479099 - crash in FcFontSetSort

Status: RESOLVED INCOMPLETE

(Core :: Graphics, defect)

Description

[Thad Bryson]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.6) Gecko/2009020911 Ubuntu/8.10 (intrepid) Firefox/3.0.6
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.6) Gecko/2009020911 Ubuntu/8.10 (intrepid) Firefox/3.0.6

I get segmentation faults in Firefox, then the browser crashes.  It occassionally freezes though.  The only thing that looks out of place is the i686.  I would imagine it would be i386.  

Here is the stacktrace from gdb:

#0  0xb7cb3cf2 in ?? () from /lib/tls/i686/cmov/libc.so.6
#1  0xb7cb5a8d in ?? () from /lib/tls/i686/cmov/libc.so.6
#2  0xb7cb78c5 in malloc () from /lib/tls/i686/cmov/libc.so.6
#3  0xb6b9e2b6 in FcFontSetSort () from /usr/lib/libfontconfig.so.1
#4  0xb6b9e8bb in FcFontSort () from /usr/lib/libfontconfig.so.1
#5  0xb6c78dbb in ?? () from /usr/lib/libpangoft2-1.0.so.0
#6  0xb6c4553a in pango_font_map_load_fontset ()
   from /usr/lib/libpango-1.0.so.0
#7  0xb6c794f5 in ?? () from /usr/lib/libpangoft2-1.0.so.0
#8  0xb6c455c3 in pango_font_map_load_font () from /usr/lib/libpango-1.0.so.0
#9  0xb6c43983 in pango_context_load_font () from /usr/lib/libpango-1.0.so.0
#10 0xb78eeea7 in ?? () from /usr/lib/xulrunner-1.9.0.6/libxul.so
#11 0xb78f0136 in ?? () from /usr/lib/xulrunner-1.9.0.6/libxul.so
#12 0xb78f1edb in ?? () from /usr/lib/xulrunner-1.9.0.6/libxul.so
#13 0xb78f0709 in gfxPangoFontGroup::CanTakeFastPath ()
   from /usr/lib/xulrunner-1.9.0.6/libxul.so
#14 0xb78f1415 in gfxPangoFontGroup::InitTextRun ()
   from /usr/lib/xulrunner-1.9.0.6/libxul.so
#15 0xb78f1740 in gfxPangoFontGroup::MakeTextRun ()
   from /usr/lib/xulrunner-1.9.0.6/libxul.so
#16 0xb78ecb36 in ?? () from /usr/lib/xulrunner-1.9.0.6/libxul.so
#17 0xb78ecbdb in gfxTextRunWordCache::MakeTextRun ()
   from /usr/lib/xulrunner-1.9.0.6/libxul.so

Reproducible: Couldn't Reproduce

Steps to Reproduce:
This can't be reproduced.  It just happens a lot.

Comment 1

[timeless]

reporter: you're crashing in fontconfig, which isn't ours, please install debugging symbols.

https://wiki.ubuntu.com/MozillaTeam/Bugs#Crashes has some information on the general approach for installing things, but make sure you get fontconfig too.

Comment 2

[Thad Bryson]

I installed fontconfig, but am having a problem installing debugging symbols.  The link you gave me is for Hardy which is ubuntu 8.04, I'm using Ubuntu 8.10.  Not sure if that's the reason.  I replaced the 'hardy' in the debs with 'intrepid'.  I see the firefox-3.0-dbgsym in Synaptic, but I get this error when trying to install it:

firefox-3.0-dbgsym:
  Depends: firefox-3.0 (=3.0.3+nobinonly-0ubuntu2) but 3.0.6+nobinonly-0ubuntu0.8.10.1 is to be installed

Comment 3

[Karl Tomlinson (:karlt)]

Thanks for the stack.
A crash in malloc sounds like a symptom of corruption that happened earlier.
It might be useful to run under gdb with MALLOC_CHECK_=2 in the environment, in which case glibc may abort earlier:

http://www.gnu.org/software/libtool/manual/libc/Heap-Consistency-Checking.html

It might also be helpful to know whether a firefox build from http://www.mozilla.com/ crashes similarly.  (It uses a different malloc implementation but may still crash in FcFontSetSort.)