Created attachment 370236 [details]
File: backtrace

Not sure, whether this is firefox at all:


#3  <signal handler called>
No symbol table info available.
#4  0x0577bc22 in unmarkPurple (this=0xb23938f0)
    at ../../../dist/include/xpcom/nsISupportsImpl.h:214
No locals.
#5  UnmarkPurple (this=0xb23938f0) at nsDocument.h:588
No locals.
#6  nsDocument::cycleCollection::UnmarkPurple (this=0xb23938f0)
    at nsDocument.h:986
No locals.
#7  0x05d97a9e in AddPurpleRoot (builder=..., root=0xb2393800)
    at nsCycleCollector.cpp:1551
        cp = 0x663b8b4
        pinfo = 0xb2393800
#8  0x05d97d34 in nsPurpleBuffer::SelectPointers (this=<value optimized out>, 
    aBuilder=<value optimized out>) at nsCycleCollector.cpp:888
        e = 0xac4d311c
        eEnd = <value optimized out>
        b = <value optimized out>
#9  0x05d97e3b in SelectPurple (builder=<value optimized out>, this=
    0xb740e800) at nsCycleCollector.cpp:1559
No locals.
#10 nsCycleCollector::BeginCollection (builder=<value optimized out>, this=
    0xb740e800) at nsCycleCollector.cpp:2467
        builder = {<nsCycleCollectionTraversalCallback> = {
            _vptr.nsCycleCollectionTraversalCallback = 0x66134f8}, 
          mNodeBuilder = {mNextBlock = 0xad901000, mNext = @0xb740e844, 
            mBlockEnd = 0xad9c1004}, mEdgeBuilder = {mCurrent = 0xb740e848, 
            mBlockEnd = 0xb740e848, mNextBlockPtr = 0xb740e84c}, 
          mPtrToNodeMap = {ops = 0x662d8a4, data = 0x0, hashShift = 17, 
            maxAlphaFrac = 192 '\300', minAlphaFrac = 64 '@', entrySize = 8, 
            entryCount = 5702, removedCount = 0, generation = 0, entryStore = 
    0xac140000 ""}, mCurrPi = 0x0, mRuntimes = 0xb740e810}
#11 0x05d97ecf in nsCycleCollector_beginCollection ()
    at nsCycleCollector.cpp:3057
No locals.
#12 0x05460c70 in XPCCycleCollectGCCallback (cx=<value optimized out>, 
    status=<value optimized out>) at nsXPConnect.cpp:390
No locals.
#13 0x0087f4be in js_GC (cx=<value optimized out>, 
    gckind=<value optimized out>) at jsgc.cpp:3500
        keepAtoms = 0
        i = <value optimized out>
        trc = {context = 0xb45f2400, callback = 0}
        a = <value optimized out>
        emptyArenas = <value optimized out>
        allClear = <value optimized out>
        callback = <value optimized out>
        thing = <value optimized out>
        requestDebit = <value optimized out>
        rt = 0xb73b7000
        type = <value optimized out>
        thingSize = 88578514
        flags = <value optimized out>
        freeList = <value optimized out>
        ap = <value optimized out>
        flagp = <value optimized out>
#14 0x00858b02 in JS_GC (cx=<value optimized out>) at jsapi.cpp:2458
No locals.
#15 0x05460483 in nsXPConnect::Collect (this=<value optimized out>)
    at nsXPConnect.cpp:477
        cycleCollectionContext = {<nsAXPCNativeCallContext> = {
            _vptr.nsAXPCNativeCallContext = 0x65596d8}, mState = 
    HAVE_CONTEXT, mXPC = 0xb738b0f0, mThreadData = 0xb70bbdf0, mXPCContext = 
    0xb440aee0, mJSContext = 0xb45f2400, mContextPopRequired = 1, 
          mDestroyJSContextInDestructor = 0, mCallerLanguage = LANG_NATIVE, 
          mPrevCallerLanguage = LANG_UNKNOWN, mPrevCallContext = 0x0, 
          mOperandJSObject = 0x5e16bf6, mCurrentJSObject = 0x5d624f4, 
          mFlattenedJSObject = 0x19, mWrapper = 0xf519f85a, mTearOff = 
    0x5ee56c8, mScriptableInfo = 0x7a, mSet = 0xb74fd2bc, mInterface = 
    0xf519f85a, mMember = 0xbfcc8278, mName = 97845472, 
          mStaticMemberIsLocal = 0, mArgc = 98659318, mArgv = 0x5d6248a, 
          mRetVal = 0x6615844, mReturnValueWasSet = 99505864, mMethodIndex = 
    0, mCallee = 0x0, mStringWrapperData = 
    "\366k\341\005\310V\356\005\000\000\000\000\000\000\000\000/(\326\005\323d\257\000\004\000\000\000\000\000\000"}
        cx = 0xb45f2400

*** Bug 540550 has been marked as a duplicate of this bug. ***

Any reproduction steps?

*** Bug 549276 has been marked as a duplicate of this bug. ***

*** Bug 553749 has been marked as a duplicate of this bug. ***

*** Bug 555099 has been marked as a duplicate of this bug. ***

*** Bug 558860 has been marked as a duplicate of this bug. ***

*** Bug 558973 has been marked as a duplicate of this bug. ***

*** Bug 567112 has been marked as a duplicate of this bug. ***

Reporter, could you please reply to the question in comment 4? Also, are you able to reproduce this bug with an updated system?  

If you don't reply in one month, I will have to close this bug as INSUFFICIENT_DATA. Thank you.

-- 
Fedora Bugzappers volunteer triage team
https://fedoraproject.org/wiki/BugZappers

i am sorry, i have no reproduction steps. however, it happened from time to time, randomly it seems. i have not seen it in the last month. it may be already fixed. thank you.

*** Bug 586051 has been marked as a duplicate of this bug. ***

Package: firefox-3.5.9-2.fc12
Architecture: x86_64
OS Release: Fedora release 12 (Constantine)


How to reproduce
-----
1. open up a new tab

Comment
-----
open up a new tab

Jeffrey C. Ollie,  How reproducible is this?  Does it crash every time you open a new tab?  Can you provide a backtrace?

-- 
Fedora Bugzappers volunteer triage team
https://fedoraproject.org/wiki/BugZappers

(In reply to comment #15)
> Jeffrey C. Ollie,  How reproducible is this?  Does it crash every time you open
> a new tab?  Can you provide a backtrace?

It's only happened to me once, and I do not know how to reproduce it.  I'll attach a backtrace.

Created attachment 416239 [details]
backtrace

This message is a reminder that Fedora 12 is nearing its end of life.
Approximately 30 (thirty) days from now Fedora will stop maintaining
and issuing updates for Fedora 12.  It is Fedora's policy to close all
bug reports from releases that are no longer maintained.  At that time
this bug will be closed as WONTFIX if it remains open with a Fedora 
'version' of '12'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version prior to Fedora 12's end of life.

Bug Reporter: Thank you for reporting this issue and we are sorry that 
we may not be able to fix it before Fedora 12 is end of life.  If you 
would still like to see this bug fixed and are able to reproduce it 
against a later version of Fedora please change the 'version' of this 
bug to the applicable version.  If you are unable to change the version, 
please add a comment here and someone will do it for you.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events.  Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

The process we are following is described here: 
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Fedora 12 changed to end-of-life (EOL) status on 2010-12-02. Fedora 12 is 
no longer maintained, which means that it will not receive any further 
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of 
Fedora please feel free to reopen this bug against that version.

Thank you for reporting this bug and we are sorry it could not be fixed.