276272 - crash: segfault in nsPRUint32Key::Clone

Status: RESOLVED WORKSFORME

(Firefox :: General, defect)

Description

[Baldvin Kovács]

- firefox 1.0 (tried with debian's, your binary, and your daily build)
- the only setting I do is to raise the minimum font size to 20 (and all the
  default font sizes to 20)
- go to freemail.hu, and scroll down with the mouse wheel: firefox crashes.
- I reproduced it around 70 times
- with gdb: (using the -g -dgdb options)
            Program received signal SIGSEGV, Segmentation fault.
            [Switching to Thread -1220193120 (LWP 8592)]
            0x08441e1b in nsPRUint32Key::Clone ()
            (gdb)
- maybe it is not a firefox, but an nspr problem, but I don't know yet.

Comment 1

[Baldvin Kovács]

I've tried with an other machine, ant it does not crashes. The
differences:

       crashes       doesnt
libc6: 2.3.2.ds1-19  2.3.2.ds1-11
kernel: 2.6.9-ac19,  2.6.3-mm3
        2.6.10
video:  i810         s3virge

Well, I'm afraid I'm left alone to find this bug, since I guess
no other developer can reproduce it (however, the machine
it crashes on is my father's, which makes me very bad days...)
I'll debug, and mail the results.

Comment 2

[Baldvin Kovács]

Now my results:

I had a directory called /usr/local/share/fonts, two subdirectories in it, both
containing windows ttf fonts. If I renamed /usr/local/share/fonts to anything
else, and told my font server to use that directory, firefox stopped crashing
at that place.

** However: even a seemingly idempotent operation, like "cp -a .../fonts/windows
something_else; rm -rf .../fonts/windows; cp -a something_else .../fonts/windows"
did solve the problem. But "cp -a fonts xxxx; rm -rf fonts; cp -a xxxx fonts"
preserved it.

I will not continue debugging, since I've got so much work to do that I'll even
work at new years eve, my solution is to rename that directory (and be very
much scared: I think there will be lots of other places where this race
condition that I suspect is in firefox (maybe nspr) code will cause lots of
problems. Hence I don't think that I was able to provide my father with a
"working" linux enviroment...)

Comment 3

[Mats Palmgren (inactive)]

Sounds like bug 183729.
If you make all .ttf fonts world-readable, is that enough to fix it?

Comment 4

[Gervase Markham [:gerv]]

This is an automated message, with ID "auto-resolve01".

This bug has had no comments for a long time. Statistically, we have found that
bug reports that have not been confirmed by a second user after three months are
highly unlikely to be the source of a fix to the code.

While your input is very important to us, our resources are limited and so we
are asking for your help in focussing our efforts. If you can still reproduce
this problem in the latest version of the product (see below for how to obtain a
copy) or, for feature requests, if it's not present in the latest version and
you still believe we should implement it, please visit the URL of this bug
(given at the top of this mail) and add a comment to that effect, giving more
reproduction information if you have it.

If it is not a problem any longer, you need take no action. If this bug is not
changed in any way in the next two weeks, it will be automatically resolved.
Thank you for your help in this matter.

The latest beta releases can be obtained from:
Firefox:     http://www.mozilla.org/projects/firefox/
Thunderbird: http://www.mozilla.org/products/thunderbird/releases/1.5beta1.html
Seamonkey:   http://www.mozilla.org/projects/seamonkey/

Comment 5

[Mats Palmgren (inactive)]

I think this was fixed by bug 180309.

-> WORKSFORME