230029 - Mozilla crashes each time xmlterm starts

Status: RESOLVED FIXED

(SeaMonkey :: UI Design, defect)

Description

[Renaud Manus]

User-Agent:       Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.6b) Gecko/20031210
Build Identifier: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.6b) Gecko/20031210

segmentation fault occurs in mozilla-bin when xmlterm is starting. 
The problem is 100% reproducible and a truss output is available for
further analysis.

Reproducible: Always

Steps to Reproduce:
1.
2.
3.




truss of ./xmlterm shows:

14820:  execve("./mozilla-bin", 0x0003E008, 0x0003E014)  argc = 2
14820:   argv: ./mozilla-bin -terminal
...
14820/1:        poll(0x002E6938, 5, -1)                         = 1
14820/1:        poll(0x0048E454, 2, 0)                          = 1
14820/1:        read(24, " f a r o : / h o m e / r".., 4095)    = 31
14820/1:        write(23, "\0 *\0\0\0 s\0 e\0 t\0 e".., 88)     = 88
14820/1:        stat("./libplc4.so", 0xFFBFC654)                = 0
14820/1:        write(6, "FA", 1)                               = 1
14820/1:        access("/home/rm88369/mozilla/chrome/xmlterm.jar", 0) = 0
14820/1:        lwp_unpark(4, 1)                                = 0
14820/4:        lwp_park(0xFD05FD38, 0)                         = 0
14820/4:        lwp_park(0x00000000, 0)                         = 0
14820/1:        lwp_unpark(4, 1)                                = 0
14820/4:        open64("/home/rm88369/mozilla/chrome/xmlterm.jar", O_RDONLY) = 25
14820/4:        lseek(25, 50876, SEEK_SET)                      = 50876
14820/4:        read(25, " P K0304\n\0\0\0\0\0 v9A".., 30)      = 30
14820/4:        lseek(25, 50956, SEEK_SET)                      = 50956
14820/4:        read(25, " G I F 8 9 a12\014\0F3\0".., 185)     = 185
14820/4:        close(25)                                       = 0
14820/1:        access("/home/rm88369/mozilla/chrome/xmlterm.jar", 0) = 0
14820/1:        lwp_unpark(4, 1)                                = 0
14820/4:        lwp_park(0xFD05FD38, 0)                         = 0
14820/4:        open64("/home/rm88369/mozilla/chrome/xmlterm.jar", O_RDONLY) = 25
14820/4:        lseek(25, 50956, SEEK_SET)                      = 50956
14820/4:        read(25, " G I F 8 9 a12\014\0F3\0".., 185)     = 185
14820/4:        close(25)                                       = 0
14820/1:        ioctl(24, TIOCSWINSZ, 0xFFBFCC38)               = 0
14820/1:            Incurred fault #6, FLTBOUNDS  %pc = 0x000276D4
14820/1:              siginfo: SIGSEGV SEGV_MAPERR addr=0x000090A0
14820/1:            Received signal #11, SIGSEGV [caught]
14820/1:              siginfo: SIGSEGV SEGV_MAPERR addr=0x000090A0

Comment 1

[timeless]

./mozilla -g -d dbx -xmlterm

run

crash

get a stack trace

put it here.

Comment 2

[Renaud Manus]

t@1 (l@1) signal SEGV (no mapping at the fault address) in nsAString::Last at
0x276d4
0x000276d4: Last+0x0070:	lduh    [%i2], %i0
dbx: warning: can't find file "/tmp/gtk+-1.2.10/gdk/gdkevents.lo"
dbx: warning: see `help finding-files'
dbx: warning: can't find file "/tmp/glib-1.2.10/giounix.lo"
dbx: warning: can't find file "/tmp/glib-1.2.10/gmain.lo"
dbx: warning: can't find file "/tmp/gtk+-1.2.10/gtk/gtkmain.lo"
(dbx) where
current thread: t@1
=>[1] nsAString::Last(0xffbfe0e0, 0x248d0, 0x90a0, 0xffbfcddc, 0x0, 0x73c3c), at
0x276d4
  [2] 0xfc37302c(0xbc71a8, 0xffbfe0e0, 0x1, 0x0, 0xfc372fb8, 0xfc36fb54), at
0xfc37302b
  [3] 0xfc371da0(0xbc71a8, 0x7f50b8, 0x1, 0xfc39e75d, 0x0, 0x80000000), at
0xfc371d9f
  [4] 0xfc36cf60(0x7f50b8, 0xfc39dc3b, 0x44228, 0x3d788, 0xfc3b1118, 0xbb5038),
at 0xfc36cf5f
  [5] 0xfc36d018(0xbb5038, 0x7f50b8, 0x800, 0x44150, 0xfeb2cf64, 0xfc3b1118), at
0xfc36d017
  [6] gdk_io_invoke(0xbb4c30, 0x1, 0xbb4c18, 0xfd5ca2cc, 0x3250c, 0xfd580ef4),
at 0xfe836300
  [7] g_io_unix_dispatch(0xbd3e08, 0xffbfe470, 0xbb4c18, 0x0, 0x0, 0xffbfe3b0),
at 0xfeb2c894
  [8] g_main_dispatch(0xffbfe470, 0x85598, 0x1, 0x434130, 0x2, 0x434145), at
0xfeb30cd0
  [9] g_main_iterate(0x1, 0x1, 0xfd57f6ec, 0xfeb8f450, 0x5, 0x36aa68), at 0xfeb31adc
  [10] g_main_run(0x434140, 0x434140, 0xd94a0, 0x20, 0xfd5cca0c, 0x0), at 0xfeb31e74
  [11] gtk_main(0x0, 0x1041d8, 0xffbfe5c4, 0x3d69c, 0x165bf0, 0x0), at 0xfed2dc60
  [12] 0xfd58127c(0x165be8, 0x1, 0xfd58123c, 0x759ac, 0x4f27c, 0x0), at 0xfd58127b
  [13] 0x22f14(0xfd65f230, 0x295c88, 0xffbfe714, 0xffbfe728, 0xffbfe74c,
0xffbfe760), at 0x22f13
  [14] main(0x0, 0xffbfe854, 0x0, 0x0, 0x72dec, 0x0), at 0x2397c

Comment 3

[timeless]

can you build debug? line numbers at least for string would be good.

also if you can use up and make sure that the first 5 or so frames have real
function names, that'd help. thanks.

Comment 4

[timeless]

02/10/2004 12:05 	open 	cbiesinger%web.de 	mozilla/extensions
xmlterm/base 	mozXMLTermSession.cpp 	+1/-1 	fix crash when starting xmlterm,
r=timeless. not part of default build.