Bug 236545

Summary: firefox-1.5.0.10 freezes with "double free or corruption"
Product: [Fedora] Fedora Reporter: major <major>
Component: firefoxAssignee: Gecko Maintainer <gecko-bugs-nobody>
Status: CLOSED INSUFFICIENT_DATA QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: 6CC: mcepl, wtogami
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-08-01 19:41:20 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
three instances of firefox-1.5.0.10 "double free or corruption" none

Description major 2007-04-16 11:22:15 UTC 
Description of problem:
While running the 32-bit version of firefox-1.5.0.10 (on AMD Opteron x86_64
platform with the Adobe Flash Plugin 9.0.31.0), the program will intermittently
freeze with "double free or corruption" after writing a backtrace and partial
memory map to the terminal. Each time, I have to SIGKILL the firefox processes
with the bottom-most child in a futex. I was running firefox on one computer
while viewing its X display on a different computer. I am including an
attachment with three different instances of this behavior.

Version-Release number of selected component (if applicable):
firefox-1.5.0.10-5.fc6.i386
firefox-1.5.0.10-5.fc6.x86_64
firefox-debuginfo-1.5.0.10-5.fc6.i386
firefox-debuginfo-1.5.0.10-5.fc6.x86_64
flash-plugin-9.0.31.0-1.i386
kernel-2.6.20-1.2944.fc6.x86_64

How reproducible:
I have not been able to predict the failure.
Comment 1 major 2007-04-16 11:22:15 UTC 
Created attachment 152679 [details]
three instances of firefox-1.5.0.10 "double free or corruption"
Comment 2 Martin Stransky 2007-04-16 11:32:45 UTC 
Can you please try to catch a bactrace? how-to is here -
http://people.redhat.com/stransky/mozilla/
Comment 3 Martin Stransky 2007-04-16 12:32:54 UTC 
btw. Could you please attach your "Usert Agent" string here?
Comment 4 Matěj Cepl 2007-08-01 19:41:20 UTC 
No information requested was provided, so I close this bug as INSUFFICIENT_DATA.
Reporter, if you could, please, reopen with additional information.