Bug 572471

Summary: [abrt] crash in firefox-3.5.8-1.fc12: Process /usr/lib/firefox-3.5.8/firefox was killed by signal 11 (SIGSEGV)
Product: [Fedora] Fedora Reporter: Johann Cohen-Tanugi <johann.cohentanugi>
Component: firefoxAssignee: Gecko Maintainer <gecko-bugs-nobody>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 12CC: campbecg, gecko-bugs-nobody
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Linux   
Whiteboard: abrt_hash:c7ea05f9b13293e8fb93179cca5b06ba59adbd7b
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-03-11 19:53:55 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace none

Description Johann Cohen-Tanugi 2010-03-11 10:05:16 UTC 
abrt 1.0.8 detected a crash.

architecture: i686
Attached file: backtrace
cmdline: /usr/lib/firefox-3.5.8/firefox
comment: The bookmarks are incorrectly displayed on top of the crash! This release is botched!
component: firefox
executable: /usr/lib/firefox-3.5.8/firefox
kernel: 2.6.32.9-70.fc12.i686
package: firefox-3.5.8-1.fc12
rating: 4
reason: Process /usr/lib/firefox-3.5.8/firefox was killed by signal 11 (SIGSEGV)
release: Omega 12.1 Fedora Remix release 12 (Omega 12.1 Fedora Remix)

How to reproduce
-----
1. just opening some menus!
2.
3.
Comment 1 Johann Cohen-Tanugi 2010-03-11 10:05:27 UTC 
Created attachment 399305 [details]
File: backtrace
Comment 2 Chris Campbell 2010-03-11 19:49:33 UTC 
#3  <signal handler called>
No symbol table info available.
#4  sqlite3VdbeExec (p=<value optimized out>) at sqlite3.c:54194
        pc = <value optimized out>
        pOp = 0xae571c10
        rc = <value optimized out>
        db = <value optimized out>
        encoding = 1 '\001'
        pIn1 = <value optimized out>
        pIn2 = <value optimized out>
        pIn3 = <value optimized out>
        pOut = <value optimized out>
        iCompare = <value optimized out>
        aPermute = <value optimized out>
        nProgressOps = <value optimized out>
        u = {aa = {pcDest = 13}, ab = {p1 = 13, p2 = -1298312808, n = 2374, 
            pVar = 0x0}, ac = {zMalloc = 0xd <Address 0xd out of bounds>, n = 
    -1298312808, p1 = 2374, p2 = 0}, ad = {pMem = 0xd, i = -1298312808}, ae = 
    {nByte = -5576211050337927155}, af = {flags = 13, iA = 10199249015192, 
            iB = 21474836480, rA = 1.4480646969626091e-314, rB = 
    -9.3808509719585937e-84}, ag = {i = 13, pArg = 0xb29d5198, ctx = {pFunc = 
    0x946, pVdbeFunc = 0x0, s = {u = {i = -5858557527452549115, nZero = 5, 
                  pDef = 0x5, pRowSet = 0x5, pFrame = 0x5}, r = 
    -9.3814739759225674e-84, db = 0xaeb23950, z = 0xaeb23978 "\v", n = 10, 
                flags = 51666, type = 204 '\314', enc = 6 '\006', xDel = 
    0x74d9f44 <JSJ_IsJSCallApplet+17683928>, zMalloc = 0x0}, pMem = 
    0xae550198, isError = 0, pColl = 0x0}, apVal = 0x0, n = 0}, ah = {a = 
    -5576211050337927155, b = 2374}, ai = {res = 13, affinity = -104 '\230'}, 
          aj = {n = 13, i = -1298312808, p1 = 2374, p2 = 0, pKeyInfo = 0x5, 
            idx = -1364051720, pColl = 0x0, bRev = -1364051552}, ak = {v1 = 
    13, v2 = -1298312808}, al = {c = 13}, am = {payloadSize = 13, 
            payloadSize64 = 10199249015192, p1 = 0, p2 = 5, pC = 0xaeb238f8, 
            zRec = 0x0, pCrsr = 0xaeb239a0, aType = 0xaeb23950, aOffset = 
    0xaeb23978, nField = 10, len = 114084306, i = 122527556, zData = 0x0, 
            pDest = 0xae550198, sMem = {u = {i = 0, nZero = 0, pDef = 0x0, 
                pRowSet = 0x0, pFrame = 0x0}, r = 0, db = 0x0, z = 0x0, n = 
    0, flags = 0, type = 0 '\000', enc = 0 '\000', xDel = 0, zMalloc = 0x0}, 
            zIdx = 0x74d9f44 "p\233M\a", zEndHdr = 
    0xbfe331dc ",2\343\277\334\324\314\006\374\337\314\006D\237M\a<2\343\277\066\317\314\006\347\vZ", offset = 114085430, offset64 = 4410736404, szHdr = 0, 
            avail = 0, pReg = 0x6ccdffc}, an = {zAffinity = 
    0xd <Address 0xd out of bounds>, pData0 = 0xb29d5198, pLast = 0x946, 
            pRec = 0x0}, ao = {zNewRecord = 0xd <Address 0xd out of bounds>, 
            pRec = 0xb29d5198, nData = 2374, nHdr = 5, nByte = 2930915576, 
            nZero = -1364051552, nVarint = -1364051632, serial_type = 
    2930915704, pData0 = 0xa, pLast = 0x6ccc9d2, nField = 122527556, 
            zAffinity = 0x0, file_format = -1370160744, i = 0, len = 0}, ap = 
    {nEntry = -5576211050337927155, pCrsr = 0x946}, aq = {p1 = 13, zName = 
    0xb29d5198 "", nName = 2374, pNew = 0x0, pSavepoint = 0x5, pTmp = 
    0xaeb238f8, iSavepoint = 0, ii = -1364051552}, ar = {desiredAutoCommit = 
    13, iRollback = -1298312808, turnOnAC = 2374}, as = {pBt = 0xd}, at = {
            iMeta = 13, iDb = -1298312808, iCookie = 2374}, au = {pDb = 0xd}, 
          av = {iMeta = 13, pBt = 0xb29d5198}, aw = {nField = 13, pKeyInfo = 
    0xb29d5198, p2 = 2374, iDb = 0, wrFlag = 5, pX = 0xaeb238f8, pCur = 0x0, 
            pDb = 0xaeb239a0}, ax = {pCx = 0xd}, ay = {pCx = 0xd}, az = {
            res = 13, oc = -1298312808, pC = 0x946, r = {pKeyInfo = 0x0, 
              nField = 5, flags = 0, rowid = 2930915576, aMem = 0xaeb239a0}, 
            nField = -1364051632, iKey = 45880588664}, ba = {pC = 0xd}, bb = {
            alreadyExists = 13, pC = 0xb29d5198, res = 2374, pIdxKey = 0x0, 
            aTempRec = 
    "\005\000\000\000\370\070\262\256\000\000\000\000\240\071\262\256P9\262\256x9\262\256\n\000\000\000\322\311\314\006D\237M\a\000\000\000\000\230\001U\256", '\000' <repeats 40 times>, "D\237M\a\334\061\343\277\066\316\314\006\024\177\346\006\001", '\000' <repeats 11 times>"\374, \337\314\006D\237M\a2\000\000\000\000\000\000\000\024\177\346\006\001\000\000\000\024\177\346\006\000\000\000\000\370\n\021\264\270Wn"}, bc = {ii = 13, pCx = 0xb29d5198, pCrsr = 0x946, 
            nField = 0, aMem = 0x5, r = {pKeyInfo = 0xaeb238f8, nField = 0, 
              flags = 0, rowid = -5858557146564511328, aMem = 0xaeb23978}, 
            R = 489988363256856586}, bd = {pC = 0xd, pCrsr = 0xb29d5198, 
            res = 2374, iKey = 21474836480}, be = {v = -5576211050337927155, 
            pC = 0x946, res = 0, cnt = 5, pMem = 0xaeb238f8, pFrame = 0x0}, 
          bf = {pData = 0xd, pKey = 0xb29d5198, iKey = 2374, pC = 0x5, 
            nZero = -1364051720, seekResult = 0, zDb = 
    0xaeb239a0 "\210g\266\265\310\255)\264", zTbl = 0xaeb23950 "", op = 
    -1364051592}, bg = {iKey = -5576211050337927155, pC = 0x946}, bh = {pC = 
    0xd, pCrsr = 0xb29d5198, n = 2374, n64 = 21474836480}, bi = {pC = 0xd, 
            v = 10199249015192, pVtab = 0x0, pModule = 0x5}, bj = {pC = 0xd}, 
          bk = {pC = 0xd, pCrsr = 0xb29d5198, res = 2374}, bl = {pC = 0xd, 
            pCrsr = 0xb29d5198, res = 2374}, bm = {pC = 0xd, pCrsr = 
    0xb29d5198, res = 2374}, bn = {pC = 0xd, pCrsr = 0xb29d5198, nKey = 2374, 
            zKey = 0x0}, bo = {pC = 0xd, pCrsr = 0xb29d5198, res = 2374, r = {
              pKeyInfo = 0x0, nField = 5, flags = 0, rowid = 2930915576, 
              aMem = 0xaeb239a0}}, bp = {pCrsr = 0xd, pC = 0xb29d5198, 
            rowid = 2374}, bq = {pC = 0xd, res = -1298312808, r = {pKeyInfo = 
    0x946, nField = 0, flags = 0, rowid = -5858557527452549115, aMem = 0x0}}, 
          br = {iMoved = 13, iCnt = -1298312808, pVdbe = 0x946, iDb = 0}, 
          bs = {nChange = 13}, bt = {pgno = 13, flags = -1298312808, pDb = 
    0x946}, bu = {iDb = 13, zMaster = 0xb29d5198 "", zSql = 
    0x946 <Address 0x946 out of bounds>, initData = {db = 0x0, iDb = 5, 
              pzErrMsg = 0xaeb238f8, rc = 0}}, bv = {nRoot = 13, aRoot = 
    0xb29d5198, j = 2374, nErr = 0, z = 0x5 <Address 0x5 out of bounds>, 
            pnErr = 0xaeb238f8}, bw = {pIdx = 0xd, pVal = 0xb29d5198}, bx = {
            pIdx = 0xd, val = 10199249015192}, by = {iSet = 13, exists = 
    -1298312808}, bz = {nMem = 13, nByte = -1298312808, pRt = 0x946, pMem = 
    0x0, pEnd = 0x5, pFrame = 0xaeb238f8, pProgram = 0x0, t = 0xaeb239a0}, 
          ca = {pFrame = 0xd, pIn = 0xb29d5198}, cb = {pIn1 = 0xd, pFrame = 
    0xb29d5198}, cc = {n = 13, i = -1298312808, pMem = 0x946, pRec = 0x0, 
            ctx = {pFunc = 0x5, pVdbeFunc = 0xaeb238f8, s = {u = {i = 
    -5858556805898043392, nZero = 0, pDef = 0x0, pRowSet = 0x0, pFrame = 
    0x0}, r = -9.3811651539402265e-84, db = 0xa, z = 
    0x6ccc9d2 "\201\303r\325\200", n = 122527556, flags = 0, type = 0 '\000', 
                enc = 0 '\000', xDel = 0xae550198, zMalloc = 0x0}, pMem = 
    0x0, isError = 0, pColl = 0x0}, apVal = 0x0}, cd = {pMem = 0xd}, ce = {
            pBt = 0xd}, cf = {pVTab = 0xd}, cg = {pCur = 0xd, pVtabCursor = 
    0xb29d5198, pVtab = 0x946, pModule = 0x0}, ch = {nArg = 13, iQuery = 
    -1298312808, pModule = 0x946, pQuery = 0x0, pArgc = 0x5, pVtabCursor = 
    0xaeb238f8, pVtab = 0x0, pCur = 0xaeb239a0, res = -1364051632, i = 
    -1364051592, apArg = 0xa}, ci = {pVtab = 0xd, pModule = 0xb29d5198, 
            pDest = 0x946, sContext = {pFunc = 0x0, pVdbeFunc = 0x5, s = {u = 
    {i = 2930915576, nZero = -1364051720, pDef = 0xaeb238f8, pRowSet = 
    0xaeb238f8, pFrame = 0xaeb238f8}, r = -9.3808509719585937e-84, db = 
    0xaeb23978, z = 0xa <Address 0xa out of bounds>, n = 114084306, flags = 
    40772, type = 77 'M', enc = 7 '\a', xDel = 0, zMalloc = 
    0xae550198 "\002"}, pMem = 0x0, isError = 0, pColl = 0x0}}, cj = {pVtab = 
    0xd, pModule = 0xb29d5198, res = 2374, pCur = 0x0}, ck = {pVtab = 0xd, 
            pName = 0xb29d5198}, cl = {pVtab = 0xd, pModule = 0xb29d5198, 
            nArg = 2374, i = 0, rowid = -5858557527452549115, apArg = 0x0, 
            pX = 0xaeb239a0}, cm = {p1 = 13, nPage = -1298312808, pPager = 
    0x946}, cn = {zTrace = 0xd <Address 0xd out of bounds>}}
#5  0x05f90ec8 in sqlite3Step (pStmt=<value optimized out>) at sqlite3.c:50609
        db = 0xb7534ac8
        rc = <value optimized out>
#6  sqlite3_step (pStmt=<value optimized out>) at sqlite3.c:50668
        cnt = <value optimized out>
        db = 0xb7534ac8
        rc = <value optimized out>
#7  0x06b85993 in mozStorageStatement::ExecuteStep (this=0xae5a2250, _retval=
    0xbfe33448) at mozStorageStatement.cpp:568
        srv = <value optimized out>
#8  0x06b97b37 in nsNavHistory::ResultsAsList (this=0xb42f3000, statement=
    0xae5a2250, aOptions=0xae5a4940, aResults=0xae56b7bc)
    at nsNavHistory.cpp:6132
        rv = 0
        row = {<nsCOMPtr_base> = {mRawPtr = 0xae5a2250}, <No data fields>}
        hasMore = 1
#9  0x06ba0656 in nsNavHistory::GetQueryResults (this=0xb42f3000, aResultNode=
    0xae56b740, aQueries=..., aOptions=0xae5a4940, aResults=0xae56b7bc)
    at nsNavHistory.cpp:4167
        queryString = {<nsACString_internal> = {mData = 
    0xae8e2808 "SELECT h.id, h.url, h.title, h.rev_host, h.visit_count, h.last_visit_date, f.url, null, null FROM moz_places_temp h LEFT OUTER JOIN moz_favicons f ON h.favicon_id = f.id WHERE h.hidden <> 1 AND EXISTS"..., mLength = 
    876, mFlags = 5}, <No data fields>}
        paramsPresent = 0
        addParams = 
    {<nsBaseHashtable<nsCStringHashKey, nsCString, nsCString>> = 
    {<nsTHashtable<nsBaseHashtableET<nsCStringHashKey, nsCString> >> = {
              mTable = {ops = 0x74ee920, data = 0x0, hashShift = 28, 
                maxAlphaFrac = 192 '\300', minAlphaFrac = 64 '@', entrySize = 
    28, entryCount = 0, removedCount = 0, generation = 0, entryStore = 
    0xb16f93c0 ""}}, <No data fields>}, <No data fields>}
        rv = <value optimized out>
        statement = {<nsCOMPtr_base> = {mRawPtr = 
    0xae5a2250}, <No data fields>}




-- 
Fedora Bugzappers volunteer triage team
https://fedoraproject.org/wiki/BugZappers
Comment 3 Chris Campbell 2010-03-11 19:53:55 UTC 
The bug which thisis being marked a duplicate of has some steps for you to potentially resolve this issue.



-- 
Fedora Bugzappers volunteer triage team
https://fedoraproject.org/wiki/BugZappers

*** This bug has been marked as a duplicate of bug 525477 ***