179976 - Reproducable crash - selecting date at banking website [@ PR_EnterMonitor ]

Status: RESOLVED DUPLICATE of bug 119693

(Core :: XPCOM, defect)

Description

[Jeremy M. Dolan]

Log in to totallyfreebanking.com, my banks (terribly named) web site.
Select an account
Click the calendar to choose a date range.
Click a date in the pop-up
Mozilla crashes

Reproducable: always
Linux 2002111004

I sent in two talkbacks, the latest with the e-mail "[e-mail]". Not
sure how to find the talkback ID from the ~/.fullcircle files.

Comment 1

[Jeremy M. Dolan]

strace:

1168  write(9, "\4\20\2\0s\5@\1\4\0\2\0r\5@\1\17\3\2\0Z\5@\1", 24) = 24
1168  read(9, "\22\0\217Ps\5@\1s\5@\1\0Z\16\10\23\0\0\0\0\366\377\277"..., 32) = 32
1168  read(9, "\21\0\217Ps\5@\1s\5@\1\0\0\0\0\0\0\0\0h\n\37\10 \4\37\10"..., 32)
= 32
1168  read(9, "\22\0\220Pr\5@\1r\5@\1\0\242\22BPC~\10\200\261\22B\330"..., 32) = 32
1168  read(9, "\21\16\220Pr\5@\1r\5@\1\3\256\f\10\n\0\0\0h\n\37\10 \4"..., 32) = 32
1168  read(9, "\1\0\221P\0\0\0\0006\0\0\0Y\5@\1\0\0\0\0Xe\211\10\0\0\0"..., 32) = 32
1168  --- SIGSEGV (Segmentation fault) ---
1158  <... wait4 resumed> 0xbffff358, 0, NULL) = -1 ECHILD (No child processes)
1158  rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
1158  rt_sigaction(SIGINT, {SIG_DFL}, {0x8075b80, [], SA_RESTORER, 0x42028c48},
8) = 0
1158  rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
1158  rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0

I don't see what fd 9 is though:

% grep open out|grep '= 9' 
1168  open("/proc/self/cmdline", O_RDONLY) = 9
1168  open("/proc/self/cmdline", O_RDONLY) = 9
1168  open("/dev/zero", O_RDWR)         = 9
1168  open("/opt/mozilla/20021110/components/talkback/master.ini", O_RDONLY) = 9
1168  open("/opt/mozilla/20021110/components/talkback/master.ini", O_RDONLY) = 9
1168  open("/opt/mozilla/20021110/components/talkback/master.ini", O_RDONLY) = 9
1168  open("/opt/mozilla/20021110/components/talkback/master.ini", O_RDONLY) = 9
1168  open("/opt/mozilla/20021110/components/talkback/master.ini", O_RDONLY) = 9
1168 
open("/home/mozilla/.fullcircle/NetscapeMozillaTrunkLinuxIntel2002111004/manifest.ini",
O_RDONLY) = 9
1168 
open("/home/mozilla/.fullcircle/NetscapeMozillaTrunkLinuxIntel2002111004/Talkback.ini",
O_RDONLY) = 9
1168 
open("/home/mozilla/.fullcircle/NetscapeMozillaTrunkLinuxIntel2002111004/permdata.box",
O_RDWR|O_CREAT, 0666) = 9
1168 
open("/home/mozilla/.fullcircle/NetscapeMozillaTrunkLinuxIntel2002111004/permdata.box",
O_RDWR|O_CREAT, 0666) = 9
1168  open("/tmp//FCS1168aaa", O_RDONLY) = 9
1168 
open("/home/mozilla/.fullcircle/NetscapeMozillaTrunkLinuxIntel2002111004/permdata.box",
O_RDWR|O_CREAT, 0666) = 9
1168 
open("/home/mozilla/.fullcircle/NetscapeMozillaTrunkLinuxIntel2002111004/",
O_RDONLY) = 9
1168 
open("/home/mozilla/.fullcircle/NetscapeMozillaTrunkLinuxIntel2002111004/",
O_RDONLY) = 9
1168  open("/usr/X11R6/lib/X11/locale/locale.alias", O_RDONLY) = 9
1168  open("/usr/X11R6/lib/X11/locale/locale.dir", O_RDONLY) = 9
1168  open("/usr/X11R6/lib/X11/locale/C/XI18N_OBJS", O_RDONLY) = 9
1168  open("/usr/X11R6/lib/X11/locale/common/xlcDef.so.2", O_RDONLY) = 9
1168  open("/usr/X11R6/lib/X11/locale/locale.alias", O_RDONLY) = 9
1168  open("/usr/X11R6/lib/X11/locale/locale.dir", O_RDONLY) = 9
1168  open("/usr/X11R6/lib/X11/locale/C/XLC_LOCALE", O_RDONLY) = 9

Comment 2

[Jeremy M. Dolan]

I don't know if this helps, but:

(gdb) backtrace
#0  0x08c104d1 in ?? ()
#1  0x41170524 in NSGetModule ()
   from /opt/mozilla/20021110/components/libdocshell.so
#2  0x40cd26ee in NSGetModule ()
   from /opt/mozilla/20021110/components/libgkcontent.so
#3  0x40b2c752 in NSGetModule ()
   from /opt/mozilla/20021110/components/libgkcontent.so
#4  0x40b3d269 in NSGetModule ()
   from /opt/mozilla/20021110/components/libgkcontent.so
#5  0x40cc9e54 in NSGetModule ()
   from /opt/mozilla/20021110/components/libgkcontent.so
#6  0x40764f77 in NSGetModule ()
   from /opt/mozilla/20021110/components/libgklayout.so
#7  0x40764e74 in NSGetModule ()
   from /opt/mozilla/20021110/components/libgklayout.so
#8  0x40b1dff8 in NSGetModule ()
   from /opt/mozilla/20021110/components/libgkcontent.so
#9  0x40b1c276 in NSGetModule ()
   from /opt/mozilla/20021110/components/libgkcontent.so
#10 0x407650eb in NSGetModule ()
   from /opt/mozilla/20021110/components/libgklayout.so
#11 0x40764df1 in NSGetModule ()
   from /opt/mozilla/20021110/components/libgklayout.so
#12 0x416d3961 in NSGetModule ()
   from /opt/mozilla/20021110/components/libgkview.so
#13 0x416c9129 in NSGetModule ()
   from /opt/mozilla/20021110/components/libgkview.so
#14 0x416d2e98 in NSGetModule ()
   from /opt/mozilla/20021110/components/libgkview.so
#15 0x416c8c6d in NSGetModule ()
   from /opt/mozilla/20021110/components/libgkview.so
#16 0x410161ca in NSGetModule ()
   from /opt/mozilla/20021110/components/libwidget_gtk.so
#17 0x410160c5 in NSGetModule ()
   from /opt/mozilla/20021110/components/libwidget_gtk.so
#18 0x41016247 in NSGetModule ()
   from /opt/mozilla/20021110/components/libwidget_gtk.so
#19 0x41016be4 in NSGetModule ()
   from /opt/mozilla/20021110/components/libwidget_gtk.so
---Type <return> to continue, or q <return> to quit---
#20 0x41019e65 in NSGetModule ()
   from /opt/mozilla/20021110/components/libwidget_gtk.so
#21 0x4101a0fc in NSGetModule ()
   from /opt/mozilla/20021110/components/libwidget_gtk.so
#22 0x410110a7 in NSGetModule ()
   from /opt/mozilla/20021110/components/libwidget_gtk.so
#23 0x41010ef9 in NSGetModule ()
   from /opt/mozilla/20021110/components/libwidget_gtk.so
#24 0x403a72d5 in gdk_event_dispatch () from /usr/lib/libgdk-1.2.so.0
#25 0x403dc97e in g_main_dispatch () from /usr/lib/libglib-1.2.so.0
#26 0x403dce59 in g_main_iterate () from /usr/lib/libglib-1.2.so.0
#27 0x403dd0f4 in g_main_run () from /usr/lib/libglib-1.2.so.0
#28 0x402dc6df in gtk_main () from /usr/lib/libgtk-1.2.so.0
#29 0x410098dc in NSGetModule ()
   from /opt/mozilla/20021110/components/libwidget_gtk.so
#30 0x41438696 in NSGetModule ()
   from /opt/mozilla/20021110/components/libnsappshell.so
#31 0x0805149e in getCountry ()
#32 0x08051caf in main ()
#33 0x420158d4 in __libc_start_main () from /lib/i686/libc.so.6

Comment 3

[Olivier Cahagne]

Add Talkback ID here for this crash by launching
"mozilla/bin/components/talkback/talkback"

Comment 4

[Jeremy M. Dolan]

Ah, thanks. TBIDs are:

TB13891974G
TB13891681H
TB13891627Q

Comment 5

[[e-mail] (gone - use [e-mail] instead)]

Stack Trace
libpthread.so.0 + 0xa22b (0x4020b22b) 

That's it.  I've seen crashes lately in popups on my Windows 2K system here:

Stack Trace
PR_EnterMonitor [prmon.c, line 93]
PL_ProcessPendingEvents [c:/builds/seamonkey/mozilla/xpcom/threads/plevent.c,
line 553]
USER32.dll + 0x2a290 (0x77e3a290)
0x5e204689 

if libpthread.so contains prmon.c, it could be the same bug.  I haven't had any
crashed in PR_EnterMonitor (prmon.c, line 93) on my Windows 2000 trunk build
today, but I'll keep running it.  If I see it again I'll comment in this bug.

The old bug (which shows up in Talkback's #2 topcrasher) was bug 119693, but
that has been marked wfm since May, I think.

Anyway, they could be one and the same crash, but it's hard to tell with the
linux stack.

Comment 6

[OOO until Apr 20; Dan Mosedale (:dmosedale, :dmose)]

jmd: it would be interesting to see what ltrace says.  that's likely to give
more detail than strace here.

Comment 7

[Matthias Versen [:Matti]]

Sztephend: Fo you stack see also bug 179788

Comment 8

[Matthias Versen [:Matti]]

-> XpCOM

Comment 9

[Doug Turner (:dougt)]

*** Bug 180954 has been marked as a duplicate of this bug. ***

Comment 10

[Doug Turner (:dougt)]

*** Bug 181089 has been marked as a duplicate of this bug. ***

Comment 11

[Jeremy M. Dolan]

BTW, Dan: I wasn't able to get ltrace to follow mozilla startup through the two
shell scripts and threads. Sorry.

Comment 12

[Doug Turner (:dougt)]

jeremy, can you try saving the webpage to your hard drive (File menu - Save Page
As...)?  Then try to reproduce this problem via File Menu - Open File...

Comment 13

[Jeremy M. Dolan]

Tried. This isn't crashing 2002120508 linux, online or off.

Comment 14

[Doug Turner (:dougt)]

is anyone else seeing this crash?  

Comment 15

[Christian :Biesinger (don't email me, ping me on IRC)]

duplicate of bug 119693 maybe?

Comment 16

[Doug Turner (:dougt)]

this is no doubt a dup of 119693

*** This bug has been marked as a duplicate of 119693 ***