Bug 470779

Summary: Firefox stable crash in NSS
Product: [Fedora] Fedora Reporter: Dmitry Antipov <dmantipov>
Component: nssAssignee: Kai Engert (:kaie) (inactive account) <kengert>
Status: CLOSED WONTFIX QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: 9CC: bdm, gecko-bugs-nobody, kengert, stransky, walters
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-07-14 14:18:56 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Dmitry Antipov 2008-11-10 07:19:24 UTC
Description of problem:

Firefox 3.0.2 crashes very often, with the following backtrace:

#0  0x411cdcab in raise () from /lib/libpthread.so.0
#1  0xb6e7cd5f in nsProfileLock::FatalSignalHandler (signo=11) at nsProfileLock.cpp:212
#2  <signal handler called>
#3  NSSRWLock_LockRead_Util (rwlock=0x0) at nssrwlk.c:177
#4  0xb6b85293 in SECMOD_GetReadLock (modLock=0x0) at pk11list.c:71
#5  0xb6ba1b61 in PK11_GetAllTokens (type=592, needRW=0, loadCerts=1, wincx=0x0) at pk11slot.c:1778
#6  0xb6ba24cc in PK11_GetBestSlotMultiple (type=0xb243cff4, mech_count=1, wincx=0x0) at pk11slot.c:1868
#7  0xb6ba2551 in PK11_GetBestSlot (type=592, wincx=0x0) at pk11slot.c:1929
#8  0xb6b8472e in PK11_CreateDigestContext (hashAlg=SEC_OID_SHA256) at pk11cxt.c:411
#9  0xb6b76b6f in sha256_NewContext () at sechash.c:96
#10 0xb6b76cbf in HASH_Create (type=HASH_AlgSHA256) at sechash.c:327
#11 0xb74d13cb in nsCryptoHash::Init (this=0x8d86730, algorithm=4) at nsNSSComponent.cpp:2435
#12 0xb74ba194 in nsUrlClassifierHash<4u>::FromPlaintext (this=0xb243d228, plainText=@0xb243d1d4, hash=0x8d86730)
    at nsUrlClassifierDBService.cpp:228
#13 0xb74b7796 in nsUrlClassifierDBServiceWorker::DoLookup (this=0x8d5b4d0, spec=@0xb243d268, c=0x928a758)
    at nsUrlClassifierDBService.cpp:1599
#14 0xb74b7b12 in nsUrlClassifierDBServiceWorker::HandlePendingLookups (this=0x8d5b4d0) at nsUrlClassifierDBService.cpp:1648
#15 0xb76d17bd in NS_InvokeByIndex_P () from /usr/lib/xulrunner-1.9/libxul.so
#16 0xb76c918f in nsProxyObjectCallInfo::Run (this=0x92892d0) at nsProxyEvent.cpp:181
#17 0xb76c45d2 in nsThread::ProcessNextEvent (this=0x8d5ab28, mayWait=1, result=0xb243d334) at nsThread.cpp:510
#18 0xb769154c in NS_ProcessNextEvent_P (thread=0xb243dc04, mayWait=1) at nsThreadUtils.cpp:227
#19 0xb76c4e88 in nsThread::ThreadFunc (arg=0x8d5ab28) at nsThread.cpp:254
#20 0x41dc2f51 in ?? () from /lib/libnspr4.so
#21 0x411c61e0 in start_thread () from /lib/libpthread.so.0
#22 0x410ffdfe in clone () from /lib/libc.so.6
(gdb)

Version-Release number of selected component (if applicable):

firefox 3.0.2, xulrunner 1.9.0.2, NSS 3.12.1.1.

Also tried NSS 3.12.2.0 (from rawhide), with the same results.

How reproducible:

Not sure, but may try to browse 10-15 pages on livejournal.com.

Comment 1 Martin Stransky 2008-11-10 07:30:53 UTC
Is it your bug, Kai?

Comment 2 Dmitry Antipov 2008-11-13 07:50:54 UTC
Another example of crash in the same place:

#0  0x411cdcab in raise () from /lib/libpthread.so.0
#1  0xb6b20d77 in nsProfileLock::FatalSignalHandler (signo=11) at nsProfileLock.cpp:212
#2  <signal handler called>
#3  NSSRWLock_LockRead_Util (rwlock=0x0) at nssrwlk.c:177
#4  0xb68092d3 in SECMOD_GetReadLock (modLock=0x0) at pk11list.c:71
#5  0xb6825ba1 in PK11_GetAllTokens (type=2147487486, needRW=0, loadCerts=1, wincx=0x0) at pk11slot.c:1778
#6  0xb682650c in PK11_GetBestSlotMultiple (type=0xbf9537c0, mech_count=1, wincx=0x0) at pk11slot.c:1868
#7  0xb6826591 in PK11_GetBestSlot (type=2147487486, wincx=0x0) at pk11slot.c:1929
#8  0xb682661c in PK11_RandomUpdate (data=0xbf953898, bytes=4) at pk11slot.c:2049
#9  0xb7177163 in nsNSSComponent::RandomUpdate (this=0x86f2c90, entropy=0xbf953898, bufLen=4) at nsNSSComponent.cpp:1943
#10 0xb71674d0 in nsEntropyCollector::RandomUpdate (this=0x8639a68, new_entropy=0xbf953898, bufLen=1)
    at nsEntropyCollector.cpp:68
#11 0xb6f3dc35 in nsGlobalWindow::PreHandleEvent (this=0x86e9810, aVisitor=@0xbf953908) at nsGlobalWindow.cpp:2189
#12 0xb6e4fc53 in nsEventTargetChainItem::PreHandleEvent (this=0x9dd1448, aVisitor=@0xbf953908) at nsEventDispatcher.cpp:186
#13 0xb6e50310 in nsEventDispatcher::Dispatch (aTarget=0x9734ac0, aPresContext=0x96cc788, aEvent=0xbf953be4, aDOMEvent=0x0, 
    aEventStatus=0xbf953a98, aCallback=0xbf9539a0) at nsEventDispatcher.cpp:468
#14 0xb6cae2c6 in PresShell::HandleEventInternal (this=0x96d1130, aEvent=0xbf953be4, aView=0x96cd088, aStatus=0xbf953a98)
    at nsPresShell.cpp:5921
#15 0xb6caea6e in PresShell::HandlePositionedEvent (this=0x96d1130, aView=0x96cd088, aTargetFrame=0x9835c3c, aEvent=0xbf953be4, 
    aEventStatus=0xbf953a98) at nsPresShell.cpp:5809
#16 0xb6caee79 in PresShell::HandleEvent (this=0x96d1130, aView=0x96cd088, aEvent=0xbf953be4, aEventStatus=0xbf953a98)
    at nsPresShell.cpp:5669
#17 0xb6f28ad4 in nsViewManager::HandleEvent (this=0x96cd028, aView=0x96cd088, aPoint={x = 21270, y = 6990}, aEvent=0xbf953be4, 
    aCaptured=0) at nsViewManager.cpp:1382
#18 0xb6f2a83e in nsViewManager::DispatchEvent (this=0x96cd028, aEvent=0xbf953be4, aStatus=0xbf953b80) at nsViewManager.cpp:1337
#19 0xb6f2556c in HandleEvent (aEvent=0xbf953be4) at nsView.cpp:168
#20 0xb7282608 in nsCommonWidget::DispatchEvent (this=0x9820098, aEvent=0xbf953be4, aStatus=@0xbf953c54)
    at nsCommonWidget.cpp:158
#21 0xb727ce04 in nsWindow::OnMotionNotifyEvent (this=0x9820098, aWidget=0x8581720, aEvent=0x809de48) at nsWindow.cpp:2026
#22 0xb727cfd0 in motion_notify_event_cb (widget=0x8581720, event=0x809de48) at nsWindow.cpp:4643
#23 0x41a1c576 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#24 0x08581720 in ?? ()
#25 0x0809de48 in ?? ()
#26 0x00000000 in ?? ()

Comment 3 Kai Engert (:kaie) (inactive account) 2008-11-18 15:50:02 UTC
(In reply to comment #0)
> #10 0xb6b76cbf in HASH_Create (type=HASH_AlgSHA256) at sechash.c:327

This stack might be 
https://bugzilla.mozilla.org/show_bug.cgi?id=427715
(not yet solved)

I think the second stack from comment 2 might be the same issue (not sure).

Comment 4 Brian Morrison 2008-12-06 19:18:48 UTC
I've been seeing this sort of crash when using Claws Mail, the RSSyl RSS plugin which uses curl that uses nss when fetching https:// RSS feeds.

Trace as follows:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x427c9950 (LWP 11764)]
NSSRWLock_LockRead_Util (rwlock=<value optimized out>) at nssrwlk.c:177
177	    PZ_Lock(rwlock->rw_lock);
Missing separate debuginfos, use: debuginfo-install atk.x86_64 bluez-libs.x86_64 bug-buddy.x86_64 bzip2.x86_64 cairo.x86_64 compface.x86_64 cyrus-sasl.x86_64 db4.x86_64 dbus-glib.x86_64 dbus.x86_64 e2fsprogs.x86_64 elfutils.x86_64 enchant.x86_64 expat.x86_64 fontconfig.x86_64 freetype.x86_64 gcc.x86_64 gnutls.x86_64 hunspell.x86_64 keyutils.x86_64 krb5.x86_64 libICE.x86_64 libSM.x86_64 libX11.x86_64 libXau.x86_64 libXcomposite.x86_64 libXcursor.x86_64 libXdmcp.x86_64 libXext.x86_64 libXfixes.x86_64 libXi.x86_64 libXinerama.x86_64 libXrandr.x86_64 libXrender.x86_64 libarchive.x86_64 libcap.x86_64 libetpan.x86_64 libgcrypt.x86_64 libgpg-error.x86_64 libidn.x86_64 libjpeg.x86_64 libnotify.x86_64 libpng.x86_64 libselinux.x86_64 libssh2.x86_64 libtasn1.x86_64 libusb.x86_64 libxml2.x86_64 nspr.x86_64 openldap.x86_64 perl.x86_64 pilot-link.x86_64 pixman.x86_64 startup-notification.x86_64 zlib.x86_64
(gdb) thread apply all bt

Thread 6 (Thread 0x427c9950 (LWP 11764)):
#0  NSSRWLock_LockRead_Util (rwlock=<value optimized out>) at nssrwlk.c:177
#1  0x0000003ddee59d98 in PK11_TokenExists (type=<value optimized out>)
    at pk11slot.c:1733
#2  0x0000003ddf60eba7 in ssl3_config_match_init (ss=<value optimized out>)
    at ssl3con.c:658
#3  0x0000003ddf613e2f in ssl2_ConstructCipherSpecs (ss=<value optimized out>)
    at sslcon.c:206
#4  0x0000003ddf615ed8 in ssl2_BeginClientHandshake (ss=<value optimized out>)
    at sslcon.c:3018
#5  0x0000003ddf61b495 in ssl_Do1stHandshake (ss=<value optimized out>)
    at sslsecur.c:151
#6  0x0000003ddf61ca0f in SSL_ForceHandshake (fd=<value optimized out>)
    at sslsecur.c:407
#7  0x0000003ddcc3bbcf in Curl_nss_connect (conn=<value optimized out>, 
    sockindex=<value optimized out>) at nss.c:1035
#8  0x0000003ddcc1590c in Curl_http_connect (conn=<value optimized out>, 
    done=<value optimized out>) at http.c:1719
#9  0x0000003ddcc1bcd2 in Curl_protocol_connect (conn=<value optimized out>, 
    protocol_done=<value optimized out>) at url.c:2803
#10 0x0000003ddcc1e725 in Curl_connect (data=<value optimized out>, 
    in_connect=<value optimized out>, asyncp=<value optimized out>, 
---Type <return> to continue, or q <return> to quit---
    protocol_done=<value optimized out>) at url.c:4289
#11 0x0000003ddcc29c1b in Curl_perform (data=<value optimized out>)
    at transfer.c:2291
#12 0x00007f24ba56aa16 in rssyl_fetch_feed_threaded (arg=<value optimized out>)
    at feed.c:172
#13 0x000000346600729a in start_thread (arg=<value optimized out>)
    at pthread_create.c:297
#14 0x00000034654e439d in clone () from /lib64/libc.so.6

Thread 2 (Thread 0x4133c950 (LWP 9645)):
#0  0x000000346600af19 in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib64/libpthread.so.0
#1  0x0000003dd642f1e9 in mailsem_internal_wait ()
   from /usr/lib64/libetpan.so.13
#2  0x00000000005bccf1 in thread_run (data=<value optimized out>)
    at etpan-thread-manager.c:323
#3  0x000000346600729a in start_thread (arg=<value optimized out>)
    at pthread_create.c:297
#4  0x00000034654e439d in clone () from /lib64/libc.so.6

Thread 1 (Thread 0x7f24c4fbe800 (LWP 9389)):
#0  0x000000346600e491 in nanosleep () from /lib64/libpthread.so.0
#1  0x0000003dcec62568 in IA__g_usleep (microseconds=<value optimized out>)
---Type <return> to continue, or q <return> to quit---
    at gtimer.c:170
#2  0x00007f24ba56b465 in rssyl_fetch_feed (
    url=0x7f24ba47f6d0 "https://billing.enta.net/usagefeed.php?ka=7aa9f845d42c6860be9afcc8b160fe30&kb=xZCKHyW60KHuf08CR64k2g%3D%3D&con_type=adsl&type=rss", 
    last_update=1228374885, title=0x7fffcd01af28, error=0x7fffcd01af20)
    at feed.c:304
#3  0x00007f24ba56c20a in rssyl_update_feed (ritem=0x7f24bbe47070)
    at feed.c:1382
#4  0x00007f24ba570b9a in rssyl_refresh_timeout_cb (data=0x7f24ba460e30)
    at rssyl_cb_gtk.c:91
#5  0x0000003dcec37beb in g_timeout_dispatch (source=<value optimized out>, 
    callback=<value optimized out>, user_data=<value optimized out>)
    at gmain.c:3446
#6  0x0000003dcec3742b in IA__g_main_context_dispatch (
    context=<value optimized out>) at gmain.c:2012
#7  0x0000003dcec3ac0d in g_main_context_iterate (
    context=<value optimized out>, block=<value optimized out>, 
    dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2645
#8  0x0000003dcec3adcb in IA__g_main_context_iteration (
    context=<value optimized out>, may_block=<value optimized out>)
    at gmain.c:2708
#9  0x0000003dd3d83fdf in IA__gtk_main_iteration () at gtkmain.c:1251
#10 0x00007f24ba56af35 in rssyl_fetch_feed (
---Type <return> to continue, or q <return> to quit---
    url=0x7f24ba47f940 "http://noc.enta.net/?feed=rss2", 
    last_update=1228374890, title=0x7fffcd01b208, error=0x7fffcd01b200)
    at feed.c:291
#11 0x00007f24ba56c20a in rssyl_update_feed (ritem=0x7f24bbe46c60)
    at feed.c:1382
#12 0x00007f24ba570b9a in rssyl_refresh_timeout_cb (data=0x7f24ba461eb0)
    at rssyl_cb_gtk.c:91
#13 0x0000003dcec37beb in g_timeout_dispatch (source=<value optimized out>, 
    callback=<value optimized out>, user_data=<value optimized out>)
    at gmain.c:3446
#14 0x0000003dcec3742b in IA__g_main_context_dispatch (
    context=<value optimized out>) at gmain.c:2012
#15 0x0000003dcec3ac0d in g_main_context_iterate (
    context=<value optimized out>, block=<value optimized out>, 
    dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2645
#16 0x0000003dcec3adcb in IA__g_main_context_iteration (
    context=<value optimized out>, may_block=<value optimized out>)
    at gmain.c:2708
#17 0x0000003dd3d83fdf in IA__gtk_main_iteration () at gtkmain.c:1251
#18 0x00007f24ba56af35 in rssyl_fetch_feed (
    url=0x7f24ba47f040 "http://noc.enta.net/centralpipe/?un=fenrir@adsllogin.co.uk", last_update=1228374885, title=0x7fffcd01b4e8, error=0x7fffcd01b4e0)
    at feed.c:291
---Type <return> to continue, or q <return> to quit---
#19 0x00007f24ba56c20a in rssyl_update_feed (ritem=0x7f24bbe46830)
    at feed.c:1382
#20 0x00007f24ba570b9a in rssyl_refresh_timeout_cb (data=0x7f24ba47f0a0)
    at rssyl_cb_gtk.c:91
#21 0x0000003dcec37beb in g_timeout_dispatch (source=<value optimized out>, 
    callback=<value optimized out>, user_data=<value optimized out>)
    at gmain.c:3446
#22 0x0000003dcec3742b in IA__g_main_context_dispatch (
    context=<value optimized out>) at gmain.c:2012
#23 0x0000003dcec3ac0d in g_main_context_iterate (
    context=<value optimized out>, block=<value optimized out>, 
    dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2645
#24 0x0000003dcec3adcb in IA__g_main_context_iteration (
    context=<value optimized out>, may_block=<value optimized out>)
    at gmain.c:2708
#25 0x0000003dd3d83fdf in IA__gtk_main_iteration () at gtkmain.c:1251
#26 0x00007f24ba56af35 in rssyl_fetch_feed (
    url=0x7f24ba47f890 "http://newsrss.bbc.co.uk/rss/sportonline_uk_edition/motorsport/rss.xml", last_update=1228374890, title=0x7fffcd01b7c8, 
    error=0x7fffcd01b7c0) at feed.c:291
#27 0x00007f24ba56c20a in rssyl_update_feed (ritem=0x7f24bbe45ba0)
    at feed.c:1382
#28 0x00007f24ba570b9a in rssyl_refresh_timeout_cb (data=0x7f24ba462c90)
---Type <return> to continue, or q <return> to quit---
    at rssyl_cb_gtk.c:91
#29 0x0000003dcec37beb in g_timeout_dispatch (source=<value optimized out>, 
    callback=<value optimized out>, user_data=<value optimized out>)
    at gmain.c:3446
#30 0x0000003dcec3742b in IA__g_main_context_dispatch (
    context=<value optimized out>) at gmain.c:2012
#31 0x0000003dcec3ac0d in g_main_context_iterate (
    context=<value optimized out>, block=<value optimized out>, 
    dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2645
#32 0x0000003dcec3adcb in IA__g_main_context_iteration (
    context=<value optimized out>, may_block=<value optimized out>)
    at gmain.c:2708
#33 0x0000003dd3d83fdf in IA__gtk_main_iteration () at gtkmain.c:1251
#34 0x00007f24ba56af35 in rssyl_fetch_feed (
    url=0x7f24ba462370 "http://www.newswireless.net/includes/newswireless.rss", last_update=1228374923, title=0x7fffcd01baa8, error=0x7fffcd01baa0)
    at feed.c:291
#35 0x00007f24ba56c20a in rssyl_update_feed (ritem=0x7f24bbe44250)
    at feed.c:1382
#36 0x00007f24ba570b9a in rssyl_refresh_timeout_cb (data=0x7f24ba462790)
    at rssyl_cb_gtk.c:91
#37 0x0000003dcec37beb in g_timeout_dispatch (source=<value optimized out>, 
    callback=<value optimized out>, user_data=<value optimized out>)
---Type <return> to continue, or q <return> to quit---
    at gmain.c:3446
#38 0x0000003dcec3742b in IA__g_main_context_dispatch (
    context=<value optimized out>) at gmain.c:2012
#39 0x0000003dcec3ac0d in g_main_context_iterate (
    context=<value optimized out>, block=<value optimized out>, 
    dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2645
#40 0x0000003dcec3adcb in IA__g_main_context_iteration (
    context=<value optimized out>, may_block=<value optimized out>)
    at gmain.c:2708
#41 0x0000003dd3d83fdf in IA__gtk_main_iteration () at gtkmain.c:1251
#42 0x00007f24ba56af35 in rssyl_fetch_feed (
    url=0x7f24ba1b2b20 "http://newsrss.bbc.co.uk/rss/newsonline_uk_edition/technology/rss.xml", last_update=1228374921, title=0x7fffcd01bd88, 
    error=0x7fffcd01bd80) at feed.c:291
#43 0x00007f24ba56c20a in rssyl_update_feed (ritem=0x7f24bbe41fe0)
    at feed.c:1382
#44 0x00007f24ba570b9a in rssyl_refresh_timeout_cb (data=0x7f24ba460690)
    at rssyl_cb_gtk.c:91
#45 0x0000003dcec37beb in g_timeout_dispatch (source=<value optimized out>, 
    callback=<value optimized out>, user_data=<value optimized out>)
    at gmain.c:3446
#46 0x0000003dcec3742b in IA__g_main_context_dispatch (
    context=<value optimized out>) at gmain.c:2012
---Type <return> to continue, or q <return> to quit---
#47 0x0000003dcec3ac0d in g_main_context_iterate (
    context=<value optimized out>, block=<value optimized out>, 
    dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2645
#48 0x0000003dcec3adcb in IA__g_main_context_iteration (
    context=<value optimized out>, may_block=<value optimized out>)
    at gmain.c:2708
#49 0x0000003dd3d83fdf in IA__gtk_main_iteration () at gtkmain.c:1251
#50 0x00007f24ba56af35 in rssyl_fetch_feed (
    url=0x7f24ba460250 "http://newsrss.bbc.co.uk/rss/newsplayer_uk_edition/health/rss.xml", last_update=1228374921, title=0x7fffcd01c068, error=0x7fffcd01c060)
    at feed.c:291
#51 0x00007f24ba56c20a in rssyl_update_feed (ritem=0x7f24bbe418e0)
    at feed.c:1382
#52 0x00007f24ba570b9a in rssyl_refresh_timeout_cb (data=0x7f24ba460a00)
    at rssyl_cb_gtk.c:91
#53 0x0000003dcec37beb in g_timeout_dispatch (source=<value optimized out>, 
    callback=<value optimized out>, user_data=<value optimized out>)
    at gmain.c:3446
#54 0x0000003dcec3742b in IA__g_main_context_dispatch (
    context=<value optimized out>) at gmain.c:2012
#55 0x0000003dcec3ac0d in g_main_context_iterate (
    context=<value optimized out>, block=<value optimized out>, 
    dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2645
---Type <return> to continue, or q <return> to quit---
#56 0x0000003dcec3adcb in IA__g_main_context_iteration (
    context=<value optimized out>, may_block=<value optimized out>)
    at gmain.c:2708
#57 0x0000003dd3d83fdf in IA__gtk_main_iteration () at gtkmain.c:1251
#58 0x00007f24ba56af35 in rssyl_fetch_feed (
    url=0x7f24ba4602f0 "http://newsrss.bbc.co.uk/rss/newsonline_uk_edition/england/beds/bucks/herts/rss.xml", last_update=1228374924, title=0x7fffcd01c348, 
    error=0x7fffcd01c340) at feed.c:291
#59 0x00007f24ba56c20a in rssyl_update_feed (ritem=0x7f24bbe41200)
    at feed.c:1382
#60 0x00007f24ba570b9a in rssyl_refresh_timeout_cb (data=0x7f24bbe51f70)
    at rssyl_cb_gtk.c:91
#61 0x0000003dcec37beb in g_timeout_dispatch (source=<value optimized out>, 
    callback=<value optimized out>, user_data=<value optimized out>)
    at gmain.c:3446
#62 0x0000003dcec3742b in IA__g_main_context_dispatch (
    context=<value optimized out>) at gmain.c:2012
#63 0x0000003dcec3ac0d in g_main_context_iterate (
    context=<value optimized out>, block=<value optimized out>, 
    dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2645
#64 0x0000003dcec3adcb in IA__g_main_context_iteration (
    context=<value optimized out>, may_block=<value optimized out>)
    at gmain.c:2708
---Type <return> to continue, or q <return> to quit---
#65 0x0000003dd3d83fdf in IA__gtk_main_iteration () at gtkmain.c:1251
#66 0x00007f24ba56af35 in rssyl_fetch_feed (
    url=0x7f24bbe521d0 "http://www.colino.net/claws-mail/rss.php3", 
    last_update=1228374898, title=0x7fffcd01c628, error=0x7fffcd01c620)
    at feed.c:291
#67 0x00007f24ba56c20a in rssyl_update_feed (ritem=0x7f24bbe405a0)
    at feed.c:1382
#68 0x00007f24ba570b9a in rssyl_refresh_timeout_cb (data=0x7f24bbe522b0)
    at rssyl_cb_gtk.c:91
#69 0x0000003dcec37beb in g_timeout_dispatch (source=<value optimized out>, 
    callback=<value optimized out>, user_data=<value optimized out>)
    at gmain.c:3446
#70 0x0000003dcec3742b in IA__g_main_context_dispatch (
    context=<value optimized out>) at gmain.c:2012
#71 0x0000003dcec3ac0d in g_main_context_iterate (
    context=<value optimized out>, block=<value optimized out>, 
    dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2645
#72 0x0000003dcec3adcb in IA__g_main_context_iteration (
    context=<value optimized out>, may_block=<value optimized out>)
    at gmain.c:2708
#73 0x0000003dd3d83fdf in IA__gtk_main_iteration () at gtkmain.c:1251
#74 0x00007f24ba56af35 in rssyl_fetch_feed (
    url=0x7f24bbe52eb0 "http://www.theregister.co.uk/excerpts.rss", 
---Type <return> to continue, or q <return> to quit---
    last_update=1228374901, title=0x7fffcd01c908, error=0x7fffcd01c900)
    at feed.c:291
#75 0x00007f24ba56c20a in rssyl_update_feed (ritem=0x2832f30) at feed.c:1382
#76 0x00007f24ba570b9a in rssyl_refresh_timeout_cb (data=0x7f24bbe526e0)
    at rssyl_cb_gtk.c:91
#77 0x0000003dcec37beb in g_timeout_dispatch (source=<value optimized out>, 
    callback=<value optimized out>, user_data=<value optimized out>)
    at gmain.c:3446
#78 0x0000003dcec3742b in IA__g_main_context_dispatch (
    context=<value optimized out>) at gmain.c:2012
#79 0x0000003dcec3ac0d in g_main_context_iterate (
    context=<value optimized out>, block=<value optimized out>, 
    dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2645
#80 0x0000003dcec3adcb in IA__g_main_context_iteration (
    context=<value optimized out>, may_block=<value optimized out>)
    at gmain.c:2708
#81 0x0000003dd3d83fdf in IA__gtk_main_iteration () at gtkmain.c:1251
#82 0x00007f24ba56af35 in rssyl_fetch_feed (
    url=0x7f24bbe51190 "http://www.gpsinformation.org/allory/whats_new.xml", 
    last_update=1228374924, title=0x7fffcd01cbe8, error=0x7fffcd01cbe0)
    at feed.c:291
#83 0x00007f24ba56c20a in rssyl_update_feed (ritem=0x28325c0) at feed.c:1382
#84 0x00007f24ba570b9a in rssyl_refresh_timeout_cb (data=0x7f24bbe51b80)
---Type <return> to continue, or q <return> to quit---
    at rssyl_cb_gtk.c:91
#85 0x0000003dcec37beb in g_timeout_dispatch (source=<value optimized out>, 
    callback=<value optimized out>, user_data=<value optimized out>)
    at gmain.c:3446
#86 0x0000003dcec3742b in IA__g_main_context_dispatch (
    context=<value optimized out>) at gmain.c:2012
#87 0x0000003dcec3ac0d in g_main_context_iterate (
    context=<value optimized out>, block=<value optimized out>, 
    dispatch=<value optimized out>, self=<value optimized out>) at gmain.c:2645
#88 0x0000003dcec3b13d in IA__g_main_loop_run (loop=<value optimized out>)
    at gmain.c:2853
#89 0x0000003dd3d83db0 in IA__gtk_main () at gtkmain.c:1163
#90 0x00000000004dba4a in main (argc=1, argv=0x7fffcd01d328) at main.c:1658
Current language:  auto; currently asm
177	    PZ_Lock(rwlock->rw_lock);
Current language:  auto; currently c

Pretty sure this is the same issue, apparently some sort of fix can be found here:

https://bugzilla.mozilla.org/show_bug.cgi?id=456705

on asking about it I was told this is to do with psm in Firefox, but I assume that uses nss too. Not clear enough to be sure one way or the other.

In any case, the latest nss updates in Fedora 9 have not resolved this crash for me so I expect that nss needs to be rebuilt against whatever code comes out of Mozilla to fix it.

Comment 5 Bug Zapper 2009-06-10 03:13:46 UTC
This message is a reminder that Fedora 9 is nearing its end of life.
Approximately 30 (thirty) days from now Fedora will stop maintaining
and issuing updates for Fedora 9.  It is Fedora's policy to close all
bug reports from releases that are no longer maintained.  At that time
this bug will be closed as WONTFIX if it remains open with a Fedora 
'version' of '9'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version prior to Fedora 9's end of life.

Bug Reporter: Thank you for reporting this issue and we are sorry that 
we may not be able to fix it before Fedora 9 is end of life.  If you 
would still like to see this bug fixed and are able to reproduce it 
against a later version of Fedora please change the 'version' of this 
bug to the applicable version.  If you are unable to change the version, 
please add a comment here and someone will do it for you.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events.  Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

The process we are following is described here: 
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Comment 6 Kai Engert (:kaie) (inactive account) 2009-06-11 01:30:28 UTC
I see you are using "curl" while experiencing this bug.
During the last months a bug got fixed in NSS (in particular the area that curl+nss uses), that might have caused this bug.

I don't have the bug number at hand, but would have to research it.
Does the latest available nss fedora 9 update package fix this bug for you?

Comment 7 Brian Morrison 2009-06-11 07:18:20 UTC
I have all the latest fixed packages (including nss related packages) applied to Fedora 9, but this bug still triggers.

I will be updating to F11 soon, so will see if it is fixed in the newer release.

Thanks for your help.

Comment 8 Bug Zapper 2009-07-14 14:18:56 UTC
Fedora 9 changed to end-of-life (EOL) status on 2009-07-10. Fedora 9 is 
no longer maintained, which means that it will not receive any further 
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of 
Fedora please feel free to reopen this bug against that version.

Thank you for reporting this bug and we are sorry it could not be fixed.