Bug 590510

Summary: [abrt] crash in firefox-3.5.9-2.fc12: Process /usr/lib64/firefox-3.5/firefox was killed by signal 11 (SIGSEGV)
Product: [Fedora] Fedora Reporter: redchernobil
Component: firefoxAssignee: Gecko Maintainer <gecko-bugs-nobody>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 12CC: campbecg, gecko-bugs-nobody
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard: abrt_hash:7508f434418dab4de9a4e2777bde9ad53a7bfc41
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-05-10 19:12:07 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace none

Description redchernobil 2010-05-10 01:33:26 UTC 
abrt 1.0.9 detected a crash.

architecture: x86_64
Attached file: backtrace
cmdline: /usr/lib64/firefox-3.5/firefox
comment: tenia abierta varias ventanas de firefox y abri otra de youtube y el programma colapso
component: firefox
crash_function: nsProfileLock::FatalSignalHandler
executable: /usr/lib64/firefox-3.5/firefox
global_uuid: 7508f434418dab4de9a4e2777bde9ad53a7bfc41
kernel: 2.6.32.11-99.fc12.x86_64
package: firefox-3.5.9-2.fc12
rating: 4
reason: Process /usr/lib64/firefox-3.5/firefox was killed by signal 11 (SIGSEGV)
release: Fedora release 12 (Constantine)
Comment 1 redchernobil 2010-05-10 01:33:30 UTC 
Created attachment 412694 [details]
File: backtrace
Comment 2 Chris Campbell 2010-05-10 19:07:23 UTC 
#2  <signal handler called>
No symbol table info available.
#3  0x0000003b6586da79 in FindLineContainer (aFrame=0x7f571ab0a8d8)
    at nsTextFrameThebes.cpp:775
No locals.
#4  0x0000003b65873a1d in BuildTextRuns (aContext=0x7f5730c36960, aForFrame=
    0x7f571ab0a8d8, aLineContainer=0x0, aForFrameLine=0x0)
    at nsTextFrameThebes.cpp:967
        isValid = 0
        backIterator = {mFrame = 0x120000018a, mLine = {mCurrent = 0x0}, 
          mInOverflowLines = 0x3ff0000000000000}
        stopAtFrame = <value optimized out>
        mayBeginInTextRun = <value optimized out>
        block = <value optimized out>
        forwardIterator = {mFrame = 0x0, mLine = {mCurrent = 0x120000018a}, 
          mInOverflowLines = 0x0}
        nextLineFirstTextFrame = <value optimized out>
        seenTextRunBoundaryOnLaterLine = <value optimized out>
        seenStartLine = <value optimized out>
        linesAfterStartLine = <value optimized out>
        presContext = <value optimized out>
        scanner = {mMappedFlows = 
    {<nsTArray<BuildTextRunsScanner::MappedFlow>> = {<nsTArray_base> = {
                static sEmptyHdr = {mLength = 0, mCapacity = 0, 
                  mIsAutoArray = 0}, mHdr = 0x0}, <No data fields>}, 
            mAutoBuf = 
    "\000\000\000\000\000\000\360?", '\000' <repeats 16 times>"\230, \221\366\037W\177\000\000\000d\303\060W\177\000\000\000d\303\060W\177\000\000\333\303@\000\000\000\000\000\030\000\000\000\000\000\000\000@\240\241cW\177\000\000\020\000\000\000\000\000\000\000\312\270\240b;\000\000\000\001", '\000' <repeats 15 times>"\300, \374\277\060W\177\000\000 \343\017\341N\021\351\373\000d\303\060W\177\000\000\300\374\277\060W\177\000\000\300\374\277\060W\177\000\000\017\032\357e;\000\000\000\334\377\377\377\000\000\000\000\300\374\277\060W\177\000\000\001\000\000\000\000\000\000\000\357\203\360e;\000\000\000\320\220\366\037W\177\000\000\001\000\000\000\000\000\000\000\200\306\223cW\177\000\000`4/7W\177\000\000\000\340\230cW\177\000\000\020\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000+\022\357e;\000\000"}, mLineBreakBeforeFrames = 
    {<nsTArray<nsTextFrame*>> = {<nsTArray_base> = {static sEmptyHdr = {
                  mLength = 0, mCapacity = 0, mIsAutoArray = 0}, mHdr = 
    0x7fffe606ec70}, <No data fields>}, mAutoBuf = 
    "\001\000\000\000;\000\000\000\000\000\000\000\000\240v\300\000\000\000\000\000\000\360?\000\000\000\000\000\000B\300", '\000' <repeats 14 times>, "2@\000\000\000\000\000\000\360?\001\000\000\000\000\300{@", '\000' <repeats 16 times>"\226, \376\377\377\334\377\377\377\231!\236\004\000\000\000\000d\203\360e;\000\000\000\320\360\006\346\377\177\000\000\000\340\230cW\177\000\000\204\\\301<W\177\000\000\000\340\230cW\177\000\000\200N\233cW\177\000\000\000\260\231cW\177\000\000@[\301<W\177\000\000\030\000\000\000\000\000\000\000 o\255VW\177\000\000is\340];", '\000' <repeats 11 times>, "`4/7W\177\000\000\002\000\000\000\000\000\000\000\333\303@\000\000\000\000\000@\240\241cW\177\000\000\030\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\320\355\006\346\377\177\000\000\000\260\231cW\177\000\000\351"...}, mBreakSinks = 
    {<nsTArray<nsAutoPtr<BuildTextRunsScanner::BreakSink> >> = 
    {<nsTArray_base> = {static sEmptyHdr = {mLength = 0, mCapacity = 0, 
                  mIsAutoArray = 0}, mHdr = 0x1}, <No data fields>}, 
            mAutoBuf = 
    "\237\273\240b;\000\000\000\200\306\223cW\177\000\000\340g\303\060W\177\000\000\362\003\236\004\000\000\000\000\374\v|f;\000\000\000`[\301<W\177\000\000@v\307\060W\177\000\000\000\000\000\000\000\000\000\000\"\275\240b;\000\000\000\374\v|f;\000\000\000@v\307\060W\177\000"}, mTextRunsToDelete = 
    {<nsTArray<gfxTextRun*>> = {<nsTArray_base> = {static sEmptyHdr = {
                  mLength = 0, mCapacity = 0, mIsAutoArray = 0}, mHdr = 
    0x3b65ef184c}, <No data fields>}, mAutoBuf = 
    "\254$\242b;\000\000\000@v\307\060W\177\000\000\340\363S\026W\177\000\000\240\274\245b;\000\000\000](\242b;\000\000\000\340\363S\026W\177\000"}, 
          mLineBreaker = {mCurrentWord = {<nsTArray<unsigned short>> = 
    {<nsTArray_base> = {static sEmptyHdr = {mLength = 0, mCapacity = 0, 
                    mIsAutoArray = 0}, mHdr = 
    0x3b62a5bca0}, <No data fields>}, mAutoBuf = 
    "\000\020\000\000\000\000\000\000\213=\242b;\000\000\000\060\264]\026W\177\000\000@[\301<W\177\000\000@v\307\060W\177\000\000\374Y\241b;\000\000\000\000\000\000\000\000\000\360?\331\215\241b;\000\000\000\000\000\000\000\000\000\360?J\000\241b;\000\000\000\060\264]\026W\177\000\000\066P\241b;\000\000\000\000\000\000\000\000\240l@\000\000\000\000\000\200;@\000\000\000\000\000\000\360?", '\000' <repeats 22 times>"\360, ?\000\000\000\000\000\240l\300\000\000\000\000\000\200;\300\000\264]\026W\177\000\000\254\065", '\000' <repeats 14 times>"\211, \366\240b;\000\000\000r\006\000\000\000\000\000\000\070\247\342e;\000\000"}, 
            mTextItems = {<nsTArray<nsLineBreaker::TextItem>> = 
    {<nsTArray_base> = {static sEmptyHdr = {mLength = 0, mCapacity = 0, 
                    mIsAutoArray = 0}, mHdr = 
    0x406ca00000000000}, <No data fields>}, mAutoBuf = 
    "\000\000\000\000\000\200;@\000@\225\032W\177\000\000\022\263\201e;", '\000' <repeats 11 times>"\340, \350\226\026W\177\000\000\000\000\000\000\000\000\000\000\302\321@\000\000\000\000"}, mCurrentWordContainsComplexChar = 
    224 '\340', mAfterBreakableSpace = 232 '\350', mBreakHere = 150 '\226'}, 
          mCurrentFramesAllSameTextRun = 0x0, mContext = 0x7f571a954000, 
          mLineContainer = 0x3b6581b23e, mLastFrame = 0x0, 
          mCommonAncestorWithLastFrame = 0x0, mMaxTextLength = 0, 
          mDoubleByteText = 0 '\000', mBidiEnabled = 0 '\000', mStartOfLine = 
    0 '\000', mSkipIncompleteTextRuns = 0 '\000', mCanStopOnThisLine = 
    119 'w', mNextRunContextInfo = 152 '\230', mCurrentRunContextInfo = 
    226 '\342'}
#5  0x0000003b658740d0 in nsTextFrame::EnsureTextRun (this=0x7f571ab0a8d8, 
    aReferenceContext=<value optimized out>, aLineContainer=0x0, aLine=0x0, 
    aFlowEndInTextRun=0x0) at nsTextFrameThebes.cpp:1966
        userData = <value optimized out>
        direction = <value optimized out>
        emptySkipChars = {mList = {mRawPtr = 0x0}, mShortcuts = {mRawPtr = 
    0x0}, mListLength = 0, mCharCount = 0}
#6  0x0000003b658782da in nsTextFrame::PaintText (this=0x7f571ab0a8d8, 
    aRenderingContext=0x7f57169640a0, aPt=..., aDirtyRect=...)
    at nsTextFrameThebes.cpp:4499
        iter = {mSkipChars = 0x0, mOriginalStringOffset = 1702848914, 
          mSkippedStringOffset = 59, mOriginalStringToSkipCharsOffset = 
    1223104544, mListPrefixLength = 32599, mListPrefixCharCount = 0, 
          mListPrefixKeepCharCount = 0}
        textPaintStyle = {mFrame = 0x7f572011e000, mPresContext = 
    0x3b6584fb72, mInitCommonColors = 80 'P', mInitSelectionColors = 107 'k', 
          mSelectionStatus = 26119, mSelectionTextColor = 59, 
          mSelectionBGColor = 0, mSufficientContrast = 65537, 
          mFrameBackgroundColor = 63, mIMEStyle = {{mInit = 32767, 
              mTextColor = 3859214720, mBGColor = 32767, mUnderlineColor = 0, 
              mUnderlineStyle = 0 '\000'}, {mInit = 1702939160, mTextColor = 
    59, mBGColor = 3859214784, mUnderlineColor = 32767, mUnderlineStyle = 
    224 '\340'}, {mInit = 32767, mTextColor = 1719110864, mBGColor = 59, 
              mUnderlineColor = 1038270960, mUnderlineStyle = 87 'W'}, {
              mInit = 0, mTextColor = 0, mBGColor = 1703135821, 
              mUnderlineColor = 59, mUnderlineStyle = 0 '\000'}}, 
          mIMEUnderlineRelativeSize = 0}
        provider = {<gfxTextRun::PropertyProvider> = {
            _vptr.PropertyProvider = 0x0}, mTextRun = 0x7f5714b09b00, 
          mFontGroup = 0x0, mFontMetrics = {<nsCOMPtr_base> = {mRawPtr = 
    0x3b65e987c3}, <No data fields>}, mTextStyle = 0x3a98, mFrag = 
    0x7fffe606f120, mLineContainer = 0x7f5748ebdd30, mFrame = 0x7f57169640a0, 
          mStart = {mSkipChars = 0x7fffe606f250, mOriginalStringOffset = 
    -435752688, mSkippedStringOffset = 32767, 
            mOriginalStringToSkipCharsOffset = -435752176, 
            mListPrefixLength = 32767, mListPrefixCharCount = 1710086768, 
            mListPrefixKeepCharCount = 59}, mTempIterator = {mSkipChars = 
    0x5a7800001824, mOriginalStringOffset = 0, mSkippedStringOffset = 0, 
            mOriginalStringToSkipCharsOffset = 4020, mListPrefixLength = 
    1440, mListPrefixCharCount = 0, mListPrefixKeepCharCount = 0}, 
          mTabWidths = 0x5a000000fb4, mLength = 0, mWordSpacing = 0, 
          mLetterSpacing = 1.2604264686552553e-312, mJustificationSpacing = 
    0, mHyphenWidth = 6.9533342787956345e-310, 
          mOffsetFromBlockOriginForTabs = 6.9175162024672414e-310, 
          mReflowing = 0 '\000'}
        ctx = <value optimized out>
        framePt = {x = 480, y = 6.9175385673048162e-310}
        textBaselinePt = {x = 0, y = 1.2603925268098078e-312}
        dirtyRect = {pos = {x = 6.9175206617926948e-310, y = 
    6.9533342788169781e-310}, size = {width = 6.9175128013726945e-310, 
            height = 6.9533342788114446e-310}}
        advanceWidth = 6.9175545083565945e-310
        foregroundColor = {r = 6.9175326540722289e-310, g = 
    2.1219957909652723e-314, b = 6.9175545238054343e-310, a = 
    6.9175162025142765e-310}
        textStyle = <value optimized out>
#7  0x0000003b6587864a in nsDisplayText::Paint (this=0x7f572fa9d940, 
    aBuilder=<value optimized out>, aCtx=0x7f57169640a0, 
    aDirtyRect=<value optimized out>) at nsTextFrameThebes.cpp:3775
No locals.
#8  0x0000003b657fdc86 in nsDisplayList::Paint (this=<value optimized out>, 
    aBuilder=0x7fffe606f440, aCtx=0x7f57169640a0, aDirtyRect=...)
    at nsDisplayList.cpp:313
        i = 0x7f572fa9d940
#9  0x0000003b657fde54 in Paint (this=0x7f572fa9db70, aBuilder=
    0x7fffe606f440, aCtx=0x7f57169640a0, aDirtyRect=<value optimized out>)
    at nsDisplayList.cpp:791
No locals.



-- 
Fedora Bugzappers volunteer triage team
https://fedoraproject.org/wiki/BugZappers
Comment 3 Chris Campbell 2010-05-10 19:12:07 UTC 
Thank you for taking the time to make this bug report.

This particular bug has already been reported into our bug tracking system, but please feel free to report any further bugs you find.



-- 
Fedora Bugzappers volunteer triage team
https://fedoraproject.org/wiki/BugZappers

*** This bug has been marked as a duplicate of bug 587828 ***