abrt detected a crash. How to reproduce ----- 1. Start firefox 2. Start typing in the addressbar 3. Firefox will crash with ca 50% probability Comment ----- Some times firefox also crashes shortly after one stops typing, therefore the cause may not be necessarily the typing but some triger that is fired when starting to type. Does not occur if opening websites only through bookmarks or typing somewhere else. Also crashes occasionally when clicking on the certificate information left of the addressbar for sites with SSL. Attached file: backtrace cmdline: /usr/lib64/firefox-3.5.5/firefox component: firefox executable: /usr/lib64/firefox-3.5.5/firefox kernel: 2.6.31.5-127.fc12.x86_64 package: firefox-3.5.5-1.fc12 rating: 3 reason: Process was terminated by signal 11
Created attachment 374419 [details] File: backtrace
#2 <signal handler called> No symbol table info available. #3 sqlite3VdbeExec (p=0x7f5369329798) at sqlite3.c:53010 pc = <value optimized out> pOp = 0x7f5369357c68 rc = 0 db = 0x7f536941d008 encoding = <value optimized out> pIn1 = <value optimized out> pIn2 = 0x7f53693597e8 pIn3 = 0x7f5369359238 pOut = 0x7f5369359970 iCompare = <value optimized out> aPermute = <value optimized out> nProgressOps = 0 u = {aa = {pcDest = 6}, ab = {p1 = 6, p2 = 32595, n = 0, pVar = 0x100000000}, ac = { zMalloc = 0x7f5300000006 <Address 0x7f5300000006 out of bounds>, n = 0, p1 = 0, p2 = 0}, ad = {pMem = 0x7f5300000006, i = 0}, ae = {nByte = 139994459013126}, af = {flags = 6, iA = 0, iB = 4294967296, rA = 6.9167266182315494e-310, rB = 0}, ag = { i = 6, pArg = 0x0, ctx = {pFunc = 0x100000000, pVdbeFunc = 0x7f5362206808, s = {u = {i = 0, nZero = 0, pDef = 0x0, pRowSet = 0x0}, r = 6.9167266182414307e-310, db = 0x7f53622068a8, z = 0x7f53622068bc "\a", n = 5, flags = 4, type = 0 '\000', enc = 0 '\000', xDel = 0x3, zMalloc = 0x0}, pMem = 0x7f53693597e8, isError = 0, pColl = 0x0}, apVal = 0x0, n = 0}, ah = {a = 139994459013126, b = 0}, ai = {flags = 6, res = 32595, affinity = 0 '\000'}, aj = { n = 6, i = 32595, p1 = 0, p2 = 0, pKeyInfo = 0x100000000, idx = 1646290952, pColl = 0x0, bRev = 1646291152}, ak = {v1 = 6, v2 = 32595}, al = {c = 6}, am = {payloadSize = 6, payloadSize64 = 0, p1 = 0, p2 = 1, pC = 0x7f5362206808, zRec = 0x0, pCrsr = 0x7f53622068d0, aType = 0x7f53622068a8, aOffset = 0x7f53622068bc, nField = 5, len = 4, i = 3, zData = 0x0, pDest = 0x7f53693597e8, sMem = {u = {i = 0, nZero = 0, pDef = 0x0, pRowSet = 0x0}, r = 0, db = 0x0, z = 0x0, n = 0, flags = 0, type = 0 '\000', enc = 0 '\000', xDel = 0, zMalloc = 0x0}, zIdx = 0x7f536904b531 "", zEndHdr = 0x7f536904b531 "", offset = 4, offset64 = 17, szHdr = 1, avail = 0}, an = { zAffinity = 0x7f5300000006 <Address 0x7f5300000006 out of bounds>, pData0 = 0x0, pLast = 0x100000000, pRec = 0x7f5362206808}, ao = { zNewRecord = 0x7f5300000006 <Address 0x7f5300000006 out of bounds>, pRec = 0x0, nData = 4294967296, nHdr = 1646290952, nByte = 0, nZero = 1646291152, nVarint = 32595, serial_type = 1646291112, pData0 = 0x7f53622068bc, pLast = 0x400000005, nField = 3, zAffinity = 0x0, file_format = 1765119976, i = 32595, len = 0}, ap = {nEntry = 139994459013126, pCrsr = 0x0}, aq = { pBt = 0x7f5300000006}, ar = {p1 = 6, zName = 0x0, nName = 0, pNew = 0x7f5362206808, pSavepoint = 0x0, pTmp = 0x7f53622068d0, iSavepoint = 1646291112, ii = 32595}, as = { desiredAutoCommit = 6, iRollback = 32595, turnOnAC = 0}, at = { pBt = 0x7f5300000006}, au = {iMeta = 6, iDb = 32595, iCookie = 0}, av = {pDb = 0x7f5300000006}, aw = {iMeta = 6, pBt = 0x0}, ax = {nField = 6, pKeyInfo = 0x0, p2 = 0, iDb = 1, wrFlag = 1646290952, pX = 0x0, pCur = 0x7f53622068d0, pDb = 0x7f53622068a8}, ay = {pCx = 0x7f5300000006}, az = { pCx = 0x7f5300000006}, ba = {res = 6, oc = 32595, pC = 0x0, r = { pKeyInfo = 0x100000000, nField = 26632, flags = 25120, rowid = 0, aMem = 0x7f53622068d0}, nField = 1646291112, iKey = 139996105304252}, bb = {pC = 0x7f5300000006}, bc = { alreadyExists = 6, pC = 0x0, res = 0, pIdxKey = 0x7f5362206808, aTempRec = "\000\000\000\000\000\000\000\000\320h bS\177\000\000\250h bS\177\000\000\274h bS\177\000\000\005\000\000\000\004\000\000\000\003", '\000' <repeats 15 times>"\350, \227\065iS\177", '\000' <repeats 58 times>, "1\265\004iS\177\000\000\061\265\004iS\177\000\000\004\000\000\000\067\000\000\000\021\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000 %\227<7\000\000\000\340s\227<7\000\000\000@\000\000\000\000\000\000\000/mi<7", '\000' <repeats 11 times>, "?\000\000\000\000\000"}, bd = {ii = 6, pCx = 0x0, pCrsr = 0x100000000, nField = 26632, aMem = 0x0, r = { pKeyInfo = 0x7f53622068d0, nField = 26792, flags = 25120, rowid = 139996105304252, aMem = 0x400000005}, R = 3}, be = { pC = 0x7f5300000006, pCrsr = 0x0, res = 0, iKey = 139996105304072}, bf = {v = 139994459013126, pC = 0x0, res = 0, cnt = 1, pMem = 0x7f5362206808}, bg = { pData = 0x7f5300000006, pKey = 0x0, iKey = 4294967296, pC = 0x7f5362206808, nZero = 0, seekResult = 0, zDb = 0x7f53622068d0 "\310^IiS\177", zTbl = 0x7f53622068a8 "", op = 1646291132}, bh = {iKey = 139994459013126, pC = 0x0}, bi = { pC = 0x7f5300000006, pCrsr = 0x0, n = 0, n64 = 139996105304072}, bj = {pC = 0x7f5300000006, v = 0, pVtab = 0x100000000, pModule = 0x7f5362206808}, bk = {pC = 0x7f5300000006}, bl = { pC = 0x7f5300000006, pCrsr = 0x0, res = 0}, bm = { pC = 0x7f5300000006, pCrsr = 0x0, res = 0}, bn = { pC = 0x7f5300000006, pCrsr = 0x0, res = 0}, bo = { pC = 0x7f5300000006, pCrsr = 0x0, nKey = 0, zKey = 0x7f5362206808 "\320h bS\177"}, bp = {pC = 0x7f5300000006, pCrsr = 0x0, res = 0, r = {pKeyInfo = 0x7f5362206808, nField = 0, flags = 0, rowid = 139996105304272, aMem = 0x7f53622068a8}}, bq = {pCrsr = 0x7f5300000006, pC = 0x0, rowid = 4294967296}, br = { pC = 0x7f5300000006, res = 0, r = {pKeyInfo = 0x100000000, nField = 26632, flags = 25120, rowid = 0, aMem = 0x7f53622068d0}}, bs = {iMoved = 6, iCnt = 32595, pVdbe = 0x0, iDb = 0}, bt = {nChange = 6}, bu = {pgno = 6, flags = 32595, pDb = 0x0}, bv = {iDb = 6, zMaster = 0x0, zSql = 0x100000000 <Address 0x100000000 out of bounds>, initData = {db = 0x7f5362206808, iDb = 0, pzErrMsg = 0x7f53622068d0, rc = 1646291112}}, bw = {nRoot = 6, aRoot = 0x0, j = 0, nErr = 1, z = 0x7f5362206808 "\320h bS\177", pnErr = 0x0}, bx = {pIdx = 0x7f5300000006, pVal = 0x0}, by = { pIdx = 0x7f5300000006, val = 0}, bz = {iSet = 6, exists = 32595}, ca = {i = 6, pContext = 0x0}, cb = {pContext = 0x7f5300000006}, cc = {n = 6, i = 32595, pMem = 0x0, pRec = 0x100000000, ctx = { pFunc = 0x7f5362206808, pVdbeFunc = 0x0, s = {u = { i = 139996105304272, nZero = 1646291152, pDef = 0x7f53622068d0, pRowSet = 0x7f53622068d0}, r = 6.9167266182394544e-310, db = 0x7f53622068bc, z = 0x400000005 <Address 0x400000005 out of bounds>, n = 3, flags = 0, type = 0 '\000', enc = 0 '\000', xDel = 0, zMalloc = 0x7f53693597e8 "\255\n"}, pMem = 0x0, isError = 0, pColl = 0x0}, apVal = 0x0}, cd = {pMem = 0x7f5300000006}, ce = { pBt = 0x7f5300000006}, cf = {pVTab = 0x7f5300000006}, cg = { pCur = 0x7f5300000006, pVtabCursor = 0x0, pVtab = 0x100000000, pModule = 0x7f5362206808}, ch = {nArg = 6, iQuery = 32595, pModule = 0x0, pQuery = 0x100000000, pArgc = 0x7f5362206808, pVtabCursor = 0x0, pVtab = 0x7f53622068d0, pCur = 0x7f53622068a8, res = 1646291132, i = 32595, apArg = 0x400000005}, ci = { pVtab = 0x7f5300000006, pModule = 0x0, pDest = 0x100000000, sContext = {pFunc = 0x7f5362206808, pVdbeFunc = 0x0, s = {u = { i = 139996105304272, nZero = 1646291152, pDef = 0x7f53622068d0, pRowSet = 0x7f53622068d0}, r = 6.9167266182394544e-310, db = 0x7f53622068bc, z = 0x400000005 <Address 0x400000005 out of bounds>, n = 3, flags = 0, type = 0 '\000', enc = 0 '\000', xDel = 0, zMalloc = 0x7f53693597e8 "\255\n"}, pMem = 0x0, isError = 0, pColl = 0x0}}, cj = {pVtab = 0x7f5300000006, pModule = 0x0, res = 0, pCur = 0x7f5362206808}, ck = {pVtab = 0x7f5300000006, pName = 0x0}, cl = {pVtab = 0x7f5300000006, pModule = 0x0, nArg = 0, i = 1, rowid = 139996105304072, apArg = 0x0, pX = 0x7f53622068d0}, cm = {p1 = 6, nPage = 32595, pPager = 0x0}, cn = { zTrace = 0x7f5300000006 <Address 0x7f5300000006 out of bounds>}} #4 0x000000374c254b58 in sqlite3Step (p=<value optimized out>) at sqlite3.c:49503 db = 0x7f536941d008 rc = <value optimized out> #5 sqlite3_step (p=<value optimized out>) at sqlite3.c:49562 cnt = 0 db = 0x7f536941d008 rc = 3 #6 0x000000374aa1a461 in mozStorageStatement::ExecuteStep ( this=0x7f5369343060, _retval=0x7fff2ae5a1bc) at mozStorageStatement.cpp:568 srv = <value optimized out> #7 0x000000374aa2cb56 in nsNavHistory::CalculateFrecencyInternal ( this=0x7f53694eb800, aPlaceId=<value optimized out>, aTyped=<value optimized out>, aVisitCount=3, aIsBookmarked=0, aFrecency=0x7fff2ae5a218) at nsNavHistory.cpp:7349 numSampledVisits = 2 scoper = {mStatement = {<nsCOMPtr_base> = { mRawPtr = 0x7f5369343060}, <No data fields>}} rv = <value optimized out> hasMore = 1 normalizedNow = <value optimized out> pointsForSampledVisits = <value optimized out> bonus = <value optimized out> #8 0x000000374aa2d7c2 in nsNavHistory::UpdateFrecency (this=0x7f53694eb800, aPlaceId=54044, aIsBookmarked=0) at nsNavHistory.cpp:7295 statsScoper = {mStatement = {<nsCOMPtr_base> = { mRawPtr = 0x7f5369343150}, <No data fields>}} rv = 0 hasResults = 1 hidden = 0 newFrecency = 0 typed = 0 oldFrecency = 100 visitCountForFrecency = 3 updateScoper = {mStatement = {<nsCOMPtr_base> = { mRawPtr = 0x7f53694eb800}, <No data fields>}} #9 0x000000374aa378d2 in nsNavHistory::AddVisit (this=0x7f53694eb800, aURI=
*** This bug has been marked as a duplicate of bug 525477 ***