281196 - segfault on selecting how to handle SSL certs [@ smooth_draw_slider_grip]

Status: RESOLVED INVALID

(Core Graveyard :: GFX: Gtk, defect)

Description

[David Walker]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20050128 Firefox/1.0 (Ubuntu) (Ubuntu package 1.0+dfsg.1-2ubuntu5)
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20050128 Firefox/1.0 (Ubuntu) (Ubuntu package 1.0+dfsg.1-2ubuntu5)

Firefox is crashing when I click, or tab to, the 3 options on the "Web Site
Certified by an Unknown Authority" window.  The 3 options being, Accept Perm,
Accept this Session, Do not accept.  If I click ok, I am able to get into the
site, however if I click on Accept Perm, or tab to it, firefox crashes.

Reproducible: Always

Steps to Reproduce:
1. Go to an SSL'd site with your own CA
2. Click accept always.
3. Crash'd



Expected Results:  
For me to select the accept always button.

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1084219168 (LWP 4605)]
0x41dc40ce in smooth_draw_slider_grip ()
   from /usr/lib/gtk-2.0/2.4.0/engines/libsmooth.so
(gdb) bt
#0  0x41dc40ce in smooth_draw_slider_grip ()
   from /usr/lib/gtk-2.0/2.4.0/engines/libsmooth.so
#1  0x41dc9ae5 in smooth_draw_focus ()
   from /usr/lib/gtk-2.0/2.4.0/engines/libsmooth.so
#2  0x4030fa38 in gtk_paint_focus () from /usr/lib/libgtk-x11-2.0.so.0
#3  0x41d4f9b8 in moz_gtk_button_get_focus ()
   from /usr/lib/mozilla-firefox/components/libgfx_gtk.so
#4  0x41d8d8a6 in nsNativeThemeGTK::GetGtkWidgetAndState ()
   from /usr/lib/mozilla-firefox/components/libgfx_gtk.so
#5  0x4100ca06 in nsCSSRendering::PaintBackgroundWithSC ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#6  0x4100b9a5 in nsCSSRendering::PaintBackground ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#7  0x40f73d6c in nsFrame::PaintSelf ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#8  0x4104a4d7 in nsBoxFrame::GetDebugPref ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#9  0x4104a5f1 in nsBoxFrame::PaintChild ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#10 0x4104a78f in nsBoxFrame::PaintChildren ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#11 0x4104a401 in nsBoxFrame::GetDebugPref ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
---Type <return> to continue, or q <return> to quit---
#12 0x4104a5f1 in nsBoxFrame::PaintChild ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#13 0x4104a78f in nsBoxFrame::PaintChildren ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#14 0x4104a401 in nsBoxFrame::GetDebugPref ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#15 0x4104a5f1 in nsBoxFrame::PaintChild ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#16 0x4104a78f in nsBoxFrame::PaintChildren ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#17 0x4104a401 in nsBoxFrame::GetDebugPref ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#18 0x4104a5f1 in nsBoxFrame::PaintChild ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#19 0x4104a78f in nsBoxFrame::PaintChildren ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#20 0x4104a401 in nsBoxFrame::GetDebugPref ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#21 0x4104a5f1 in nsBoxFrame::PaintChild ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#22 0x4104a78f in nsBoxFrame::PaintChildren ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#23 0x4104a401 in nsBoxFrame::GetDebugPref ()
---Type <return> to continue, or q <return> to quit---
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#24 0x4104a5f1 in nsBoxFrame::PaintChild ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#25 0x4104a78f in nsBoxFrame::PaintChildren ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#26 0x4104a401 in nsBoxFrame::GetDebugPref ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#27 0x4104a5f1 in nsBoxFrame::PaintChild ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#28 0x4104a78f in nsBoxFrame::PaintChildren ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#29 0x4104a401 in nsBoxFrame::GetDebugPref ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#30 0x4104a5f1 in nsBoxFrame::PaintChild ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#31 0x4104a78f in nsBoxFrame::PaintChildren ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#32 0x4104a401 in nsBoxFrame::GetDebugPref ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#33 0x40f707ea in nsContainerFrame::PaintChild ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#34 0x40f706ce in nsContainerFrame::PaintChildren ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
---Type <return> to continue, or q <return> to quit---
#35 0x40f70677 in nsContainerFrame::GetAdditionalChildListName ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
#36 0x08772490 in ?? ()
#37 0x087c1ad8 in ?? ()
#38 0xbfffde44 in ?? ()
#39 0x00000000 in ?? ()
#40 0x00000000 in ?? ()
#41 0xbfffddcc in ?? ()
#42 0x40fafa99 in PresShell::StyleRuleRemoved ()
   from /usr/lib/mozilla-firefox/components/libgklayout.so
Previous frame inner to this frame (corrupt stack?)
(gdb)

Comment 1

[timeless]

reporter: why did you mark this as invalid?

Comment 2

[David Walker]

Post reporting it, I realized that it is probably not a Firefox problem. 
Because it is happening elsewhere, and probably stems from a GTK issue instead.

Comment 3

[:Gavin Sharp [email: [e-mail]]]

*** Bug 295390 has been marked as a duplicate of this bug. ***

Comment 4

[Zibi Braniecki [:zbraniecki][:gandalf]]

*** Bug 296021 has been marked as a duplicate of this bug. ***