345088 - Firefox crashes when site with javascript is open for some minutes [@ GetMaiAtkType]

Status: RESOLVED DUPLICATE of bug 302250

(Firefox :: General, defect)

Description

[Dieter Steiner]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; de; rv:1.8.0.4) Gecko/20060608 Ubuntu/1.0.4 Firefox/1.5.0.4
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; de; rv:1.8.0.4) Gecko/20060608 Ubuntu/1.0.4 Firefox/1.5.0.4

firefox crashes when http://pardusclock.rocks.it/ is open for some minutes.
even happens when i'm doing nothing for some minutes

Reproducible: Always

Steps to Reproduce:
1. go to http://pardusclock.rocks.it/
2. wait some minutes
3. firefox crashes suddenly

Actual Results:  
spoilerhead@plasmafire:/$ firefox
GTK Accessibility Module initialized

(Gecko:2360): GLib-GObject-WARNING **: gsignal.c:1017: unable to lookup signal "activate" of unloaded type `MaiAtkObject'

(Gecko:2360): GLib-GObject-CRITICAL **: g_signal_emit_valist: assertion `signal_id > 0' failed

GLib-GObject-ERROR **: file gtype.c: line 463 (type_node_new_W): assertion failed: (pnode->n_children < MAX_N_CHILDREN)
aborting...
Aborted


Expected Results:  
firefox sohuldn't crash

Comment 1

[Martijn Wargers (dead)]

Do you have talkback ID of the crash?
http://kb.mozillazine.org/Talkback

Comment 2

[Dieter Steiner]

no, sorry, as i'm using genuine ubuntu package, wich is not talkback enabled.

btw. its also posted at
https://launchpad.net/bugs/53372

Comment 3

[Martijn Wargers (dead)]

So it's not an official Mozilla package? Then I guess this might be invalid.
Does this crash happen with an official Mozilla build?

Comment 4

[Dieter Steiner]

no, its the official ubuntu package. all i know is that there's a bug.
can't download an official package, as i realy don't want to download such a large file as i'm currenlty on a slow 56k line for some weeks, sorry.

it doesn't seem to happen in windows, tough.

Comment 5

[Martijn Wargers (dead)]

Maybe Adam can reproduce this...

Comment 6

[Adam Guthrie]

I couldn't reproduce with a mozilla.org 1.5.0.4 build or the 1.5.0.5 build from Ubuntu. 

Dieter, can you download the firefox-dbg package (you can find it in synaptic) and then follow these steps?

From the command line do:
gdb firefox
handle SIG33 pass nostop noprint
run
<crash>
bt

"bt" will output the stack. Copy and paste the stack in the bug.

Comment 7

[Dieter Steiner]

maybe
need to check the filesize

Comment 8

[Dieter Steiner]

ok, sorry, cant get it .. 40MB wil ltake me ages.
anything i can do without downloading it?

Comment 9

[helpa.ch]

I can reproduce it:

Linux ncc-1701 2.6.15-26-k7 #1 SMP PREEMPT Thu Aug 3 03:40:32 UTC 2006 i686 GNU/Linux

apo@ncc-1701:~$ dpkg -l | grep firefox
ii firefox 1.5.dfsg+1.5.0.5-0ubuntu6.06.1 lightweight web browser based on Mozilla
ii firefox-gnome-support 1.5.dfsg+1.5.0.5-0ubuntu6.06.1 Support for Gnome in Mozilla Firefox
ii j2re1.4-mozilla-plugin 0ubuntu5 Java plugin for mozilla/firefox
ii libnspr4 1.firefox1.5.dfsg+1.5.0.5-0ubuntu6.06.1 Netscape Portable Runtime Library
ii libnss3 1.firefox1.5.dfsg+1.5.0.5-0ubuntu6.06.1 Network Security Service Libraries - runtime
ii mozilla-firefox-locale-de-de 1.5.0.1ubuntu6-2 Mozilla Firefox German language/region packa
ii mozilla-firefox-locale-en-gb 1.5.0.1ubuntu6-2 Mozilla Firefox English language/region pack


I also tried to follow Adams instruction but it isn't working:
This GDB was configured as "i486-linux-gnu"..."/usr/bin/firefox": not in executable format: File format not recognized

Comment 10

[helpa.ch]

(In reply to comment #9)
> I can reproduce it:
> 
> Linux ncc-1701 2.6.15-26-k7 #1 SMP PREEMPT Thu Aug 3 03:40:32 UTC 2006 i686
> GNU/Linux
> 
> apo@ncc-1701:~$ dpkg -l | grep firefox
> ii firefox 1.5.dfsg+1.5.0.5-0ubuntu6.06.1 lightweight web browser based on
> Mozilla
> ii firefox-gnome-support 1.5.dfsg+1.5.0.5-0ubuntu6.06.1 Support for Gnome in
> Mozilla Firefox
> ii j2re1.4-mozilla-plugin 0ubuntu5 Java plugin for mozilla/firefox
> ii libnspr4 1.firefox1.5.dfsg+1.5.0.5-0ubuntu6.06.1 Netscape Portable Runtime
> Library
> ii libnss3 1.firefox1.5.dfsg+1.5.0.5-0ubuntu6.06.1 Network Security Service
> Libraries - runtime
> ii mozilla-firefox-locale-de-de 1.5.0.1ubuntu6-2 Mozilla Firefox German
> language/region packa
> ii mozilla-firefox-locale-en-gb 1.5.0.1ubuntu6-2 Mozilla Firefox English
> language/region pack
> 
> 
> I also tried to follow Adams instruction but it isn't working:
> This GDB was configured as "i486-linux-gnu"..."/usr/bin/firefox": not in
> executable format: File format not recognized
> 

got it working with firefox -debug, I'll post the output as soon as it crashes 

Comment 11

[helpa.ch]

(gdb) handle SIG33 pass nostop noprint
Signal        Stop      Print   Pass to program Description
SIG33         No        No      Yes             Real-time event 33
(gdb) run
Starting program: /usr/lib/firefox/firefox-bin -a firefox
[Thread debugging using libthread_db enabled]
[New Thread -1219942720 (LWP 10295)]
GTK Accessibility Module initialized
[New Thread -1224508496 (LWP 10300)]
[New Thread -1235915856 (LWP 10301)]
[New Thread -1254601808 (LWP 10302)]
[New Thread -1269052496 (LWP 10303)]
[New Thread -1277445200 (LWP 10304)]
[Thread -1269052496 (LWP 10303) exited]

(Gecko:10295): GLib-GObject-WARNING **: gsignal.c:1017: unable to lookup signal "activate" of unloaded type `MaiAtkObject'

(Gecko:10295): GLib-GObject-CRITICAL **: g_signal_emit_valist: assertion `signal _id > 0' failed
[Thread -1277445200 (LWP 10304) exited]
[Thread -1254601808 (LWP 10302) exited]
[New Thread -1254601808 (LWP 10307)]
[Thread -1254601808 (LWP 10307) exited]
[New Thread -1254601808 (LWP 10310)]
[New Thread -1277445200 (LWP 10311)]
[Thread -1254601808 (LWP 10310) exited]
[Thread -1277445200 (LWP 10311) exited]
[New Thread -1277445200 (LWP 10314)]
[New Thread -1254601808 (LWP 10317)]
[Thread -1277445200 (LWP 10314) exited]
[New Thread -1277445200 (LWP 10321)]

GLib-GObject-ERROR **: file gtype.c: line 463 (type_node_new_W): assertion faile d: (pnode->n_children < MAX_N_CHILDREN)
aborting...

Program received signal SIGABRT, Aborted.
[Switching to Thread -1219942720 (LWP 10295)]
0xffffe410 in __kernel_vsyscall ()
(gdb) bt
#0  0xffffe410 in __kernel_vsyscall ()
#1  0xb75929a1 in raise () from /lib/tls/i686/cmov/libc.so.6
#2  0xb75942b9 in abort () from /lib/tls/i686/cmov/libc.so.6
#3  0xb77f1006 in g_logv () from /usr/lib/libglib-2.0.so.0
#4  0xb77f103a in g_log () from /usr/lib/libglib-2.0.so.0
#5  0xb77f10a6 in g_assert_warning () from /usr/lib/libglib-2.0.so.0
#6  0xb786d38b in g_source_set_closure () from /usr/lib/libgobject-2.0.so.0
#7  0xb78729d9 in g_type_register_static () from /usr/lib/libgobject-2.0.so.0
#8  0xb352131c in GetMaiAtkType (interfaceCount=@0x91fd848,
    interfaces=0x9ed7360) at nsAccessibleWrap.cpp:423
#9  0xb3522643 in nsAccessibleWrap::GetNativeInterface (this=0x91fd810,
    aOutAccessible=0xbfb7e074) at nsAccessibleWrap.cpp:234
#10 0xb35211e0 in nsAccessibleWrap::GetAtkObject (this=0x6)
    at nsAccessibleWrap.cpp:251
#11 0xb3521f8b in refChildCB (aAtkObj=0x8a26168, aChildIndex=0)
    at nsAccessibleWrap.cpp:859
#12 0xb7a7095d in atk_object_ref_accessible_child ()
   from /usr/lib/libatk-1.0.so.0
#13 0xb736f1f4 in gnome_accessibility_module_shutdown ()
   from /usr/lib/gtk-2.0/modules/libatk-bridge.so
#14 0xb786510f in g_signal_stop_emission () from /usr/lib/libgobject-2.0.so.0
#15 0xb7866b19 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#16 0xb786a030 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
---Type <return> to continue, or q <return> to quit---
#17 0xb3522f83 in nsDocAccessibleWrap::FireToolkitEvent (this=0x0,
    aEvent=32772, aAccessible=0x8df9d34, aEventData=0x0)
    at nsDocAccessibleWrap.cpp:389
#18 0xb350493f in nsDocAccessible::FlushPendingEvents (this=0x8f53320)
    at nsDocAccessible.cpp:976
#19 0xb350439d in nsDocAccessible::FlushEventsCallback (aTimer=0x8e6daa0,
    aClosure=0x0) at nsDocAccessible.cpp:987
#20 0xb7e9a395 in nsTimerImpl::Fire (this=0x8e6daa0) at nsTimerImpl.cpp:394
#21 0xb7e9abcf in handleTimerEvent (event=0xb33260c0) at nsTimerImpl.cpp:459
#22 0xb7e96529 in PL_HandleEvent (self=0xb33260c0) at plevent.c:688
#23 0xb7e96cde in PL_ProcessPendingEvents (self=0x8106270) at plevent.c:623
#24 0xb7e98080 in nsEventQueueImpl::ProcessPendingEvents (this=0x8106228)
    at nsEventQueue.cpp:417
#25 0xb66fa479 in event_processor_callback (source=0x84cda40,
    condition=G_IO_IN, data=0x6) at nsAppShell.cpp:67
#26 0xb780f52c in g_vasprintf () from /usr/lib/libglib-2.0.so.0
#27 0xb77e88d6 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#28 0xb77eb996 in g_main_context_check () from /usr/lib/libglib-2.0.so.0
#29 0xb77ebcb8 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#30 0xb7c1a765 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#31 0xb66fa90a in nsAppShell::Run (this=0x817caa8) at nsAppShell.cpp:139
#32 0xb66333d2 in nsAppStartup::Run (this=0x817ca68) at nsAppStartup.cpp:150
#33 0x0804f321 in XRE_main (argc=3, argv=0xbfb7ed24, aAppData=0x80595e0)
---Type <return> to continue, or q <return> to quit---
    at nsAppRunner.cpp:2374
#34 0x0804abe4 in main (argc=0, argv=0x0) at nsBrowserApp.cpp:61
#35 0xb757eea2 in __libc_start_main () from /lib/tls/i686/cmov/libc.so.6
#36 0x0804ab31 in _start () at ../sysdeps/i386/elf/start.S:119

Comment 12

[Dieter Steiner]

as i couldn'T get the debug build i stil lcan give you the output of the normal build, too. but good to see that someone can reproduce it.


GLib-GObject-ERROR **: file gtype.c: line 463 (type_node_new_W): assertion failed: (pnode->n_children < MAX_N_CHILDREN)
aborting...

Program received signal SIGABRT, Aborted.
[Switching to Thread -1210284352 (LWP 4371)]
0xffffe410 in __kernel_vsyscall ()
(gdb) bt
#0  0xffffe410 in __kernel_vsyscall ()
#1  0x425a19a1 in raise () from /lib/tls/i686/cmov/libc.so.6
#2  0x425a32b9 in abort () from /lib/tls/i686/cmov/libc.so.6
#3  0x41d74006 in g_logv () from /usr/lib/libglib-2.0.so.0
#4  0x41d7403a in g_log () from /usr/lib/libglib-2.0.so.0
#5  0x41d740a6 in g_assert_warning () from /usr/lib/libglib-2.0.so.0
#6  0x41e6938b in g_source_set_closure () from /usr/lib/libgobject-2.0.so.0
#7  0x41e6e9d9 in g_type_register_static () from /usr/lib/libgobject-2.0.so.0
#8  0xb54bb1dc in NSGetModule () from /usr/lib/firefox/components/libaccessibility.so
#9  0xb54bc503 in NSGetModule () from /usr/lib/firefox/components/libaccessibility.so
#10 0xb54bb0a0 in NSGetModule () from /usr/lib/firefox/components/libaccessibility.so
#11 0xb54bbe4b in NSGetModule () from /usr/lib/firefox/components/libaccessibility.so
#12 0x422c195d in atk_object_ref_accessible_child () from /usr/lib/libatk-1.0.so.0
#13 0xb7ca71f4 in gnome_accessibility_module_shutdown ()
   from /usr/lib/gtk-2.0/modules/libatk-bridge.so
#14 0x41e6110f in g_signal_stop_emission () from /usr/lib/libgobject-2.0.so.0
#15 0x41e62b19 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#16 0x41e66030 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#17 0xb54bce43 in NSGetModule () from /usr/lib/firefox/components/libaccessibility.so
#18 0xb549e93f in NSGetModule () from /usr/lib/firefox/components/libaccessibility.so
#19 0xb549e39d in NSGetModule () from /usr/lib/firefox/components/libaccessibility.so
#20 0xb7e8e395 in NS_NewThread () from /usr/lib/firefox/libxpcom_core.so
#21 0xb7e8ebcf in NS_NewThread () from /usr/lib/firefox/libxpcom_core.so
#22 0xb7e8a529 in PL_HandleEvent () from /usr/lib/firefox/libxpcom_core.so
#23 0xb7e8acde in PL_ProcessPendingEvents () from /usr/lib/firefox/libxpcom_core.so
#24 0xb7e8c080 in nsAutoCMonitor::Exit () from /usr/lib/firefox/libxpcom_core.so
#25 0xb716f479 in ?? () from /usr/lib/firefox/components/libwidget_gtk2.so
#26 0x08130468 in ?? ()
#27 0x08372a48 in ?? ()
#28 0xbfd5b248 in ?? ()
#29 0x41d9252c in g_vasprintf () from /usr/lib/libglib-2.0.so.0
#30 0x41d9252c in g_vasprintf () from /usr/lib/libglib-2.0.so.0
#31 0x41d6b8d6 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#32 0x41d6e996 in g_main_context_check () from /usr/lib/libglib-2.0.so.0
#33 0x41d6ecb8 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#34 0x4a2ae775 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#35 0xb716f90a in ?? () from /usr/lib/firefox/components/libwidget_gtk2.so
#36 0x081aae70 in ?? ()
#37 0xb700df6c in ?? () from /usr/lib/firefox/components/libnsappshell.so
#38 0xbfd5b3a8 in ?? ()
#39 0x08057924 in _IO_stdin_used ()
#40 0x08059874 in ?? ()
#41 0x081aae30 in ?? ()
#42 0xbfd5b3b8 in ?? ()
#43 0xb707c372 in NSGetModule () from /usr/lib/firefox/components/libtoolkitcomps.so
#44 0xb707c372 in NSGetModule () from /usr/lib/firefox/components/libtoolkitcomps.so
#45 0x0804f2e1 in ?? ()
#46 0x081aae30 in ?? ()
#47 0x080569b0 in _IO_stdin_used ()
#48 0x00000000 in ?? ()

Comment 13

[Adam Guthrie]

So this is a duplicate of a bug that's going to be fixed for Firefox 2. The patch hasn't landed on the 1.5.0.x branch, so it's not yet fixed for the version you guys are running.

I /think/ that you might be able to workaround this crash by disabling the GTK Accessibility tools, but I'm not sure. Then again, you guys might need those...

*** This bug has been marked as a duplicate of 302250 ***