116585 - Latest series of Mozilla binaries segfault when creating user directory ($HOME/mozilla)

Status: VERIFIED WORKSFORME

(Core Graveyard :: Profile: BackEnd, defect)

Description

[Joseph]

Running builds from the latest nightly that I made, I found that Mozilla
segfaults if it needs to create the user's profiles directory ($HOME/.mozilla).

It creates $HOME/.mozilla, and at least *part* of $HOME/.mozilla/appreg, then it
dies.  Nothing is ever output in dialog box form, STDOUT/STDERR form, or any
other form.

The offending bit of truss output is:
15931:     g s / t a b b r o w s e r . x m l U T05\003DC - ! < U x\0\0 P K
15931:    0102170314\0\0\0\b\0 U {8A +D2 :D995C302\0\0CD\t\0\0  \0\r\0\0\0
15931:    \0\001\0\0\0A481DCBD02\0 c o n t e n t / g l o b a l / b i n d i
15931:     n g s / t e x t . x m l U T05\00392 (15 < U x\0\0 P K0102170314
15931:    \0\0\0\b\00F9293 + R05F4B09606\0\0 61E\0\0 #\0\r\0\0\0\0\001\0\0
15931:    \0A481F2C002\0 c o n t e n t / g l o b a l / b i n d i n g s / t
15931:     e x t b o x . x m l U T05\003DD - ! < U x\0\0 P K0102170314\0\0
15931:    \0\b\00F9293 +F09EFBBA8907\0\0 K &\0\0 #\0\r\0\0\0\0\001\0\0\0A4
15931:    81DEC702\0 c o n t e n t / g l o b a l / b i n d i n g s / t o o
15931:     l b a r . x m l U T05\003DD - ! < U x\0\0 P K0102170314\0\0\0\b
15931:    \00F9293 +DAAE8A16 B02\0\0 o\t\0\0 )\0\r\0\0\0\0\001\0\0\0A481BD
15931:    CF02\0 c o n t e n t / g
15931:  brk(0x0039DD90)         = 0
15931:  brk(0x0039FD90)         = 0
15931:  read(14, 0xFD3C07D9, 4087)      = 342
15931:     l o b a l / b i n d i n g s / t o o l b a r b u t t o n . x m l
15931:     U T05\003DD - ! < U x\0\0 P K0102170314\0\0\0\b\0 V {8A +B2CC9B
15931:     E >\f\0\09F N\0\0  \0\r\0\0\0\0\001\0\0\0A481 [D202\0 c o n t e
15931:     n t / g l o b a l / b i n d i n g s / t r e e . x m l U T05\003
15931:    93 (15 < U x\0\0 P K0102170314\0\0\0\b\0 :A3 R +\nE7DF83 (01\0\0
15931:    BC03\0\0  \0\r\0\0\0\0\001\0\0\0A481ECDE02\0 c o n t e n t / g l
15931:     o b a l / b i n d i n g s / t r e e . c s s U T05\0031F81CF ; U
15931:     x\0\0 P K0102170314\0\0\0\b\0F298 e +D4CA\t91AC\r\0\0F5 B\0\0 "
15931:    \0\r\0\0\0\0\001\0\0\0A481 gE002\0 c o n t e n t / g l o b a l /
15931:     b i n d i n g s / w i z a r d . x m l U T05\003D7 7E7 ; U x\0\0
15931:     P K0506\0\0\0\0 ]\0 ]\0 , !\0\0 hEE02\0\0\0
15931:  read(14, 0xFD3C07F3, 316)     = 0
15931:  poll(0xFFBEE058, 2, -1)       = 1
15931:    fd=7  ev=POLLRDNORM rev=0
15931:    fd=12 ev=POLLRDNORM rev=POLLRDNORM
15931:  write(13, "FA", 1)        = 1
15931:  lseek(14, 54747, SEEK_SET)      = 54747
15931:  read(14, 0xFD3BF760, 30)      = 30
15931:     P K030414\0\0\0\b\0 R {8A +BB s $ ME202\0\014\b\0\01F\015\0
15931:  lseek(14, 54829, SEEK_SET)      = 54829
15931:  read(14, 0xFD3BF7E0, 738)     = 738
15931:    AD UCB nDB 010BCFB +181E8AF4  C9 6 ZA0 u ,07A893 ^DAC20592 K8EB4
15931:    B4B618 SA4 @D2AF ~ }9792 H ) qDCA0 m | 0A4 }CCEECC92ABE9F5A114 d
15931:    07DA p % S :8A87F4 z F06 S g8E8C =\n 00580 %8586 U JB3 BAB12 & I
15931:    B216 jC9 D b 6 \B6CF q f\f %F6 X A J -1C lE2DE1D94C3DA8A H a\rC1
15931:    8E g80 2 % - H9BE49C\tB5 ^ 4B1 1E6 !C4 ` z qB398DF ?FCBC % { . s
15931:    B5 ' w0F wF7B7 ?C8\t8A P191380 ` eA9E4 M\r15E7 6A7 3 lA2 ME5 916
15931:    EFF9E980B4 ? $ , M J\v k + DDCEFF7 qA9 ~ q ! XACF4 :D9C0B1 dC682
15931:     ND6CCC206A0C2 G [8086989B X ID1 t K021C9A14 { V l !BFA3EDF2FD U
15931:     WB596 8A5 %97D19EE7B69890F1 g (AF88 314C0D7859D90 OF1 G g8AB09F
15931:     h k @ G +95 mCD84F0B5 T1A z `99 `06 ) 4 "D2 YD3\fFE M MA6 y eDB
15931:    E9B0AA12 < c16079E1CA2 GB6 c8D9B12A3B3F3A3 yA2EAA3A1C9 ,C0A3 806
15931:    CF88D3B6A9FD\r\r .C0 98BA5 :909580039E .DAE4 4 6 &90 @ J8D eDAB6
15931:    0E tF192ADA186E2 rA5 b8EE5A9 ' f *96 AEE + O1307D3 >1BA898 f V i
15931:    A2 4C7 v S8A gC8 " M11B2 mC1 eC8DD9D v85D68B ( "EEF092 (\nB61C1A
15931:     y PAEAEAD02 X0E : @FB W0F9884ECBA N HC397 . (CC9E1DFCEC ?B8 AB7
15931:    C28586  E796AC 888DCF4FB\nC8A8 797B718F4D5C5 ` O\n0F m e\0 ] V o
15931:     !B0C31CC196  BAA4D8 qA5 dC7C416FB xE7\nD5 u86 q1D xE5B0A4D5 JF8
15931:    B9C6 u9A d % t1411D6C1B8 n , [E2 - sEC86B4 w1A z YA7\n =99DD\v93
15931:     r sDE85 9 wBC I J +\fDE +9D8FFE96 | H < 'C0E8AC\0 !F51501 F ~17
15931:    FA84 '82 t ( o ' H W jFCAF z8CCFE9 1 ~ U8FF19BE8 1FE O =BCA1 ^14
15931:    FA14AB7FADB202B28D kB2 wA7\n /A5 wCE91 .E3B2BEEACF94F4FB +C3 m83
15931:    FE ^BB01B98F DF18BE0 V (93 h T rEE\vE0 *DE \ "1F83 _8597 6C2B0DD
15931:    \b9E j oE705DADE :F8B3 V1D =B599 39981F8B2B5 VC9 f U O93E613 91B
15931:    FC06
15931:  brk(0x0039FD90)         = 0
15931:  brk(0x003A1D90)         = 0
15931:      Incurred fault #6, FLTBOUNDS  %pc = 0xFE0C56A0
15931:        siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000
15931:      Received signal #11, SIGSEGV [caught]
15931:        siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000
15931:  sigprocmask(SIG_SETMASK, 0xFEF9EFE8, 0x00000000) = 0
15931:     set = 0 0 0 0
15931:  sigaction(SIGSEGV, 0xFFBEDDC8, 0x00000000)  = 0
15931:      new: hand = 0x00000000 mask = 0 0 0 0 flags = 0x0000
15931:  sigprocmask(SIG_SETMASK, 0xFEFAADB8, 0x00000000) = 0
15931:     set = 0xFFBFFEFF 0x00001FFF 0 0
15931:  setcontext(0xFFBEDC88)
15931:      Incurred fault #6, FLTBOUNDS  %pc = 0xFE0C56A0
15931:        siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000
15931:      Received signal #11, SIGSEGV [default]
15931:        siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000
15916:  waitid(P_PID, 15931, 0xFFBEEFF0, WEXITED|WTRAPPED|WNOWAIT) = 0
15916:        siginfo: SIGCLD CLD_DUMPED pid=15931 status=0x000B
15916:  ioctl(0, TIOCGPGRP, 0xFFBEEFAC)     = 0
15916:    0xFFBEEFAC: 15915
15916:  ioctl(0, TCGETS, 0x000391B8)      = 0
15916:    iflag=0022402 oflag=0000005 cflag=03202275 lflag=0105073
15916:        cc:  003 034 177 025 004 000 000 000
15916:       021 023 032 031 022 017 027 026 000 000 000
15916:  waitid(P_PID, 15931, 0xFFBEEFF0, WEXITED|WTRAPPED) = 0
15916:        siginfo: SIGCLD CLD_DUMPED pid=15931 status=0x000B
Segmentation Fault - core dumped
15916:  write(2, 0x00039085, 33)      = 33
15916:     S e g m e n t a t i o n   F a u l t   -   c o r e   d u m p e d
15916:    \n
15916:  brk(0x0003E3A0)         = 0
15916:  brk(0x0003E1A0)         = 0
15916:  llseek(0, 0, SEEK_CUR)        = 841542
15916:  _exit(139)
15931:    *** process killed ***

fd 14 is dist/bin/chrome/toolkit.jar opened O_RDONLY


I have the truss saved and can always post more if needed.  FYI: this is Solaris
8 07/01 with Forte Developer 6.2.

Comment 1

[Dimitrios]

->Critical

Comment 2

[Jim Crumley]

I get bad behavior when trying create ~/.mozilla as well (though not a crash)
with a local build Sparc Solaris cvs build from 20011226.  In my case after
removing~/.mozilla and restarting,  I click to convert my netscape 4.x profile. 
After this mozilla never opens up a browser window, even after 10 minutes of
waiting.  The profile conversion seems to be successful, since mozilla starts up
normally another version of mozilla is started while the first instance is still
running (or after its been quit).

This problem seems to be specific to profile conversion, since if after removing
~/.mozilla I choose Manage Profiles|Create Profile, a new blank profile is
created, and mozilla starts up normally.

Hmm, now that I look for duplicates, I see bug 112195, which seems to be a
duplicate of the behavior that I see, and like me has no core dump. 

So since I can't confirm a core dump, I'm leaving this unconfirmed.

Comment 3

[Larry Norris]

I can confirm this in Redhat 7.2.  Seems to only happen with the RPM.  If I
install in /usr/local/mozilla, all works fine.  So I suspect it's a library thing.

Comment 4

[Conrad Carlen (not reading bugmail)]

Can anybody repro this with current builds? It WFM.

Comment 5

[Marcus Pallinger]

at one stage, mozilla was creating a .mozilla and a .mozill directory (a week
ago or so?) I'l test to see if it still does that.

Comment 6

[Marcus Pallinger]

Seems to be workign fine for me with a more recent build. (Jsut tested it)

Comment 7

[Jim Crumley]

WFM.

Comment 8

[K'Trina Medina]

Verified WFM. Reporter, please try recent builds and reopen if problem still occurs.