Bug 542143

Summary: [abrt] crash detected in firefox-3.5.5-1.fc12
Product: [Fedora] Fedora Reporter: Sandro Mani <manisandro>
Component: firefoxAssignee: Martin Stransky <stransky>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 12CC: gecko-bugs-nobody, mcepl
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard: abrt_hash:f9ed81398c134ab8d30fd6ba899f8b59cfb83a3b
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-12-09 23:49:11 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace none

Description Sandro Mani 2009-11-28 15:04:12 UTC 
abrt detected a crash.

How to reproduce
-----
1. Start firefox
2. Start typing in the addressbar
3. Firefox will crash with ca 50% probability

Comment
-----
Some times firefox also crashes shortly after one stops typing, therefore the cause may not be necessarily
the typing but some triger that is fired when starting to type. Does not occur if opening websites only through
bookmarks or typing somewhere else. Also crashes occasionally when clicking on the certificate information left of the addressbar for sites with SSL.

Attached file: backtrace
cmdline: /usr/lib64/firefox-3.5.5/firefox
component: firefox
executable: /usr/lib64/firefox-3.5.5/firefox
kernel: 2.6.31.5-127.fc12.x86_64
package: firefox-3.5.5-1.fc12
rating: 3
reason: Process was terminated by signal 11
Comment 1 Sandro Mani 2009-11-28 15:04:15 UTC 
Created attachment 374419 [details]
File: backtrace
Comment 2 Matěj Cepl 2009-12-09 23:48:51 UTC 
#2  <signal handler called>
No symbol table info available.
#3  sqlite3VdbeExec (p=0x7f5369329798) at sqlite3.c:53010
        pc = <value optimized out>
        pOp = 0x7f5369357c68
        rc = 0
        db = 0x7f536941d008
        encoding = <value optimized out>
        pIn1 = <value optimized out>
        pIn2 = 0x7f53693597e8
        pIn3 = 0x7f5369359238
        pOut = 0x7f5369359970
        iCompare = <value optimized out>
        aPermute = <value optimized out>
        nProgressOps = 0
        u = {aa = {pcDest = 6}, ab = {p1 = 6, p2 = 32595, n = 0, 
            pVar = 0x100000000}, ac = {
            zMalloc = 0x7f5300000006 <Address 0x7f5300000006 out of bounds>, 
            n = 0, p1 = 0, p2 = 0}, ad = {pMem = 0x7f5300000006, i = 0}, 
          ae = {nByte = 139994459013126}, af = {flags = 6, iA = 0, 
            iB = 4294967296, rA = 6.9167266182315494e-310, rB = 0}, ag = {
            i = 6, pArg = 0x0, ctx = {pFunc = 0x100000000, 
              pVdbeFunc = 0x7f5362206808, s = {u = {i = 0, nZero = 0, 
                  pDef = 0x0, pRowSet = 0x0}, r = 6.9167266182414307e-310, 
                db = 0x7f53622068a8, z = 0x7f53622068bc "\a", n = 5, 
                flags = 4, type = 0 '\000', enc = 0 '\000', xDel = 0x3, 
                zMalloc = 0x0}, pMem = 0x7f53693597e8, isError = 0, 
              pColl = 0x0}, apVal = 0x0, n = 0}, ah = {a = 139994459013126, 
            b = 0}, ai = {flags = 6, res = 32595, affinity = 0 '\000'}, aj = {
            n = 6, i = 32595, p1 = 0, p2 = 0, pKeyInfo = 0x100000000, 
            idx = 1646290952, pColl = 0x0, bRev = 1646291152}, ak = {v1 = 6, 
            v2 = 32595}, al = {c = 6}, am = {payloadSize = 6, 
            payloadSize64 = 0, p1 = 0, p2 = 1, pC = 0x7f5362206808, 
            zRec = 0x0, pCrsr = 0x7f53622068d0, aType = 0x7f53622068a8, 
            aOffset = 0x7f53622068bc, nField = 5, len = 4, i = 3, 
            zData = 0x0, pDest = 0x7f53693597e8, sMem = {u = {i = 0, 
                nZero = 0, pDef = 0x0, pRowSet = 0x0}, r = 0, db = 0x0, 
              z = 0x0, n = 0, flags = 0, type = 0 '\000', enc = 0 '\000', 
              xDel = 0, zMalloc = 0x0}, zIdx = 0x7f536904b531 "", 
            zEndHdr = 0x7f536904b531 "", offset = 4, offset64 = 17, 
            szHdr = 1, avail = 0}, an = {
            zAffinity = 0x7f5300000006 <Address 0x7f5300000006 out of bounds>, pData0 = 0x0, pLast = 0x100000000, pRec = 0x7f5362206808}, ao = {
            zNewRecord = 0x7f5300000006 <Address 0x7f5300000006 out of bounds>, pRec = 0x0, nData = 4294967296, nHdr = 1646290952, nByte = 0, 
            nZero = 1646291152, nVarint = 32595, serial_type = 1646291112, 
            pData0 = 0x7f53622068bc, pLast = 0x400000005, nField = 3, 
            zAffinity = 0x0, file_format = 1765119976, i = 32595, len = 0}, 
          ap = {nEntry = 139994459013126, pCrsr = 0x0}, aq = {
            pBt = 0x7f5300000006}, ar = {p1 = 6, zName = 0x0, nName = 0, 
            pNew = 0x7f5362206808, pSavepoint = 0x0, pTmp = 0x7f53622068d0, 
            iSavepoint = 1646291112, ii = 32595}, as = {
            desiredAutoCommit = 6, iRollback = 32595, turnOnAC = 0}, at = {
            pBt = 0x7f5300000006}, au = {iMeta = 6, iDb = 32595, 
            iCookie = 0}, av = {pDb = 0x7f5300000006}, aw = {iMeta = 6, 
            pBt = 0x0}, ax = {nField = 6, pKeyInfo = 0x0, p2 = 0, iDb = 1, 
            wrFlag = 1646290952, pX = 0x0, pCur = 0x7f53622068d0, 
            pDb = 0x7f53622068a8}, ay = {pCx = 0x7f5300000006}, az = {
            pCx = 0x7f5300000006}, ba = {res = 6, oc = 32595, pC = 0x0, r = {
              pKeyInfo = 0x100000000, nField = 26632, flags = 25120, 
              rowid = 0, aMem = 0x7f53622068d0}, nField = 1646291112, 
            iKey = 139996105304252}, bb = {pC = 0x7f5300000006}, bc = {
            alreadyExists = 6, pC = 0x0, res = 0, pIdxKey = 0x7f5362206808, 
            aTempRec = "\000\000\000\000\000\000\000\000\320h bS\177\000\000\250h bS\177\000\000\274h bS\177\000\000\005\000\000\000\004\000\000\000\003", '\000' <repeats 15 times>"\350, \227\065iS\177", '\000' <repeats 58 times>, "1\265\004iS\177\000\000\061\265\004iS\177\000\000\004\000\000\000\067\000\000\000\021\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000 %\227<7\000\000\000\340s\227<7\000\000\000@\000\000\000\000\000\000\000/mi<7", '\000' <repeats 11 times>, "?\000\000\000\000\000"}, bd = {ii = 6, pCx = 0x0, 
            pCrsr = 0x100000000, nField = 26632, aMem = 0x0, r = {
              pKeyInfo = 0x7f53622068d0, nField = 26792, flags = 25120, 
              rowid = 139996105304252, aMem = 0x400000005}, R = 3}, be = {
            pC = 0x7f5300000006, pCrsr = 0x0, res = 0, 
            iKey = 139996105304072}, bf = {v = 139994459013126, pC = 0x0, 
            res = 0, cnt = 1, pMem = 0x7f5362206808}, bg = {
            pData = 0x7f5300000006, pKey = 0x0, iKey = 4294967296, 
            pC = 0x7f5362206808, nZero = 0, seekResult = 0, 
            zDb = 0x7f53622068d0 "\310^IiS\177", zTbl = 0x7f53622068a8 "", 
            op = 1646291132}, bh = {iKey = 139994459013126, pC = 0x0}, bi = {
            pC = 0x7f5300000006, pCrsr = 0x0, n = 0, n64 = 139996105304072}, 
          bj = {pC = 0x7f5300000006, v = 0, pVtab = 0x100000000, 
            pModule = 0x7f5362206808}, bk = {pC = 0x7f5300000006}, bl = {
            pC = 0x7f5300000006, pCrsr = 0x0, res = 0}, bm = {
            pC = 0x7f5300000006, pCrsr = 0x0, res = 0}, bn = {
            pC = 0x7f5300000006, pCrsr = 0x0, res = 0}, bo = {
            pC = 0x7f5300000006, pCrsr = 0x0, nKey = 0, 
            zKey = 0x7f5362206808 "\320h bS\177"}, bp = {pC = 0x7f5300000006, 
            pCrsr = 0x0, res = 0, r = {pKeyInfo = 0x7f5362206808, nField = 0, 
              flags = 0, rowid = 139996105304272, aMem = 0x7f53622068a8}}, 
          bq = {pCrsr = 0x7f5300000006, pC = 0x0, rowid = 4294967296}, br = {
            pC = 0x7f5300000006, res = 0, r = {pKeyInfo = 0x100000000, 
              nField = 26632, flags = 25120, rowid = 0, 
              aMem = 0x7f53622068d0}}, bs = {iMoved = 6, iCnt = 32595, 
            pVdbe = 0x0, iDb = 0}, bt = {nChange = 6}, bu = {pgno = 6, 
            flags = 32595, pDb = 0x0}, bv = {iDb = 6, zMaster = 0x0, 
            zSql = 0x100000000 <Address 0x100000000 out of bounds>, 
            initData = {db = 0x7f5362206808, iDb = 0, 
              pzErrMsg = 0x7f53622068d0, rc = 1646291112}}, bw = {nRoot = 6, 
            aRoot = 0x0, j = 0, nErr = 1, z = 0x7f5362206808 "\320h bS\177", 
            pnErr = 0x0}, bx = {pIdx = 0x7f5300000006, pVal = 0x0}, by = {
            pIdx = 0x7f5300000006, val = 0}, bz = {iSet = 6, exists = 32595}, 
          ca = {i = 6, pContext = 0x0}, cb = {pContext = 0x7f5300000006}, 
          cc = {n = 6, i = 32595, pMem = 0x0, pRec = 0x100000000, ctx = {
              pFunc = 0x7f5362206808, pVdbeFunc = 0x0, s = {u = {
                  i = 139996105304272, nZero = 1646291152, 
                  pDef = 0x7f53622068d0, pRowSet = 0x7f53622068d0}, 
                r = 6.9167266182394544e-310, db = 0x7f53622068bc, 
                z = 0x400000005 <Address 0x400000005 out of bounds>, n = 3, 
                flags = 0, type = 0 '\000', enc = 0 '\000', xDel = 0, 
                zMalloc = 0x7f53693597e8 "\255\n"}, pMem = 0x0, isError = 0, 
              pColl = 0x0}, apVal = 0x0}, cd = {pMem = 0x7f5300000006}, ce = {
            pBt = 0x7f5300000006}, cf = {pVTab = 0x7f5300000006}, cg = {
            pCur = 0x7f5300000006, pVtabCursor = 0x0, pVtab = 0x100000000, 
            pModule = 0x7f5362206808}, ch = {nArg = 6, iQuery = 32595, 
            pModule = 0x0, pQuery = 0x100000000, pArgc = 0x7f5362206808, 
            pVtabCursor = 0x0, pVtab = 0x7f53622068d0, pCur = 0x7f53622068a8, 
            res = 1646291132, i = 32595, apArg = 0x400000005}, ci = {
            pVtab = 0x7f5300000006, pModule = 0x0, pDest = 0x100000000, 
            sContext = {pFunc = 0x7f5362206808, pVdbeFunc = 0x0, s = {u = {
                  i = 139996105304272, nZero = 1646291152, 
                  pDef = 0x7f53622068d0, pRowSet = 0x7f53622068d0}, 
                r = 6.9167266182394544e-310, db = 0x7f53622068bc, 
                z = 0x400000005 <Address 0x400000005 out of bounds>, n = 3, 
                flags = 0, type = 0 '\000', enc = 0 '\000', xDel = 0, 
                zMalloc = 0x7f53693597e8 "\255\n"}, pMem = 0x0, isError = 0, 
              pColl = 0x0}}, cj = {pVtab = 0x7f5300000006, pModule = 0x0, 
            res = 0, pCur = 0x7f5362206808}, ck = {pVtab = 0x7f5300000006, 
            pName = 0x0}, cl = {pVtab = 0x7f5300000006, pModule = 0x0, 
            nArg = 0, i = 1, rowid = 139996105304072, apArg = 0x0, 
            pX = 0x7f53622068d0}, cm = {p1 = 6, nPage = 32595, pPager = 0x0}, 
          cn = {
            zTrace = 0x7f5300000006 <Address 0x7f5300000006 out of bounds>}}
#4  0x000000374c254b58 in sqlite3Step (p=<value optimized out>)
    at sqlite3.c:49503
        db = 0x7f536941d008
        rc = <value optimized out>
#5  sqlite3_step (p=<value optimized out>) at sqlite3.c:49562
        cnt = 0
        db = 0x7f536941d008
        rc = 3
#6  0x000000374aa1a461 in mozStorageStatement::ExecuteStep (
    this=0x7f5369343060, _retval=0x7fff2ae5a1bc)
    at mozStorageStatement.cpp:568
        srv = <value optimized out>
#7  0x000000374aa2cb56 in nsNavHistory::CalculateFrecencyInternal (
    this=0x7f53694eb800, aPlaceId=<value optimized out>, 
    aTyped=<value optimized out>, aVisitCount=3, aIsBookmarked=0, 
    aFrecency=0x7fff2ae5a218) at nsNavHistory.cpp:7349
        numSampledVisits = 2
        scoper = {mStatement = {<nsCOMPtr_base> = {
              mRawPtr = 0x7f5369343060}, <No data fields>}}
        rv = <value optimized out>
        hasMore = 1
        normalizedNow = <value optimized out>
        pointsForSampledVisits = <value optimized out>
        bonus = <value optimized out>
#8  0x000000374aa2d7c2 in nsNavHistory::UpdateFrecency (this=0x7f53694eb800, 
    aPlaceId=54044, aIsBookmarked=0) at nsNavHistory.cpp:7295
        statsScoper = {mStatement = {<nsCOMPtr_base> = {
              mRawPtr = 0x7f5369343150}, <No data fields>}}
        rv = 0
        hasResults = 1
        hidden = 0
        newFrecency = 0
        typed = 0
        oldFrecency = 100
        visitCountForFrecency = 3
        updateScoper = {mStatement = {<nsCOMPtr_base> = {
              mRawPtr = 0x7f53694eb800}, <No data fields>}}
#9  0x000000374aa378d2 in nsNavHistory::AddVisit (this=0x7f53694eb800, aURI=
Comment 3 Matěj Cepl 2009-12-09 23:49:11 UTC 

*** This bug has been marked as a duplicate of bug 525477 ***