466364 - segfault in [@ PL_DHashTableOperate - GCGraphBuilder::AddNode]

Status: RESOLVED DUPLICATE of bug 460916

(Core :: XPCOM, defect)

Description

[Brian Murrell]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.4) Gecko/2008111318 Ubuntu/8.10 (intrepid) Firefox/3.0.4
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.4) Gecko/2008111318 Ubuntu/8.10 (intrepid) Firefox/3.0.4

Returned to my computer after an absence to find FF3 crashed (again).

Reproducible: Didn't try




Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb7def6c0 (LWP 15994)]
0xb7a14b28 in PL_DHashTableOperate (table=0xbfdc6348, key=0x94d3a58, 
    op=PL_DHASH_ADD) at pldhash.c:588
588	pldhash.c: No such file or directory.
	in pldhash.c
(gdb) thread apply all bt full

Thread 8 (Thread 0xb5b27b90 (LWP 16005)):
#0  0xb80cc430 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7ec7f77 in poll () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#2  0xb7d26d8c in _pr_poll_with_poll (pds=0x9467ef0, npds=1, 
    timeout=4294967295) at ptio.c:3895
	stack_syspoll = {{fd = 17, events = 1, revents = 0}, {fd = 484600444, 
    events = -28684, revents = -18483}, {fd = 484606096, events = -16064, 
    revents = -18444}, {fd = 484600444, events = -28528, revents = 7394}, {
    fd = -1209656556, events = 12069, revents = -18424}, {fd = -1210888204, 
    events = -1, revents = -1}, {fd = -1246597192, events = -23500, 
    revents = -18478}, {fd = 1, events = 29440, revents = 7394}, {fd = 3, 
    events = 20468, revents = -18477}, {fd = -1, events = 2, revents = 0}, {
    fd = -1246597176, events = -23849, revents = -18479}, {fd = -1207436834, 
    events = 20468, revents = -18477}, {fd = -1246597144, events = -14708, 
    revents = -18478}, {fd = -5961, events = 104, revents = 0}, {fd = 3, 
    events = 20468, revents = -18477}, {fd = -1207431124, events = 20468, 
    revents = -18477}, {fd = -1209656556, events = 0, revents = 0}, {fd = 1, 
    events = 30520, revents = 7394}, {fd = -1246597000, events = 20468, 
    revents = -18477}, {fd = -1425026720, events = 19388, revents = -21745}, {
    fd = 484602320, events = -16064, revents = -18444}, {fd = 2, 
    events = 28891, revents = -19022}, {fd = 1, events = 2, revents = 0}, {
    fd = -1211265036, events = 0, revents = 0}, {fd = -1209656556, 
    events = 17109, revents = -18641}, {fd = -1207436834, events = 28788, 
    revents = -19022}, {fd = -1209656556, events = 17087, revents = -18641}, {
    fd = -1221639543, events = -28684, revents = -18483}, {fd = -1425186576, 
    events = 16, revents = -20144}, {fd = 2, events = 29136, revents = 7394}, {
    fd = -1209656556, events = 9302, revents = -18458}, {fd = -1208696512, 
    events = 29136, revents = 7394}, {fd = 484602312, events = -16396, 
    revents = -18426}, {fd = 484602320, events = 0, revents = 0}, {
    fd = -1425061152, events = 16, revents = -20144}, {fd = 484602320, 
    events = -16, revents = -22577}, {fd = -1246596952, events = 19456, 
    revents = -21745}, {fd = 64, events = 24816, revents = -21747}, {
    fd = -1246596936, events = 9302, revents = -18458}, {fd = -1207436834, 
    events = 24816, revents = -21747}, {fd = -1426063360, events = -28684, 
    revents = -18483}, {fd = -1425186576, events = 19168, revents = -21745}, {
    fd = 3, events = -20492, revents = -18444}, {fd = -1207431124, 
    events = 19168, revents = -21745}, {fd = 16005, events = 0, revents = 0}, {
    fd = 1, events = 19168, revents = -21745}, {fd = -1426063360, 
    events = 20468, revents = -18477}, {fd = 155615556, events = -32632, 
    revents = 2374}, {fd = -1246596856, events = 20272, revents = -18478}, {
    fd = 155615556, events = -28684, revents = -18483}, {fd = -1246596824, 
    events = 12992, revents = -18641}, {fd = -1210888204, events = -32448, 
    revents = 2374}, {fd = -1246596824, events = 20377, revents = -18478}, {
    fd = 155615556, events = 0, revents = 0}, {fd = -1221643831, 
    events = 29016, revents = -19022}, {fd = -1207436834, events = 0, 
    revents = 0}, {fd = -1209544778, events = 29032, revents = -19022}, {
    fd = -1210888204, events = 0, revents = 0}, {fd = 3, events = 29048, 
    revents = -19022}, {fd = -1210888204, events = 0, revents = 0}, {
    fd = -1209544778, events = -16555, revents = -18478}, {fd = -1246596756, 
    events = 0, revents = 0}, {fd = -1246596760, events = 19773, 
    revents = -18641}, {fd = 155616036, events = 0, revents = 0}}
	syspoll = (struct pollfd *) 0xb5b26f68
	index = 1
	msecs = -1
	ready = 0
	start = 3048370016
	elapsed = <value optimized out>
#3  0xb72f4e3f in nsSocketTransportService::Poll (this=0x9467a10, wait=1, 
    interval=0xb5b271e8) at nsSocketTransportService2.cpp:349
	pollList = (PRPollDesc *) 0x9467ef0
	pollCount = 1
	pollTimeout = 4294967295
	ts = 3356051636
	rv = <value optimized out>
	passedInterval = <value optimized out>
#4  0xb72f5334 in nsSocketTransportService::DoPollIteration (this=0x9467a10, 
    wait=1) at nsSocketTransportService2.cpp:644
	i = -1
	pollInterval = <value optimized out>
	n = <value optimized out>
#5  0xb72f55de in nsSocketTransportService::OnProcessNextEvent (
    this=0x9467a10, thread=0x9468238, mayWait=1, depth=1)
    at nsSocketTransportService2.cpp:523
	val = 0
#6  0xb7a4a19a in nsThread::ProcessNextEvent (this=0x9468238, mayWait=1, 
    result=0xb5b27294) at nsThread.cpp:497
	notifyGlobalObserver = 1
	obs = {<nsCOMPtr_base> = {mRawPtr = 0x9467a18}, <No data fields>}
	event = {<nsCOMPtr_base> = {mRawPtr = 0x9467a10}, <No data fields>}
	rv = <value optimized out>
#7  0xb7a1ab1c in NS_ProcessNextEvent_P (thread=0x1, mayWait=1)
    at nsThreadUtils.cpp:227
	val = <value optimized out>
#8  0xb72f5057 in nsSocketTransportService::Run (this=0x9467a10)
    at nsSocketTransportService2.cpp:565
	thread = (class nsIThread *) 0x9468238
	threadInt = {<nsCOMPtr_base> = {mRawPtr = 0x9468238}, <No data fields>}
	i = <value optimized out>
#9  0xb7a4a1f8 in nsThread::ProcessNextEvent (this=0x9468238, mayWait=1, 
    result=0xb5b27344) at nsThread.cpp:510
	notifyGlobalObserver = 0
	obs = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
	event = {<nsCOMPtr_base> = {mRawPtr = 0x9467a1c}, <No data fields>}
	rv = 0
#10 0xb7a1ab1c in NS_ProcessNextEvent_P (thread=0x1, mayWait=1)
    at nsThreadUtils.cpp:227
	val = <value optimized out>
#11 0xb7a4a95f in nsThread::ThreadFunc (arg=0x9468238) at nsThread.cpp:253
	event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
#12 0xb7d2b1e1 in _pt_root (arg=0x9468440) at ptthread.c:221
	detached = 0
#13 0xb807e50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#14 0xb7ed27ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 7 (Thread 0xb5305b90 (LWP 16006)):
#0  0xb80cc430 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb80823a2 in pthread_cond_timedwait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb7d23f9e in pt_TimedWait (cv=0x93f03f4, ml=0x9400c48, timeout=70)
    at ptsynch.c:280
	rv = 149863
	now = {tv_sec = 1227421735, tv_usec = 62189}
	tmo = {tv_sec = 1227421735, tv_nsec = 132189000}
	ticks = 1000
#3  0xb7d24dc0 in PR_WaitCondVar (cvar=0x93f03f0, timeout=70) at ptsynch.c:407
	rv = <value optimized out>
	thred = <value optimized out>
#4  0xb7a4d148 in TimerThread::Run (this=0x9400de8) at TimerThread.cpp:345
	waitFor = 4294966780
#5  0xb7a4a1f8 in nsThread::ProcessNextEvent (this=0x9518710, mayWait=1, 
    result=0xb5305344) at nsThread.cpp:510
	notifyGlobalObserver = 1
	obs = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
	event = {<nsCOMPtr_base> = {mRawPtr = 0x9400de8}, <No data fields>}
	rv = 0
#6  0xb7a1ab1c in NS_ProcessNextEvent_P (thread=0x80, mayWait=1)
    at nsThreadUtils.cpp:227
	val = <value optimized out>
#7  0xb7a4a95f in nsThread::ThreadFunc (arg=0x9518710) at nsThread.cpp:253
	event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
#8  0xb7d2b1e1 in _pt_root (arg=0x9518918) at ptthread.c:221
	detached = 0
#9  0xb807e50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#10 0xb7ed27ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 6 (Thread 0xb499eb90 (LWP 16010)):
#0  0xb80cc430 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb8082075 in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb7d24e39 in PR_WaitCondVar (cvar=0x98234e8, timeout=4294967295)
    at ptsynch.c:405
	rv = <value optimized out>
	thred = (PRThread *) 0x9823528
#3  0xb7852dbe in nsSSLThread::Run (this=0x9823460) at nsSSLThread.cpp:964
	threadLock = {<nsAutoLockBase> = {<No data fields>}, 
  mLock = 0x9823488, mLocked = 1}
	pending_work = <value optimized out>
	busy_socket_ssl_state = nsSSLSocketThreadData::ssl_reading_done
	needToSetPollableEvent = 1
	socketToDestroy = (class nsNSSSocketInfo *) 0x1
#4  0xb78526f2 in nsPSMBackgroundThread::nsThreadRunner (arg=0x9823460)
    at nsPSMBackgroundThread.cpp:44
No locals.
#5  0xb7d2b1e1 in _pt_root (arg=0x9823528) at ptthread.c:221
	detached = 0
#6  0xb807e50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7  0xb7ed27ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 5 (Thread 0xb3930b90 (LWP 16011)):
#0  0xb80cc430 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb8082075 in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb7d24e39 in PR_WaitCondVar (cvar=0x98236b8, timeout=4294967295)
    at ptsynch.c:405
	rv = <value optimized out>
	thred = (PRThread *) 0x98236f8
#3  0xb7853e56 in nsCertVerificationThread::Run (this=0x9823608)
    at nsCertVerificationThread.cpp:138
No locals.
#4  0xb78526f2 in nsPSMBackgroundThread::nsThreadRunner (arg=0x9823608)
    at nsPSMBackgroundThread.cpp:44
No locals.
#5  0xb7d2b1e1 in _pt_root (arg=0x98236f8) at ptthread.c:221
	detached = 0
#6  0xb807e50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7  0xb7ed27ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 4 (Thread 0xb1efdb90 (LWP 16021)):
#0  0xb80cc430 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb80823a2 in pthread_cond_timedwait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb7d23f9e in pt_TimedWait (cv=0x968db4c, ml=0x968e944, timeout=60000)
    at ptsynch.c:280
	rv = 2173
	now = {tv_sec = 1227421728, tv_usec = 423163}
	tmo = {tv_sec = 1227421788, tv_nsec = 423163000}
	ticks = 1000
#3  0xb7d24dc0 in PR_WaitCondVar (cvar=0x968db48, timeout=60000)
    at ptsynch.c:407
	rv = <value optimized out>
	thred = <value optimized out>
#4  0xb7d24eb7 in PR_Wait (mon=0x968e940, timeout=60000) at ptsynch.c:584
	rv = -516
	saved_entries = 1
	saved_owner = 2985286544
#5  0xb7a4be3c in nsThreadPool::Run (this=0x968dda0)
    at ../../dist/include/xpcom/nsAutoLock.h:340
	now = <value optimized out>
	timeout = 2173
	mon = {<nsAutoLockBase> = {<No data fields>}, mMonitor = 0x968e940, 
  mLockCount = 1}
	event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
	current = {<nsCOMPtr_base> = {mRawPtr = 0xb2f23608}, <No data fields>}
	shutdownThreadOnExit = 0
	exitThread = 0
	wasIdle = 0
	idleSince = 3356049063
#6  0xb7a4a1f8 in nsThread::ProcessNextEvent (this=0xb2f23608, mayWait=1, 
    result=0xb1efd344) at nsThread.cpp:510
	notifyGlobalObserver = 1
	obs = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
	event = {<nsCOMPtr_base> = {mRawPtr = 0x968dda4}, <No data fields>}
	rv = 0
#7  0xb7a1ab1c in NS_ProcessNextEvent_P (thread=0x80, mayWait=1)
    at nsThreadUtils.cpp:227
	val = <value optimized out>
#8  0xb7a4a95f in nsThread::ThreadFunc (arg=0xb2f23608) at nsThread.cpp:253
	event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
#9  0xb7d2b1e1 in _pt_root (arg=0xb2f23810) at ptthread.c:221
	detached = 0
#10 0xb807e50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#11 0xb7ed27ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 2 (Thread 0xb419db90 (LWP 16041)):
#0  0xb80cc430 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb8082075 in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb7d24e39 in PR_WaitCondVar (cvar=0xb2f09430, timeout=4294967295)
    at ptsynch.c:405
	rv = <value optimized out>
	thred = (PRThread *) 0xb2f74e80
#3  0xb7d24eb7 in PR_Wait (mon=0xb2f74d60, timeout=4294967295) at ptsynch.c:584
	rv = -512
	saved_entries = 1
	saved_owner = 3021593488
#4  0xb7a4941d in nsEventQueue::GetEvent (this=0xb2f51088, mayWait=1, 
    result=0xb419d304) at ../../dist/include/xpcom/nsAutoLock.h:340
No locals.
#5  0xb7a4a1cc in nsThread::ProcessNextEvent (this=0xb2f51068, mayWait=1, 
    result=0xb419d344) at nsThread.h:112
	notifyGlobalObserver = 1
	obs = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
	event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
	rv = 3072985781
#6  0xb7a1ab1c in NS_ProcessNextEvent_P (thread=0x80, mayWait=1)
    at nsThreadUtils.cpp:227
	val = <value optimized out>
#7  0xb7a4a95f in nsThread::ThreadFunc (arg=0xb2f51068) at nsThread.cpp:253
	event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
#8  0xb7d2b1e1 in _pt_root (arg=0xb2f74e80) at ptthread.c:221
	detached = 0
#9  0xb807e50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#10 0xb7ed27ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 1 (Thread 0xb7def6c0 (LWP 15994)):
#0  0xb7a14b28 in PL_DHashTableOperate (table=0xbfdc6348, key=0x94d3a58, 
    op=PL_DHASH_ADD) at pldhash.c:588
	keyHash = <value optimized out>
	entry = <value optimized out>
	size = <value optimized out>
#1  0xb7a54f90 in GCGraphBuilder::AddNode (this=0xbfdc632c, s=0x94d3a58, 
    aParticipant=0xb7cf0c74) at nsCycleCollector.cpp:1285
	e = (PtrToNodeEntry *) 0xb7a54f76
	result = <value optimized out>
#2  0xb72b68ba in XPCJSRuntime::AddXPConnectRoots (this=0x9478770, 
    cx=0x96dad58, cb=@0xbfdc632c) at xpcjsruntime.cpp:428
	iter = (JSContext *) 0x94d3a58
	acx = (JSContext *) 0x94d3a58
#3  0xb72a371f in nsXPConnect::BeginCycleCollection (this=0x94786d8, 
    cb=@0xbfdc632c) at nsXPConnect.cpp:624
No locals.
#4  0xb7a553d6 in nsCycleCollector::BeginCollection (this=0x94166c0)
    at nsCycleCollector.cpp:2317
	i = 2
	builder = {<nsCycleCollectionTraversalCallback> = {
    _vptr.nsCycleCollectionTraversalCallback = 0xb7cd6f18}, mNodeBuilder = {
    mNextBlock = 0x9416700, mNext = @0x9416704, mBlockEnd = 0x0}, 
  mEdgeBuilder = {mCurrent = 0x9416708, mBlockEnd = 0x9416708, 
    mNextBlockPtr = 0x941670c}, mPtrToNodeMap = {ops = 0x0, data = 0x0, 
    hashShift = 17, maxAlphaFrac = 192 '�', minAlphaFrac = 64 '@', 
    entrySize = 8, entryCount = 0, removedCount = 0, generation = 0, 
    entryStore = 0x0}, mCurrPi = 0x0, mRuntimes = 0x94166d0}
#5  0xb7a55464 in nsCycleCollector_beginCollection ()
    at nsCycleCollector.cpp:2910
No locals.
#6  0xb72a381c in XPCCycleCollectGCCallback (cx=0x96dad58, 
    status=JSGC_MARK_END) at nsXPConnect.cpp:440
	ok = <value optimized out>
#7  0xb7d8dcaa in js_GC (cx=0x96dad58, gckind=GC_NORMAL) at jsgc.c:3239
	rt = (JSRuntime *) 0x947a080
	keepAtoms = 0
	callback = <value optimized out>
	i = 250274428
	type = <value optimized out>
	trc = {context = 0x96dad58, callback = 0}
	thingSize = 158182744
	a = <value optimized out>
	ap = (JSGCArenaInfo **) 0x947a104
	emptyArenas = (JSGCArenaInfo *) 0x9479e9c
	flags = <value optimized out>
	flagp = (uint8 *) 0x9479e98 ""
	thing = <value optimized out>
	freeList = (JSGCThing *) 0xbfdc6438
	arenaList = (JSGCArenaList *) 0xb7d24f30
	allClear = 155688604
	requestDebit = 1
	acx = <value optimized out>
	iter = (JSContext *) 0x0
#8  0xb7d6a63a in JS_GC (cx=0x96dad58) at jsapi.c:2469
No locals.
#9  0xb72a2aa0 in nsXPConnect::Collect (this=0x94786d8) at nsXPConnect.cpp:529
	cycleCollectionContext = {<nsAXPCNativeCallContext> = {
    _vptr.nsAXPCNativeCallContext = 0xb7c23808}, 
  mState = XPCCallContext::HAVE_CONTEXT, mXPC = 0x94786d8, 
  mThreadData = 0x9479f68, mXPCContext = 0x968e568, mJSContext = 0x96dad58, 
  mContextPopRequired = 1, mDestroyJSContextInDestructor = 0, 
  mCallerLanguage = XPCContext::LANG_NATIVE, 
  mPrevCallerLanguage = XPCContext::LANG_UNKNOWN, mPrevCallContext = 0x0, 
  mOperandJSObject = 0xf519f85a, mCurrentJSObject = 0xb7aeabb2, 
  mFlattenedJSObject = 0x7a, mWrapper = 0xb7a19233, mTearOff = 0x19, 
  mScriptableInfo = 0xb7cd8ff4, mSet = 0xbfdc6588, mInterface = 0xb7a24552, 
  mMember = 0x0, mName = 155618364, mStaticMemberIsLocal = -1076075112, 
  mArgc = 3080801120, mArgv = 0x0, mRetVal = 0xb7aeabb2, 
  mExceptionWasThrown = -1213385452, mReturnValueWasSet = -1479988064, 
  mMethodIndex = 35900, mCallee = 0x0, 
  mStringWrapperData = "����Z�\031�<\214F\t\000\000\000\000�eܿ$H���eܿ\000\000\000"}
	cx = (JSContext *) 0x96dad58
#10 0xb7a55586 in nsCycleCollector::Collect (this=0x94166c0, aTryCollections=1)
    at nsCycleCollector.cpp:2250
	collected = -1228702124
	obs = {<nsCOMPtr_base> = {mRawPtr = 0x9468c30}, <No data fields>}
	whiteNodes = {<nsTPtrArray<PtrInfo>> = {<nsTArray<PtrInfo*>> = {<nsTArray_base> = {static sEmptyHdr = {mLength = 0, mCapacity = 0, mIsAutoArray = 0}, 
        mHdr = 0xbfdc65f0}, <No data fields>}, <No data fields>}, 
  mAutoBuf = "\000\000\000\000�\017\000\200\030fܿ!���@w:\t�H�\f��ö\002�B��\037Ķ\004\000\000\000(P\000\000\000Z\000\000\230:\000\000P\n\000\000@G\000\000}\000L��\217ͷ<gܿXfܿLgܿLgܿ\000\000\000\000\210gܿk�B��\230ܿX�@\vLgܿ�gܿ\037\000\000\000\001\000\000\000���\001����\000\000\000\000��@\v", '\0' <repeats 12 times>, "\003\000\000\000M��\0005��\001 \034K\tw\003\000\000�\000\000\000w\003\000\000�\000\000\000�fܿ\001\000\000\000\000\000\000\000h���\227\001���f"...}
	totalCollections = 0
#11 0xb7a556c5 in nsCycleCollector_collect () at nsCycleCollector.cpp:2898
No locals.
#12 0xb76509f2 in nsJSContext::CC () at nsJSEnvironment.cpp:3346
No locals.
#13 0xb7650cd7 in nsCCMemoryPressureObserver::Observe (this=0x968e520, 
    aSubject=0xb7cff3d0, aTopic=0xb7ba02f8 "memory-pressure", aData=0xb7c018e8)
    at nsJSEnvironment.cpp:311
No locals.
#14 0xb7a24544 in nsObserverList::NotifyObservers (this=0x986a528, 
    aSubject=0xb7cff3d0, aTopic=0xb7ba02f8 "memory-pressure", 
    someData=0xb7c018e8) at nsObserverList.cpp:128
	i = 2
	observers = {<nsCOMArray_base> = {mArray = {
      mImpl = 0x1de95938}}, <No data fields>}
#15 0xb7a24812 in nsObserverService::NotifyObservers (this=0x9468c30, 
    aSubject=0xb7cff3d0, aTopic=0xb7ba02f8 "memory-pressure", 
    someData=0xb7c018e8) at nsObserverService.cpp:181
No locals.
#16 0xb7a51b65 in nsMemoryImpl::RunFlushers (this=0xb7cff3d0, 
    aReason=0xb7c018e8) at nsMemoryImpl.cpp:253
	os = {<nsCOMPtr_base> = {mRawPtr = 0x9468c30}, <No data fields>}
#17 0xb7a51ba6 in nsMemoryImpl::FlushEvent::Run (this=0xb7cff3c8)
    at nsMemoryImpl.cpp:268
No locals.
#18 0xb7a4a1f8 in nsThread::ProcessNextEvent (this=0x93f06c0, mayWait=1, 
    result=0xbfdca5e4) at nsThread.cpp:510
	notifyGlobalObserver = 1
	obs = {<nsCOMPtr_base> = {mRawPtr = 0x9494f74}, <No data fields>}
	event = {<nsCOMPtr_base> = {mRawPtr = 0xb7cff3c8}, <No data fields>}
	rv = 0
#19 0xb7a1ab1c in NS_ProcessNextEvent_P (thread=0x1, mayWait=1)
    at nsThreadUtils.cpp:227
	val = <value optimized out>
#20 0xb799de58 in nsBaseAppShell::Run (this=0x9494f70)
    at nsBaseAppShell.cpp:170
	thread = (class nsIThread *) 0x93f06c0
#21 0xb7833610 in nsAppStartup::Run (this=0x94d3610) at nsAppStartup.cpp:181
	rv = <value optimized out>
#22 0xb7297658 in XRE_main (argc=2, argv=0xbfdcdd44, aAppData=0x937b830)
    at nsAppRunner.cpp:3194
	obsService = {<nsCOMPtr_base> = {
    mRawPtr = 0x9468c30}, <No data fields>}
	remoteService = {<nsCOMPtr_base> = {
    mRawPtr = 0x9902fc8}, <No data fields>}
	appStartup = {<nsCOMPtr_base> = {
    mRawPtr = 0x94d3610}, <No data fields>}
	workingDir = {<nsCOMPtr_base> = {
    mRawPtr = 0x961a930}, <No data fields>}
	chromeObserver = {<nsCOMPtr_base> = {
    mRawPtr = 0x94429d8}, <No data fields>}
	cmdLine = {<nsCOMPtr_base> = {mRawPtr = 0x9618cf0}, <No data fields>}
	noEMRestart = <value optimized out>
	xpcom = {mServiceManager = 0x9408d3c}
	desktopStartupIDEnv = <value optimized out>
	desktopStartupID = {<nsFixedCString> = {<nsCString> = {<nsACString_internal> = {<nsCSubstring_base> = {<No data fields>}, mData = 0xbfdcaa58 "", 
        mLength = 0, mFlags = 65553}, <No data fields>}, mFixedCapacity = 63, 
    mFixedBuf = 0xbfdcaa58 ""}, 
  mStorage = "\000�ܿ\226B��P�7\t��\004\b\210�ܿP2��\224�ܿ\001\000\000\000���\004\bT�7\tx�ܿ��ܿ��\004\bx�ܿ\000\000\000"}
	xremotearg = <value optimized out>
	upgraded = 0
	appInitiatedRestart = <value optimized out>
	dirProvider = {<nsIDirectoryServiceProvider2> = {<nsIDirectoryServiceProvider> = {<nsISupports> = {
        _vptr.nsISupports = 0xb7c23068}, <No data fields>}, <No data fields>}, <nsIProfileStartup> = {<nsISupports> = {
      _vptr.nsISupports = 0xb7c2308c}, <No data fields>}, 
  mAppProvider = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}, 
  mGREDir = {<nsCOMPtr_base> = {mRawPtr = 0x937ba50}, <No data fields>}, 
  mSysPluginDir = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}, 
  mXULAppDir = {<nsCOMPtr_base> = {mRawPtr = 0x937b9b0}, <No data fields>}, 
  mProfileDir = {<nsCOMPtr_base> = {mRawPtr = 0x93f04e0}, <No data fields>}, 
  mProfileLocalDir = {<nsCOMPtr_base> = {
      mRawPtr = 0x93f0558}, <No data fields>}, mProfileNotified = 1 '\001', 
  mExtensionsLoaded = 1 '\001', mAppBundleDirectories = {<nsCOMArray_base> = {
      mArray = {mImpl = 0x0}}, <No data fields>}, 
  mExtensionDirectories = {<nsCOMArray_base> = {mArray = {
        mImpl = 0x9426ee8}}, <No data fields>}, 
  mThemeDirectories = {<nsCOMArray_base> = {mArray = {
        mImpl = 0x94270d0}}, <No data fields>}}
	display = (GdkDisplay *) 0x93b2028
	nativeApp = {<nsCOMPtr_base> = {mRawPtr = 0x93c1860}, <No data fields>}
	desktopStartupIDPtr = 0x0
	startOffline = 0
	profLD = {<nsCOMPtr_base> = {mRawPtr = 0x93f0558}, <No data fields>}
	profD = {<nsCOMPtr_base> = {mRawPtr = 0x93f04e0}, <No data fields>}
	needsRestart = 0
	canRun = 1
	profileLock = {<nsCOMPtr_base> = {
    mRawPtr = 0x9400bd8}, <No data fields>}
	profileName = {<nsFixedCString> = {<nsCString> = {<nsACString_internal> = {<nsCSubstring_base> = {<No data fields>}, mData = 0x9400bc8 "default", 
        mLength = 7, mFlags = 65541}, <No data fields>}, mFixedCapacity = 63, 
    mFixedBuf = 0xbfdcaa04 ""}, 
  mStorage = "\000�ܿeH��@���t\000\000\000@���8�ܿ��\006�t\000\000\000x�ܿX�ܿ}^ѷX�7\t�\217ͷX�ܿ�\030��X�7\t"}
	version = {<nsFixedCString> = {<nsCString> = {<nsACString_internal> = {<nsCSubstring_base> = {<No data fields>}, 
        mData = 0xbfdca9b0 "3.0.4_2008101315/2008111318", mLength = 27, 
        mFlags = 65553}, <No data fields>}, mFixedCapacity = 63, 
    mFixedBuf = 0xbfdca9b0 "3.0.4_2008101315/2008111318"}, 
  mStorage = "3.0.4_2008101315/2008111318\000H�7\t��7\t\224�ܿ\002\000\000\000\000\000\000\000��7\t�\217ͷ\b�ܿ�\030��"}
	osABI = {<nsCString> = {<nsACString_internal> = {<nsCSubstring_base> = {<No data fields>}, mData = 0xb7ad2f6e "Linux_x86-gcc3", mLength = 14, 
      mFlags = 1}, <No data fields>}, <No data fields>}
	versionOK = <value optimized out>
	rv = 0
	ar = <value optimized out>
	gtkModules = <value optimized out>
	override = 0x0
	appData = {<nsXREAppData> = {size = 56, directory = 0x937b9b0, 
    vendor = 0x937c2f0 "Mozilla", name = 0x937c2d0 "Firefox", 
    version = 0x937c2e0 "3.0.4", buildID = 0x936cc10 "2008101315", 
    ID = 0x937baf0 "{ec8030f7-c20a-464f-9b0e-13a3a9e97384}", 
    copyright = 0x937bb20 "Copyright (c) 1998 - 2008 mozilla.org", flags = 6, 
    xreDirectory = 0x937ba50, minVersion = 0x936cc20 "1.9.0.1", 
    maxVersion = 0x936cc30 "1.9.0.*", 
    crashReporterURL = 0x937bb50 "https://crash-reports.mozilla.com/submit", 
    profile = 0x0}, <No data fields>}
	iniFile = {<nsCOMPtr_base> = {mRawPtr = 0x937bb80}, <No data fields>}
	localIniFile = {<nsCOMPtr_base> = {
    mRawPtr = 0x937bb80}, <No data fields>}
	parser = {
  mSections = {<nsBaseHashtable<nsDepCharHashKey, nsAutoPtr<nsINIParser_internal::INIValue>, nsINIParser_internal::INIValue*>> = {<nsTHashtable<nsBaseHashtableET<nsDepCharHashKey, nsAutoPtr<nsINIParser_internal::INIValue> > >> = {
        mTable = {ops = 0xb7cef5dc, data = 0x0, hashShift = 28, 
          maxAlphaFrac = 192 '�', minAlphaFrac = 64 '@', entrySize = 12, 
          entryCount = 1, removedCount = 0, generation = 0, 
          entryStore = 0x937bd60 ""}}, <No data fields>}, <No data fields>}, 
  mFileContents = {mRawPtr = 0x937be28 "[Build"}}
	i = <value optimized out>
#23 0x080491ab in ?? ()
No symbol table info available.
#24 0xb7e07685 in __libc_start_main () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#25 0x08048d11 in ?? ()
No symbol table info available.

Comment 1

[timeless]

in general thread apply all bt should only be posted as an attachment. it makes it very hard to find the crashing thread.