Bug 540106 - [abrt] crash detected in firefox-3.5.5-1.fc12 [@ nsCookieService::RemoveCookieFromList]
Summary: [abrt] crash detected in firefox-3.5.5-1.fc12 [@ nsCookieService::RemoveCooki...
Keywords:
Status: CLOSED DUPLICATE of bug 538207
Alias: None
Product: Fedora
Classification: Fedora
Component: firefox
Version: 12
Hardware: i686
OS: Linux
low
medium
Target Milestone: ---
Assignee: Martin Stransky
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:27f6d0021ae0cd6048965503637...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-11-22 12:46 UTC by Michal Nowak
Modified: 2018-04-11 19:04 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2009-12-10 01:17:52 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: backtrace (41.51 KB, text/plain)
2009-11-22 12:47 UTC, Michal Nowak
no flags Details

Description Michal Nowak 2009-11-22 12:46:53 UTC
abrt detected a crash.

Comment
-----
Browsing https://www.mojebanka.cz/InternetBanking/?L=CS but spotted the crash before on another site.

[...]
Gdk-ERROR **: The program 'firefox' received an X Window System error.
This probably reflects a bug in the program.
The error was 'BadValue (integer parameter out of range for operation)'.
  (Details: serial 4279999 error_code 2 request_code 53 minor_code 0)
  (Note to programmers: normally, X errors are reported asynchronously;
   that is, you will receive the error a while after causing it.
   To debug your program, run it with the --sync command line
   option to change this behavior. You can then get a meaningful
   backtrace from your debugger if you break on the gdk_x_error() function.)
aborting...
/usr/lib/firefox-3.5.5/run-mozilla.sh: line 131:  2109 Aborted                 (core dumped) "$prog" ${1+"$@"}

Attached file: backtrace
cmdline: /usr/lib/firefox-3.5.5/firefox
component: firefox
executable: /usr/lib/firefox-3.5.5/firefox
kernel: 2.6.31.6-134.fc12.i686
package: firefox-3.5.5-1.fc12
rating: 4
reason: Process was terminated by signal 11

Comment 1 Michal Nowak 2009-11-22 12:47:00 UTC
Created attachment 372891 [details]
File: backtrace

Comment 2 Matěj Cepl 2009-11-25 15:47:09 UTC
#3  <signal handler called>
No symbol table info available.
#4  0x0229ecc4 in nsCookieService::RemoveCookieFromList (this=0xb1f39ce0, 
    aIter=...) at nsCookieService.cpp:2194
No locals.
#5  0x022a1fe6 in nsCookieService::AddInternal (this=<value optimized out>, 
    aCookie=<value optimized out>, aCurrentTime=<value optimized out>, 
    aHostURI=<value optimized out>, aCookieHeader=<value optimized out>, 
    aFromHttp=<value optimized out>) at nsCookieService.cpp:1508
        data = {currentTime = 1258765833, oldestTime = 9223372036854775807, 
          iter = {entry = 0x0, prev = 0x0, current = 0x0}}
        transaction = {mConnection = {<nsCOMPtr_base> = {mRawPtr = 
    0xa483b640}, <No data fields>}, mHasTransaction = 0, mCommitOnComplete = 
    1, mCompleted = 0}
        matchIter = {entry = 0x0, prev = 0x0, current = 0x0}
        foundCookie = <value optimized out>
        oldCookie = {mRawPtr = 0x0}
#6  0x022a2616 in nsCookieService::SetCookieInternal (
    this=<value optimized out>, aHostURI=<value optimized out>, 
    aChannel=<value optimized out>, aCookieHeader=<value optimized out>, 
    aServerTime=<value optimized out>, aFromHttp=<value optimized out>)
    at nsCookieService.cpp:1430
        currentTimeInUsec = <value optimized out>
        cookie = {mRawPtr = 0xa09b6740}
        cookieAttributes = {name = {<nsFixedCString> = {<nsCString> = 
    {<nsACString_internal> = {mData = 0xbfa6f354 "PREF", mLength = 4, 
                  mFlags = 65553}, <No data fields>}, mFixedCapacity = 63, 
              mFixedBuf = 0xbfa6f354 "PREF"}, mStorage = 
    "PREF\000\363\246\277a\360\004\a0\030A\242(\205\220\247\033\b\000\000(\205\220\247I\360\004\a\004\352\v\a\230\363\246\277\003\a8\030A\242\000\000\000\000\270\363\246\277\370\005\005\a\004\352\v\a"}, value = {<nsFixedCString> = 
    {<nsCString> = {<nsACString_internal> = {mData = 
    0xa0525c18 "ID=5250d0e02cc6ccad:TM=1258765833:LM=1258765833:S=sMcQryXXjx7lu0t8", mLength = 66, mFlags = 65541}, <No data fields>}, mFixedCapacity = 63, 
              mFixedBuf = 0xbfa6f3a8 ""}, mStorage = 
    "\000\304\006\a\004\352\v\a9\254\003\a\000\000\000\000\330\363\246\277\342\360\004\a\250\200\301\240\070\030A\242\000\000\000\000\\\364\246\277\311\360\004\a\004\352\v\a\370\363\246\277s\246\003\a\250\200\301\240\000\000\000"}, 
          host = {<nsFixedCString> = {<nsCString> = {<nsACString_internal> = {
                  mData = 0xbfa6f3fc ".google.com", mLength = 11, mFlags = 
    65553}, <No data fields>}, mFixedCapacity = 63, mFixedBuf = 
    0xbfa6f3fc ".google.com"}, mStorage = 
    ".google.com\000X\364\246\277\\\364\246\277\\\364\246\277\310\364\246\277\210\364\246\277\305~\000\ah\364\246\277\310\364\246\277\000\000\000\000\001\000\000\000\000\000\000\000X\364\246\277\\", <incomplete sequence \364\246\277>}, 
          path = {<nsFixedCString> = {<nsCString> = {<nsACString_internal> = {
                  mData = 0xbfa6f450 "/", mLength = 1, mFlags = 
    65553}, <No data fields>}, mFixedCapacity = 63, mFixedBuf = 
    0xbfa6f450 "/"}, mStorage = 
    "/\000\246\277\234d\257\002\000\000\000\000\275T\307\002\304\364\246\277,\365\246\277\373\310\b\aDX6\003@\177\257\002DX6\003\230\364\246\277\311m\257\002\257T\307\002\001\000\000\000\000\000\000\000\000\000\000"}, expires = 
    {<nsFixedCString> = {<nsCString> = {<nsACString_internal> = {mData = 
    0xbfa6f4a4 "Mon, 21-Nov-2011 01:10:33 GMT", mLength = 29, mFlags = 
    65553}, <No data fields>}, mFixedCapacity = 63, mFixedBuf = 
    0xbfa6f4a4 "Mon, 21-Nov-2011 01:10:33 GMT"}, mStorage = 
    "Mon, 21-Nov-2011 01:10:33 GMT\000\066\003@\266\203\244\350\364\246\277\034h\034\002\000\267\203\244DX6\003\370\364\246\277\311m\257\002\377g\034\002"}, 
          maxage = {<nsFixedCString> = {<nsCString> = 
    {<nsACString_internal> = {mData = 0xbfa6f4f8 "", mLength = 0, mFlags = 
    65553}, <No data fields>}, mFixedCapacity = 63, mFixedBuf = 
    0xbfa6f4f8 ""}, mStorage = 
    "\000\365\246\277%a\231\002\000\000\000\000\070\365\246\277\000\000\000\000,\365\246\277\070\365\246\277\001\000\000\000\070\365\246\277\216\320\377\006D\266\203\244\320x\365\246\277\257T\307\002\016\000\000\000\001\000\000"}, 
          expiryTime = 1321837833, isSession = 0, isSecure = 0, isHttpOnly = 
    0}
        savedCookieHeader = {<nsCString> = {<nsACString_internal> = {mData = 
    0xa09b62e8 "PREF=ID=5250d0e02cc6ccad:TM=1258765833:LM=1258765833:S=sMcQryXXjx7lu0t8; expires=Mon, 21-Nov-2011 01:10:33 GMT; path=/; domain=.google.com", 
              mLength = 138, mFlags = 5}, <No data fields>}, <No data fields>}
        newCookie = 0
#7  0x022a2798 in nsCookieService::SetCookieStringInternal (
    this=<value optimized out>, aHostURI=<value optimized out>, 
    aPrompt=<value optimized out>, aCookieHeader=<value optimized out>, 
    aServerTime=<value optimized out>, aChannel=<value optimized out>, 
    aFromHttp=<value optimized out>) at nsCookieService.cpp:785
        cookieHeader = {<nsCString> = {<nsACString_internal> = {mData = 
    0xa09b6732 "", mLength = 0, mFlags = 
    1}, <No data fields>}, <No data fields>}
        cookieStatus = <value optimized out>
        tempServerTime = 1258765833000000
        serverTime = 1258765833
        transaction = {mConnection = {<nsCOMPtr_base> = {mRawPtr = 
    0xa483b640}, <No data fields>}, mHasTransaction = 1, mCommitOnComplete = 
    1, mCompleted = 0}
#8  0x0228e810 in nsHttpChannel::SetCookie (this=<value optimized out>, 
    aCookieHeader=<value optimized out>) at nsHttpChannel.cpp:4731
        cs = 0xb1f39ce0
        prompt = {<nsCOMPtr_base> = {mRawPtr = 0xa0c4d2e0}, <No data fields>}
#9  0x02299b80 in nsHttpChannel::ProcessResponse (this=<value optimized out>)
    at nsHttpChannel.cpp:987
        rv = <value optimized out>
        httpStatus = 302
#10 0x02299c71 in nsHttpChannel::OnStartRequest (this=<value optimized out>, 
    request=<value optimized out>, ctxt=<value optimized out>)
    at nsHttpChannel.cpp:4851
        fallingBack = 117487401
#11 0x0221e78d in nsInputStreamPump::OnStateStart (this=<value optimized out>)
    at nsInputStreamPump.cpp:439
        rv = <value optimized out>
#12 0x0221ec02 in nsInputStreamPump::OnInputStreamReady (
    this=<value optimized out>, stream=<value optimized out>)
    at nsInputStreamPump.cpp:395
        nextState = <value optimized out>
#13 0x02ac491c in nsInputStreamReadyEvent::Run (this=<value optimized out>)

Comment 3 Matěj Cepl 2009-11-25 20:30:49 UTC
Reporter, do you have any idea how should we try to reproduce this issue here?

Thank you for filing the report

Comment 4 Michal Nowak 2009-11-26 09:07:58 UTC
No clean reproducer; happened for me while browsing mojebanka.cz and gmail.com but crashed on other pages too. It happens once per day. Could be by some extension - though no idea.

Comment 5 Matěj Cepl 2009-12-10 01:17:52 UTC

*** This bug has been marked as a duplicate of bug 538207 ***


Note You need to log in before you can comment on or make changes to this bug.