Bug 1045940 - crash [ @ firefox: nsWeakFrame::InitInternal()] - baseline JIT
Summary: crash [ @ firefox: nsWeakFrame::InitInternal()] - baseline JIT
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: firefox
Version: 19
Hardware: i686
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Martin Stransky
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:3065b1013a9e0eb12d46ca7ef3c...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-12-23 00:03 UTC by Doug Huffman
Modified: 2015-01-19 17:44 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2015-01-19 17:44:39 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: backtrace (140.48 KB, text/plain)
2013-12-23 00:03 UTC, Doug Huffman
no flags Details
File: cgroup (141 bytes, text/plain)
2013-12-23 00:03 UTC, Doug Huffman
no flags Details
File: core_backtrace (19.14 KB, text/plain)
2013-12-23 00:03 UTC, Doug Huffman
no flags Details
File: dso_list (17.74 KB, text/plain)
2013-12-23 00:03 UTC, Doug Huffman
no flags Details
File: environ (1.93 KB, text/plain)
2013-12-23 00:03 UTC, Doug Huffman
no flags Details
File: exploitable (82 bytes, text/plain)
2013-12-23 00:04 UTC, Doug Huffman
no flags Details
File: limits (1.29 KB, text/plain)
2013-12-23 00:04 UTC, Doug Huffman
no flags Details
File: maps (59.94 KB, text/plain)
2013-12-23 00:04 UTC, Doug Huffman
no flags Details
File: open_fds (5.15 KB, text/plain)
2013-12-23 00:04 UTC, Doug Huffman
no flags Details
File: proc_pid_status (801 bytes, text/plain)
2013-12-23 00:04 UTC, Doug Huffman
no flags Details
File: var_log_messages (18.55 KB, text/plain)
2013-12-23 00:04 UTC, Doug Huffman
no flags Details

Description Doug Huffman 2013-12-23 00:03:43 UTC
Description of problem:
browsing

Version-Release number of selected component:
firefox-26.0-2.fc19

Additional info:
reporter:       libreport-2.1.10
backtrace_rating: 4
cmdline:        /usr/lib/firefox/firefox
crash_function: nsWeakFrame::InitInternal
executable:     /usr/lib/firefox/firefox
kernel:         3.11.10-200.fc19.i686.PAE
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 nsWeakFrame::InitInternal at /usr/src/debug/xulrunner-26.0/mozilla-release/layout/generic/nsIFrame.h:584
 #1 Init at /usr/src/debug/xulrunner-26.0/mozilla-release/layout/generic/nsIFrame.h:3272
 #2 nsWeakFrame at /usr/src/debug/xulrunner-26.0/mozilla-release/layout/generic/nsIFrame.h:3210
 #3 nsXULPopupManager::HidePopupCallback at /usr/src/debug/xulrunner-26.0/mozilla-release/layout/xul/base/src/nsXULPopupManager.cpp:931
 #4 nsXULPopupManager::FirePopupHidingEvent at /usr/src/debug/xulrunner-26.0/mozilla-release/layout/xul/base/src/nsXULPopupManager.cpp:1285
 #5 nsXULPopupManager::HidePopup at /usr/src/debug/xulrunner-26.0/mozilla-release/layout/xul/base/src/nsXULPopupManager.cpp:884
 #6 nsXULPopupManager::Rollup at /usr/src/debug/xulrunner-26.0/mozilla-release/layout/xul/base/src/nsXULPopupManager.cpp:210
 #7 nsWindow::CheckForRollup at /usr/src/debug/xulrunner-26.0/mozilla-release/widget/gtk2/nsWindow.cpp:4718
 #8 nsWindow::GrabPointer at /usr/src/debug/xulrunner-26.0/mozilla-release/widget/gtk2/nsWindow.cpp:4359
 #9 nsWindow::EnsureGrabs at /usr/src/debug/xulrunner-26.0/mozilla-release/widget/gtk2/nsWindow.cpp:3906

Comment 1 Doug Huffman 2013-12-23 00:03:51 UTC
Created attachment 840536 [details]
File: backtrace

Comment 2 Doug Huffman 2013-12-23 00:03:53 UTC
Created attachment 840537 [details]
File: cgroup

Comment 3 Doug Huffman 2013-12-23 00:03:55 UTC
Created attachment 840538 [details]
File: core_backtrace

Comment 4 Doug Huffman 2013-12-23 00:03:57 UTC
Created attachment 840539 [details]
File: dso_list

Comment 5 Doug Huffman 2013-12-23 00:03:59 UTC
Created attachment 840540 [details]
File: environ

Comment 6 Doug Huffman 2013-12-23 00:04:01 UTC
Created attachment 840541 [details]
File: exploitable

Comment 7 Doug Huffman 2013-12-23 00:04:02 UTC
Created attachment 840542 [details]
File: limits

Comment 8 Doug Huffman 2013-12-23 00:04:05 UTC
Created attachment 840543 [details]
File: maps

Comment 9 Doug Huffman 2013-12-23 00:04:07 UTC
Created attachment 840544 [details]
File: open_fds

Comment 10 Doug Huffman 2013-12-23 00:04:09 UTC
Created attachment 840545 [details]
File: proc_pid_status

Comment 11 Doug Huffman 2013-12-23 00:04:11 UTC
Created attachment 840546 [details]
File: var_log_messages

Comment 12 Martin Stransky 2014-01-06 12:56:36 UTC
This is an automated bug update. If you can reproduce the bug, please reopen and remove the [abrt] string from subject.

Thanks!

Comment 13 Doug Huffman 2014-01-06 13:14:34 UTC
The fix, from Firefox, was to set about:config javascript.options.baselinejit.content to FALSE.  Toggling to TRUE reproduces the bug.

Comment 14 Martin Stransky 2014-01-06 13:45:34 UTC
Can you please test an upstream package from mozilla.com? If javascript.options.baselinejit.* options works for you it means it hits a bug in new baseline JIT compiler.

Comment 15 Doug Huffman 2014-01-06 17:58:15 UTC
Thanks Martin, but I barely understand your request/question.  I am a linux/Fedora newbie in over my head.

javascript.options.baselinejit.* DOES NOT work for me and must be optioned=FALSE for my FF browser to not crash on wikipedia.org.

Comment 16 Martin Stransky 2014-01-07 08:12:37 UTC
I mean to download a binary Firefox package from http://www.mozilla.org and test if the bug is there too or it's something Fedora specific. Just download the tarball from:

http://www.mozilla.org/en-US/products/download.html?product=firefox-26.0&os=linux&lang=en-US

unpack it in some dir and run.

Thanks!

Comment 17 Fedora End Of Life 2015-01-09 20:56:22 UTC
This message is a notice that Fedora 19 is now at end of life. Fedora 
has stopped maintaining and issuing updates for Fedora 19. It is 
Fedora's policy to close all bug reports from releases that are no 
longer maintained. Approximately 4 (four) weeks from now this bug will
be closed as EOL if it remains open with a Fedora 'version' of '19'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 19 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 18 Martin Stransky 2015-01-19 17:44:39 UTC
Seems to be working fine now.


Note You need to log in before you can comment on or make changes to this bug.