango-1.0.so.0[0x484283bf] /usr/lib/libpango-1.0.so.0(pango_itemize_with_base_dir+0x9b)[0x4842923b] /usr/lib/libpango-1.0.so.0[0x484317b1] /usr/lib/libpango-1.0.so.0(pango_layout_get_line+0x2f)[0x48433b1f] /usr/lib/firefox-2.0.0.3/components/libgfx_gtk.so[0x134354] /usr/lib/firefox-2.0.0.3/components/libgfx_gtk.so[0x135da0] /usr/lib/firefox-2.0.0.3/components/libgfx_gtk.so[0x12a90f] /usr/lib/firefox-2.0.0.3/components/libgfx_gtk.so[0x13af9f] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf92b53] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf9880f] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf747f9] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf6f681] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf6f8f9] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf6fc9d] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf747f9] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf46482] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf46932] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf46bb0] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf46dfa] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf47387] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf4a206] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf50f03] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0x101ae59] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf50f03] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0x102f36e] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0x102d8af] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf50f03] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0x1030ecd] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0x1032a29] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf50f03] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0x1024d45] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0x10253f9] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0x1028ff9] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf50f03] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0x102b1ae] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0x102c0b3] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf4bc99] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf45cb9] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf46cb1] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf47387] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf4a206] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf4bc99] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf45cb9] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf46cb1] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf47387] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf4a206] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf4bc99] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf45cb9] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf46cb1] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf47387] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf4a206] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf4bc99] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf45cb9] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf46cb1] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf47387] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf4a206] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf4bc99] /usr/lib/firefox-2.0.0.3/components/libgklayout.so[0xf45cb9] ======= Memory map: ======== 00110000-00158000 r-xp 00000000 fd:00 5704330 /usr/lib/firefox-2.0.0.3/components/libgfx_gtk.so 001 Works for me here. I'm guessing there's something specific to your inbox that is triggering this. Possibly a character in one of the spams. I see pango in your stack. Does setting MOZ_DISABLE_PANGO=1 work as a stopgap? What are your pango, cairo, and freetype versions? Ha! Was just testing that... No, setting MOZ_DISABLE_PANGO=1 has no effect. Same crash. [root@localhost ~]# rpm -q pango pango-1.16.1-1.fc7 [root@localhost ~]# rpm -q cairo cairo-1.4.2-1.fc7 [root@localhost ~]# rpm -q freetype freetype-2.3.3-2.fc7 [root@localhost ~]# Aha.... Reverting freetype to freetype-2.3.2-1.fc7 'makes it work'. Problem with freetype? Probably. Moving to freetype. Btw, for future reference, you can issue one rpm -q command with multiple package names as arguments: % rpm -q pango cairo freetype pango-1.16.1-1.fc7 cairo-1.4.2-1.fc7 freetype-2.3.2-1.fc7 I built freetype-2.3.4-1.fc7 today. That should hopefully fix this... Let me know if it doesn't. OK. I'll leave my 'Spam' folder untouched until I can download/test 2.3.4-1.fc7 btw, reverting from 2.3.3-2.fc7 to 2.3.2-1.fc7 did not 'restore' the symbolic link, so I had to fix this manually. I reverted via 'rpm -Uvh --oldpackage ..." [root@localhost lib]# ls -l libfreetype* lrwxrwxrwx 1 root root 21 2007-04-10 15:56 libfreetype.so -> libfreetype.so.6.3.13 lrwxrwxrwx 1 root root 21 2007-04-10 15:56 libfreetype.so.6 -> libfreetype.so.6.3.14 -rwxr-xr-x 1 root root 562152 2007-03-09 13:38 libfreetype.so.6.3.13 [root@localhost lib]# Notice that libfreetype.so.6 is pointing to (the now non-existent) libfreetype.so.6.3.14. Removing and doing the link manually fixed this. freetype-2.3.4-1.fc7 fixes this.... Thanks. |