Bug 568278 - [abrt] crash in firefox-3.5.8-1.fc12: Process /usr/lib/firefox-3.5.8/firefox was killed by signal 11 (SIGSEGV)
Summary: [abrt] crash in firefox-3.5.8-1.fc12: Process /usr/lib/firefox-3.5.8/firefox ...
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Fedora
Classification: Fedora
Component: firefox
Version: 12
Hardware: i686
OS: Linux
low
medium
Target Milestone: ---
Assignee: Gecko Maintainer
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:d138032b118ceae8c82005040cf...
: 583012 583171 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-02-25 09:40 UTC by Manuel Viana
Modified: 2018-04-11 09:36 UTC (History)
6 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2010-12-03 22:22:09 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: backtrace (122.99 KB, text/plain)
2010-02-25 09:41 UTC, Manuel Viana
no flags Details
Firefox gdb thread apply all backtrace dump file (32.12 KB, text/plain)
2010-03-04 16:31 UTC, Manuel Viana
no flags Details

Description Manuel Viana 2010-02-25 09:40:57 UTC
abrt 1.0.7 detected a crash.

architecture: i686
Attached file: backtrace
cmdline: /usr/lib/firefox-3.5.8/firefox
component: firefox
executable: /usr/lib/firefox-3.5.8/firefox
kernel: 2.6.31.12-174.2.22.fc12.i686.PAE
package: firefox-3.5.8-1.fc12
rating: 4
reason: Process /usr/lib/firefox-3.5.8/firefox was killed by signal 11 (SIGSEGV)
release: Fedora release 12 (Constantine)

Comment 1 Manuel Viana 2010-02-25 09:41:00 UTC
Created attachment 396243 [details]
File: backtrace

Comment 2 Chris Campbell 2010-03-03 21:04:02 UTC
#3  <signal handler called>
No symbol table info available.
#4  do_lookup_x (new_hash=<value optimized out>, 
    old_hash=<value optimized out>, ref=<value optimized out>, 
    result=<value optimized out>, scope=<value optimized out>, 
    i=<value optimized out>, flags=<value optimized out>, 
    skip=<value optimized out>, undef_map=<value optimized out>)
    at dl-lookup.c:98
        sym = <value optimized out>
        bitmask = <value optimized out>
        n = <value optimized out>
        num_versions = 0
        versioned_sym = 0x0
        map = 0xb762cc00
        type_class = 0
        undef_name = 0x1e19289 "__gmon_start__"
        strtab = 0x980a84 ""
        symidx = 0
        version = 0x0
#5  0x00990d28 in _dl_lookup_symbol_x (undef_name=<value optimized out>, 
    undef_map=<value optimized out>, ref=<value optimized out>, 
    symbol_scope=<value optimized out>, version=<value optimized out>, 
    type_class=<value optimized out>, flags=<value optimized out>, 
    skip_map=<value optimized out>) at dl-lookup.c:721
        res = <value optimized out>
        start = <value optimized out>
        new_hash = <value optimized out>
        old_hash = 4294967295
        current_value = {s = 0x0, m = 0x0}
        scope = <value optimized out>
        i = <value optimized out>
        protected = <value optimized out>
#6  0x00992213 in elf_machine_rel (scope=<value optimized out>, 
    reloc_mode=<value optimized out>, 
    consider_profiling=<value optimized out>)
    at ../sysdeps/i386/dl-machine.h:344
        _lr = <value optimized out>
        _tc = <value optimized out>
        v = <value optimized out>
        refsym = <value optimized out>
        sym_map = <value optimized out>
        value = <value optimized out>
#7  elf_dynamic_do_rel (scope=<value optimized out>, 
    reloc_mode=<value optimized out>, 
    consider_profiling=<value optimized out>) at do-rel.h:120
        relative = <value optimized out>
        r = 0x1e20a84




-- 
Fedora Bugzappers volunteer triage team
https://fedoraproject.org/wiki/BugZappers

Comment 3 Chris Campbell 2010-03-03 21:06:32 UTC
Reporter, If this is a reproducible bug, we need some more information from you, if you are willing.

First, could you elaborate on the steps required to reproduce it?

Then, see next comment.



-- 
Fedora Bugzappers volunteer triage team
https://fedoraproject.org/wiki/BugZappers

Comment 4 Chris Campbell 2010-03-03 21:06:56 UTC
Thanks for the bug report.  We have reviewed the information you have provided
above, and there is some additional information we require that will be helpful
in our diagnosis of this issue.

First of all, could we get output of the command, saved in a text file and
attached to this bug:

$ rpm -qa *xulrun* *firefox* *mozilla* *flash* *plugin*

Please also install firefox-debuginfo.

# debuginfo-install firefox

Then run firefox inside the gdb debugger. Please do the following:

$ firefox -g

Stuff will appear. Ignore this until you get the gdb command prompt, then do:

(gdb) run

Now, firefox should start up. Use it and reproduce the crash. When firefox
crashes, you should be back to the gdb prompt. Now do:

(gdb) thread apply all backtrace

More screens of stuff will occur. Copy all of this part to your editor of
choice, such as gedit, and save it as an uncompressed file and attach it to
this bug report.

We will review this issue again once you've had a chance to attach this
information.

Thanks in advance, for your extra efforts.



-- 
Fedora Bugzappers volunteer triage team
https://fedoraproject.org/wiki/BugZappers

Comment 5 Manuel Viana 2010-03-04 15:41:20 UTC
Output of rpm -qa *xulrun* *firefox* *mozilla* *flash* *plugin*

abrt-plugin-bugzilla-1.0.7-1.fc12.i686
nagios-plugins-1.4.13-17.fc12.i686
plymouth-plugin-two-step-0.8.0-0.2009.29.09.19.3.fc12.i686
nagios-plugins-perl-1.4.13-17.fc12.i686
xulrunner-1.9.1.8-1.fc12.i686
report-plugin-bugzilla-0.7-1.fc12.i686
xulrunner-debuginfo-1.9.1.5-1.fc12.i686
libflashsupport-000-0.5.svn20070904.i386
nagios-plugins-ifoperstatus-1.4.13-17.fc12.i686
anaconda-yum-plugins-1.0-5.fc12.noarch
setroubleshoot-plugins-2.1.40-1.fc12.noarch
firefox-3.5.8-1.fc12.i686
abrt-plugin-runapp-1.0.7-1.fc12.i686
mozilla-filesystem-1.9-5.fc12.i686
totem-mozplugin-2.28.5-1.fc12.i686
flash-plugin-10.0.45.2-release.i386
gstreamer-plugins-flumpegdemux-0.10.15-8.fc12.i686
gutenprint-plugin-5.2.4-7.fc12.i686
kipi-plugins-1.1.0-1.fc12.2.i686
gstreamer-plugins-base-0.10.25.1-2.fc12.i686
nagios-plugins-ifstatus-1.4.13-17.fc12.i686
abrt-plugin-logger-1.0.7-1.fc12.i686
xine-plugin-1.0.2-3.fc12.i686
gstreamer-plugins-good-0.10.17-4.fc12.i686
plymouth-plugin-label-0.8.0-0.2009.29.09.19.3.fc12.i686
kipi-plugins-libs-1.1.0-1.fc12.2.i686
xulrunner-devel-1.9.1.8-1.fc12.i686
PackageKit-yum-plugin-0.5.6-1.fc12.i686

Comment 6 Manuel Viana 2010-03-04 16:31:43 UTC
Created attachment 397847 [details]
Firefox gdb thread apply all backtrace dump file

The gdb dump file on a Firexfox crash case.
Operations performed:
$ firefox -g
(gdb) run
Firefox crash with a Show Passwords selection on Preferences forms
(gdb) thread apply all backtrace

Comment 7 Chris Campbell 2010-03-19 03:06:11 UTC
Good back-trace from abrt and gdb back-trace attached. Cause of crash listed as "Firefox crash with a Show Passwords selection on Preferences forms". Reporter, if you can be more explicit with your exact series of steps we could use to reproduce this issue it would be helpful, but since the cause is listed, I am setting keyword triaged and status and assigning.



-- 
Fedora Bugzappers volunteer triage team
https://fedoraproject.org/wiki/BugZappers

Comment 8 Matěj Cepl 2010-03-20 08:17:57 UTC
backtrace is good but at least since frame #22 has nothing to do with Firefox and all to do with libcanberra:

#0  do_lookup_x (new_hash=<value optimized out>, old_hash=<value optimized out>, ref=<value optimized out>, result=<value optimized out>, 
    scope=<value optimized out>, i=<value optimized out>, flags=<value optimized out>, skip=<value optimized out>, undef_map=<value optimized out>)
    at dl-lookup.c:98
#1  0x00990d28 in _dl_lookup_symbol_x (undef_name=<value optimized out>, undef_map=<value optimized out>, ref=<value optimized out>, 
    symbol_scope=<value optimized out>, version=<value optimized out>, type_class=<value optimized out>, flags=<value optimized out>, 
    skip_map=<value optimized out>) at dl-lookup.c:721
#2  0x00992213 in elf_machine_rel (scope=<value optimized out>, reloc_mode=<value optimized out>, consider_profiling=<value optimized out>)
    at ../sysdeps/i386/dl-machine.h:344
#3  elf_dynamic_do_rel (scope=<value optimized out>, reloc_mode=<value optimized out>, consider_profiling=<value optimized out>) at do-rel.h:120
#4  _dl_relocate_object (scope=<value optimized out>, reloc_mode=<value optimized out>, consider_profiling=<value optimized out>) at dl-reloc.c:268
#5  0x00999a66 in dl_open_worker (a=<value optimized out>) at dl-open.c:367
#6  0x00995506 in _dl_catch_error (objname=0xbfff6d0c, errstring=0xbfff6d08, mallocedp=0xbfff6d13, operate=<value optimized out>, 
    args=<value optimized out>) at dl-error.c:178
#7  0x009993e3 in _dl_open (file=<value optimized out>, mode=<value optimized out>, caller_dlopen=<value optimized out>, nsid=<value optimized out>, 
    argc=<value optimized out>, argv=<value optimized out>, env=<value optimized out>) at dl-open.c:583
#8  0x00b20c3b in dlopen_doit (a=<value optimized out>) at dlopen.c:67
#9  0x00995506 in _dl_catch_error (objname=0xb7d1202c, errstring=0xb7d12030, mallocedp=0xb7d12028, operate=<value optimized out>, 
    args=<value optimized out>) at dl-error.c:178
#10 0x00b2103c in _dlerror_run (operate=<value optimized out>, args=<value optimized out>) at dlerror.c:164
#11 0x00b20b71 in __dlopen (file=<value optimized out>, mode=<value optimized out>) at dlopen.c:88
#12 0x034053b8 in ?? () from /usr/lib/libltdl.so.7
#13 0x034030d3 in ?? () from /usr/lib/libltdl.so.7
#14 0x03403a4a in ?? () from /usr/lib/libltdl.so.7
#15 0x034042d6 in lt_dlopenadvise () from /usr/lib/libltdl.so.7
#16 0x034043a6 in lt_dlopenext () from /usr/lib/libltdl.so.7
#17 0x03a1ca51 in ?? () from /usr/lib/libcanberra.so.0
#18 0x03a1cec2 in ?? () from /usr/lib/libcanberra.so.0
#19 0x03a138c8 in ?? () from /usr/lib/libcanberra.so.0
#20 0x03a14176 in ca_context_play_full () from /usr/lib/libcanberra.so.0
#21 0x03a144f4 in ca_context_play () from /usr/lib/libcanberra.so.0
#22 0x029835b5 in nsSound::PlaySystemEventSound (this=0x9a238520, aSoundAlias=...) at nsSound.cpp:456
#23 0x0298368e in nsSound::PlaySystemSound (this=0x9a238520, aSoundAlias=...) at nsSound.cpp:469
#24 0x02a558bf in NS_InvokeByIndex_P () from /usr/lib/xulrunner-1.9.1/libxul.so

Comment 9 Lennart Poettering 2010-03-22 12:42:44 UTC
libcanberra? Looks more like a dlopen() issue? glibc problem or more likely some memory corruption from mozilla.

Comment 10 Chris Campbell 2010-04-18 16:51:12 UTC
*** Bug 583012 has been marked as a duplicate of this bug. ***

Comment 11 Chris Campbell 2010-04-18 16:57:38 UTC
*** Bug 583171 has been marked as a duplicate of this bug. ***

Comment 12 Bug Zapper 2010-11-03 21:21:37 UTC
This message is a reminder that Fedora 12 is nearing its end of life.
Approximately 30 (thirty) days from now Fedora will stop maintaining
and issuing updates for Fedora 12.  It is Fedora's policy to close all
bug reports from releases that are no longer maintained.  At that time
this bug will be closed as WONTFIX if it remains open with a Fedora 
'version' of '12'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version prior to Fedora 12's end of life.

Bug Reporter: Thank you for reporting this issue and we are sorry that 
we may not be able to fix it before Fedora 12 is end of life.  If you 
would still like to see this bug fixed and are able to reproduce it 
against a later version of Fedora please change the 'version' of this 
bug to the applicable version.  If you are unable to change the version, 
please add a comment here and someone will do it for you.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events.  Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

The process we are following is described here: 
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Comment 13 Bug Zapper 2010-12-03 22:22:09 UTC
Fedora 12 changed to end-of-life (EOL) status on 2010-12-02. Fedora 12 is 
no longer maintained, which means that it will not receive any further 
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of 
Fedora please feel free to reopen this bug against that version.

Thank you for reporting this bug and we are sorry it could not be fixed.


Note You need to log in before you can comment on or make changes to this bug.