344274 - crash [@ JS_HashTableEnumerateEntries]

Status: RESOLVED DUPLICATE of bug 322131

(Core :: General, defect)

Description

[Jesús Corrius]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; es-ES; rv:1.8.0.4) Gecko/20060614 Fedora/1.5.0.4-1.2.fc5 Firefox/1.5.0.4 pango-text
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; es-ES; rv:1.8.0.4) Gecko/20060614 Fedora/1.5.0.4-1.2.fc5 Firefox/1.5.0.4 pango-text

I'm using Firefox 1.0.4 in Fedora Core 5. Firefox crashed and I got the following backtrace from the terminal:

*** glibc detected *** /usr/lib/firefox-1.5.0.4/firefox-bin: munmap_chunk(): invalid pointer: 0x0b1a79d8 ***
======= Backtrace: =========
/lib/libc.so.6(__libc_free+0x179)[0xa2f4f0]
/usr/lib/firefox-1.5.0.4/libmozjs.so[0x475d1c]
/usr/lib/firefox-1.5.0.4/libmozjs.so[0x42ae2d]
/usr/lib/firefox-1.5.0.4/libmozjs.so(JS_HashTableEnumerateEntries+0x5b)[0x444a68]
/usr/lib/firefox-1.5.0.4/libmozjs.so[0x42aebb]
/usr/lib/firefox-1.5.0.4/libmozjs.so(JS_Finish+0x27)[0x42697c]
/usr/lib/firefox-1.5.0.4/components/libxpconnect.so[0x6e2541]
/usr/lib/firefox-1.5.0.4/components/libxpconnect.so[0x6e24c8]
/usr/lib/firefox-1.5.0.4/components/libxpconnect.so[0x6dfdf1]
/usr/lib/firefox-1.5.0.4/components/libxpconnect.so[0x6ce721]
/usr/lib/firefox-1.5.0.4/components/libxpconnect.so[0x6ce075]
/usr/lib/firefox-1.5.0.4/components/libcaps.so[0x614ec8]
/usr/lib/firefox-1.5.0.4/components/libcaps.so[0x61ceba]
/usr/lib/firefox-1.5.0.4/libxpcom_core.so[0x138f87]
/usr/lib/firefox-1.5.0.4/libxpcom_core.so[0x138fb0]
/usr/lib/firefox-1.5.0.4/libxpcom_core.so[0x1390d4]
/usr/lib/firefox-1.5.0.4/libxpcom_core.so[0x1728e0]
/usr/lib/firefox-1.5.0.4/libxpcom_core.so[0x170b84]
/usr/lib/firefox-1.5.0.4/libxpcom_core.so[0x170be0]
/usr/lib/firefox-1.5.0.4/libxpcom_core.so[0x13ff22]
/usr/lib/firefox-1.5.0.4/libxpcom_core.so(PL_DHashTableEnumerate+0x62)[0x1364a6]
/usr/lib/firefox-1.5.0.4/libxpcom_core.so(_ZN11nsHashtable9EnumerateEPFiP9nsHashKeyPvS2_ES2_+0x47)[0x140109]
/usr/lib/firefox-1.5.0.4/libxpcom_core.so[0x170ae2]
/usr/lib/firefox-1.5.0.4/libxpcom_core.so[0x16aeab]
/usr/lib/firefox-1.5.0.4/libxpcom_core.so[0x16ce57]
/usr/lib/firefox-1.5.0.4/libxpcom_core.so(NS_ShutdownXPCOM_P+0x200)[0x139bd2]
/usr/lib/firefox-1.5.0.4/firefox-bin[0x804bf38]
/usr/lib/firefox-1.5.0.4/firefox-bin[0x804f6e3]
/usr/lib/firefox-1.5.0.4/firefox-bin(__gxx_personality_v0+0x145)[0x804af75]
/lib/libc.so.6(__libc_start_main+0xdc)[0x9dd724]
/usr/lib/firefox-1.5.0.4/firefox-bin(__gxx_personality_v0+0xa1)[0x804aed1]

(full backtrace attached)

Reproducible: Couldn't Reproduce

Comment 1

[Jesús Corrius]

Attachment: complete crash backtrace from the terminal

Comment 2

[Nicolás Lichtmaier]

Perhaps this is related to a crash I've seen: TB26174432E

(But I'm using Firefox 2)

libc.so.6 + 0x655ac (0xb73785ac)
js_FinalizeStringRT()  [mozilla/js/src/jsstr.c, line 2632]
js_atom_uninterner()  [mozilla/js/src/jsatom.c, line 391]
JS_HashTableEnumerateEntries()  [mozilla/js/src/jshash.c, line 367]
js_FinishAtomState()  [mozilla/js/src/jsatom.c, line 416]
JS_Finish()  [mozilla/js/src/jsapi.c, line 761]
nsJSRuntimeServiceImpl::~nsJSRuntimeServiceImpl()  [mozilla/js/src/xpconnect/src/xpcruntimesvc.cpp, line 94]
nsJSRuntimeServiceImpl::Release()  [mozilla/js/src/xpconnect/src/xpcruntimesvc.cpp, line 101]
XPCJSRuntime::~XPCJSRuntime()  [mozilla/js/src/xpconnect/src/xpcjsruntime.cpp, line 732]
nsXPConnect::~nsXPConnect()  [mozilla/js/src/xpconnect/src/nsXPConnect.cpp, line 157]
nsXPConnect::Release()  [mozilla/js/src/xpconnect/src/nsXPConnect.cpp, line 48]
nsScriptSecurityManager::Shutdown()  [mozilla/caps/src/nsScriptSecurityManager.cpp, line 3057]
nsGenericModule::Shutdown()  [mozilla/xpcom/build/nsGenericFactory.cpp, line 339]
nsGenericModule::~nsGenericModule()  [mozilla/xpcom/build/nsGenericFactory.cpp, line 236]
nsGenericModule::Release()  [mozilla/xpcom/build/nsGenericFactory.cpp, line 244]
nsCOMPtr_base::assign_with_AddRef()  [mozilla/xpcom/build/nsCOMPtr.cpp, line 531]
info_ClearEntry()  [mozilla/xpcom/components/nsStaticComponentLoader.cpp, line 101]
PL_DHashTableFinish()  [mozilla/xpcom/build/pldhash.c, line 381]
nsStaticComponentLoader::Release()  [mozilla/xpcom/components/nsStaticComponentLoader.cpp, line 82]
nsComponentManagerImpl::Shutdown()  [mozilla/xpcom/components/nsComponentManager.cpp, line 923]
NS_ShutdownXPCOM_P()  [mozilla/xpcom/build/nsXPComInit.cpp, line 869]
ScopedXPCOMStartup::~ScopedXPCOMStartup()  [mozilla/toolkit/xre/nsAppRunner.cpp, line 554]
XRE_main()  [mozilla/toolkit/xre/nsAppRunner.cpp, line 848]
main()  [mozilla/browser/app/nsBrowserApp.cpp, line 62]
libc.so.6 + 0x14ea8 (0xb7327ea8)

Comment 3

[Nicolás Lichtmaier]

Happened again: TB28042739M

Confirming to get somebody's attention.

Comment 4

[timeless]

[e-mail]: i gave you canconfirm/edit bugs in 2002, but you just confirmed a bug in core:general. when I gave you permissions, I either expected you to know not to confirm a bug and leave it untriaged, or I expected someone else to explain that to you (if someone vouched for you).

Please find this bug a proper home. It's yours until you do so.

(hint: it's a duplicate and should not have been confirmed)

Comment 5

[Nicolás Lichtmaier]

Uhm... sorry, I wasn't sure enough to assign a more specific component. The crash seems equals to the one in bug 322131. I'll investigate this further and I'll be more careful next time. =(