241146 - SIGSEGV after a few clicks of the navigation buttons on the cisco CCNA online material - FF10x [@ PL_IsQueueNative]

Status: RESOLVED DUPLICATE of bug 287861

(Core :: XPCOM, defect)

Description

[Adam Bowns]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040115
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040115

When viewing material on the cisco CCNA Semester 2 version 3.1 pages (found at
http://cisco.netacad.net but requires enrollment to view) After a few clicks on
the next page and index buttons (on the website, not the browser) the browser
displays done in the status bar, but does not load and pages, shortly after this
it segfaults and exits. Here is the strace output. (I have more if you want it)

poll([{fd=3, events=POLLIN}, {fd=9, events=POLLIN}, {fd=13, events=POLLIN|POLLPR
I}, {fd=15, events=POLLIN}, {fd=17, events=POLLIN|POLLPRI}, {fd=18, events=POLLI
N|POLLPRI}, {fd=19, events=POLLIN|POLLPRI}, {fd=4, events=POLLIN, revents=POLLIN
}, {fd=37, events=POLLIN}], 9, 24) = 1
gettimeofday({1082502014, 49192}, NULL) = 0
pipe(0x8fef2fc)                         = -1 EMFILE (Too many open files)
--- SIGSEGV (Segmentation fault) @ 0 (0) ---

Reproducible: Always
Steps to Reproduce:
1. click the index button
2. click the next page button
3. click the next page button

Actual Results:  
The page i was expecting was not loaded, done was displayed in status bar,
mozilla exits with a segfault.

Expected Results:  
Displayed the next page.

Comment 1

[Olivier Cahagne]

can you run "mozilla -g" (with latest nightly build or at least 1.7b) and post
GDB stacktrace (type "GDB> backtrace" once mozilla crashes) ?

Comment 2

[Andrew Schultz]

the 1.7 nightly builds include talkback:
http://ftp.mozilla.org/pub/mozilla.org/mozilla/nightly/latest-1.7/
grab it, and then send in a talkback report when it crashes.

Comment 3

[Adam Bowns]

Attachment: The backtrace you wanted

Backtrace of the crash, from 21/04/2004 nightly build.

Comment 4

[Adam Hauner]

Talkback server has some incidents over Mozilla 1.7, Firefox aviary branch and
Firefox trunk with same signature:
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=PL_IsQueueNative&vendor=All&product=All&platform=All&buildid=&sdate=&stime=00%3A00%3A00&edate=&etime=23%3A59%3A59

Reports points to XPCOM code, so moving there:
http://bonsai.mozilla.org/cvsblame.cgi?file=/mozilla/xpcom/threads/plevent.c&mark=1377#1377

Danm, any idea what is going on?

Comment 5

[Jay Patel [:jay]]

This looks like the crash brendan keeps seeing.  Here are all the incidents with
the PL_IsQueueNative stack signature:
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=1&searchby=stacksig&match=contains&searchfor=+PL_IsQueueNative%28%29+2db033f3&vendor=All&product=All&platform=All&buildid=&sdate=&stime=&edate=&etime=&sortby=bbid

Here's one of Brendan's recent crashes:
Incident ID: 6420904
Stack Signature	PL_IsQueueNative() 2db033f3
Email Address	[e-mail]
Product ID	Firefox10
Build ID	2005041421
Trigger Time	2005-06-05 19:58:16.0
Platform	LinuxIntel
Operating System	Linux 2.6.11-1.27_FC3
Module	libxpcom.so + (0006fb52)
URL visited	window coming up while clicking on mlslistings.com same-window link
User Comments	
Since Last Crash	4 sec
Total Uptime	25 sec
Trigger Reason	SIGSEGV: Segmentation Fault: (signal 11)
Source File, Line No.
/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/xpcom/threads/plevent.c,
line 1358
Stack Trace 	
PL_IsQueueNative() 
[/builds/tinderbox/Fx-Aviary1.0.1/Linux_2.4.20-28.8_Clobber/mozilla/xpcom/threads/plevent.c,
line 1358]

Most of the current crashes are on the Aviary branch, can anyone reproduce this
with Deer Park Alpha 1 or any other Trunk build?

Comment 6

[Brendan Eich [:brendan]]

See bug 287846, fixed on the trunk for a while now.

/be

Comment 7

[Brendan Eich [:brendan]]

(In reply to comment #6)
> See bug 287846, fixed on the trunk for a while now.

Darnit, my cvs commit message lied.  I mean bug 287861.

/be

Comment 8

[:Gavin Sharp [email: [e-mail]]]

Talkback shows no crashes in PL_IsQueueNative since bug 287861 landed (it didn't land on the 1.7/aviary1.0.1 branches).

*** This bug has been marked as a duplicate of 287861 ***