Created attachment 373662 [details]
File: backtrace

*** Bug 541183 has been marked as a duplicate of this bug. ***

#3  <signal handler called>
No symbol table info available.
#4  nsExpirationTracker<imgCacheEntry, 3u>::RemoveObject (this=0xb6f25580, 
    aObj=0xac860800) at ../../../dist/include/xpcom/nsExpirationTracker.h:156
        state = 0xac860814
        last = 899530149
        lastObj = <value optimized out>
#5  0x0332d356 in nsExpirationTracker<imgCacheEntry, 3u>::MarkUsed (
    this=<value optimized out>, aObj=<value optimized out>)
    at ../../../dist/include/xpcom/nsExpirationTracker.h:176
        state = 0xac860814
#6  0x0332be8f in imgLoader::LoadImage (this=<value optimized out>, 
    aURI=<value optimized out>, aInitialDocumentURI=<value optimized out>, 
    aReferrerURI=<value optimized out>, aLoadGroup=<value optimized out>, 
    aObserver=<value optimized out>, aCX=<value optimized out>, 
    aLoadFlags=<value optimized out>, aCacheKey=<value optimized out>, 
    aRequest=<value optimized out>, _retval=<value optimized out>)
    at imgLoader.cpp:1223
        cache = @0x4393150
        spec = {<nsFixedCString> = {<nsCString> = {<nsACString_internal> = {
                mData = 0xb05d21f8 "http://docs.google.com/favicon.ico", 
                mLength = 34, mFlags = 65541}, <No data fields>}, 
            mFixedCapacity = 63, mFixedBuf = 0xbfd72b60 ""}, mStorage = 
    "\000\221_\254\274!]\260\240\204\071\004\234+\327\277xS#\003\360be\254\340\265&\267\000\000\000\000\300\221_\254X\251\004\216\302\003\261Q#\003D\370\066\004\360be\254p\222_\254\274+\327\277"}
        request = {mRawPtr = 0xaccd0b00}
        rv = <value optimized out>
        requestFlags = 0
        entry = {mRawPtr = 0xac860800}
#7  0x034b0d34 in nsContentUtils::LoadImage (aURI=<value optimized out>, 
    aLoadingDocument=<value optimized out>, 
    aLoadingPrincipal=<value optimized out>, aReferrer=<value optimized out>, 
    aObserver=<value optimized out>, aLoadFlags=<value optimized out>, 
    aRequest=<value optimized out>) at nsContentUtils.cpp:2421
        loadGroup = {<nsCOMPtr_base> = {mRawPtr = 
    0xab57a5e0}, <No data fields>}
        documentURI = 0xac5f9270
#8  0x034f0098 in nsImageLoadingContent::LoadImage (
    this=<value optimized out>, aNewURI=<value optimized out>, 
    aForce=<value optimized out>, aNotify=<value optimized out>, aDocument=
    0x9d02d400, aLoadFlags=<value optimized out>)
    at nsImageLoadingContent.cpp:605
        rv = <value optimized out>
        loadImage = 1
        newImageStatus = <value optimized out>
        cancelResult = <value optimized out>
        req = <value optimized out>
#9  0x034f0200 in nsImageLoadingContent::LoadImage (
    this=<value optimized out>, aNewURI=<value optimized out>, 
    aForce=<value optimized out>, aNotify=<value optimized out>)
    at nsImageLoadingContent.cpp:509
        doc = 0x9d02d400
        imageURI = {<nsCOMPtr_base> = {mRawPtr = 
    0xac6562f0}, <No data fields>}
        rv = <value optimized out>
        equal = -1076417296
#10 0x0356ab01 in nsHTMLImageElement::SetAttr (this=<value optimized out>, 
    aNameSpaceID=<value optimized out>, aName=<value optimized out>, 
    aPrefix=<value optimized out>, aValue=<value optimized out>, 
    aNotify=<value optimized out>) at nsHTMLImageElement.cpp:514
        oldCurrentRequest = {<nsCOMPtr_base> = {mRawPtr = 
    0x0}, <No data fields>}
#11 0x03551054 in nsGenericHTMLElement::SetAttr (this=<value optimized out>, 
    aName=<value optimized out>, aValue=<value optimized out>, aNotify=1, 
    aNameSpaceID=0) at nsGenericHTMLElement.h:171
No locals.
#12 0x0356b32c in nsHTMLImageElement::SetSrc (this=<value optimized out>, 
    aValue=<value optimized out>) at nsHTMLImageElement.cpp:219
No locals.
#13 0x03af2c2f in NS_InvokeByIndex_P ()

Reporter, could you please describe the steps which lead to the crash, please.

THank you for reporting this issue

(In reply to comment #4)
> Reporter, could you please describe the steps which lead to the crash, please.
> 
> THank you for reporting this issue  

Excuse me, cannot remember detail.

What I can remember: I opened some pages like Gmail/GReader. And then, search for something in Google, most likely it was "blog.sina.com.cn" or some sites like youtube. At the very time, firefox crashed. (This has happened several times.)

I hope this could be helpful. And I'll notice the steps if this happen again.

*** Bug 541868 has been marked as a duplicate of this bug. ***

*** Bug 541790 has been marked as a duplicate of this bug. ***

*** Bug 541818 has been marked as a duplicate of this bug. ***

*** Bug 541819 has been marked as a duplicate of this bug. ***

I think I found the solution for this issue. The core of the problem was that I had accidently two versions of Firefox installed on my Fedora box: firefox-3.5.5-1.fc12 from the Fedora repositories and FF 3.5.5 (german) from the Mozilla website. Although I _thought_ I was using 3.5.5-1.fc12 I always started the binary which I directly downloaded from Mozilla. The latter one crashes; the version from the Fedora repository does _not_ crash.

Thank you for letting us know. And yes I can confirm that there is something with the upstream Firefox binary, that it doesn't work for me in the Rawhide virtual machine.

I only have one firefox (), but it had crashed very often yesterday, when I download avast, when I watch youku.com, and others. BOINC 6.10.17 and Transmission worked together. But the days before is OK, just yesterday something wrong.

*** Bug 547936 has been marked as a duplicate of this bug. ***

*** Bug 546837 has been marked as a duplicate of this bug. ***