Closed Bug 731719 Opened 11 years ago Closed 11 years ago

Crash @ libpthread-2.14.1.so@0xfbcb

Categories

(Firefox :: General, defect)

Product:
Firefox
Component:
General
Version:
10 Branch
Platform:
x86_64
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 725117

People

(Reporter: amai, Unassigned)

Details

(Keywords: crash, regression)

Crash Data

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:10.0.2) Gecko/20100101 Firefox/10.0.2
Build ID: 2012021500

Steps to reproduce:

Go to the NAS web frontend of my fritzbox (DSL router)


Actual results:

Crash, see bp-c08c5733-dd94-4e73-bf25-0f9e12120229


Expected results:

No crash
It may look like Bug 727745 but I don't have Gnome tracker addon...
Severity: normal → critical
Crash Signature: [@ libpthread-2.14.1.so@0xfbcb ]
Keywords: crash
Does it crash every time or just sometimes?

Does the crash still occur if you start Firefox in Safe Mode?
https://support.mozilla.com/en-US/kb/Safe+Mode
100% reproducible, also in safe-mode, see bp-fa33c1a9-431f-49d8-a207-077c52120229

I started from a console where I saw:

*** nss-shared-helper: Shared database disabled (set NSS_USE_SHARED_DB to enable).
java version "1.6.0_24"
OpenJDK Runtime Environment (IcedTea6 1.11.1) (suse-3.1-x86_64)
OpenJDK 64-Bit Server VM (build 20.0-b12, mixed mode)
Setting to class class java.lang.Boolean:false
Assertion failure: rt->onOwnerThread(), at /home/abuild/rpmbuild/BUILD/mozilla/js/src/jsapi.cpp:6316
Setting to class class java.lang.Boolean:false
Same result=crash :-( bp-c87e00f9-d28f-4499-aaff-e29462120229
Maybe a related to Bug 704249 !?
It's probably a dupe of bug 725117 which is a dupe of bug 704249 because I see the following stack in some crash reports:
Frame 	Module 	Signature 	Source
0 	libpthread-2.14.1.so 	libpthread-2.14.1.so@0xfbcb 	
1 	libxul.so 	js_NewContext 	jscntxt.cpp:321
2 	libxul.so 	XPCJSContextStack::GetSafeJSContext 	XPCThreadContext.cpp:236
3 	libxul.so 	mozilla::plugins::parent::_getstringidentifier 	nsNPAPIPlugin.cpp:1397
4 	IcedTeaPlugin.so 	IcedTeaPlugin.so@0x1c840 	
5 	IcedTeaPlugin.so 	IcedTeaPlugin.so@0x2338e7
Status: UNCONFIRMED → NEW
Component: Untriaged → General
Ever confirmed: true
Keywords: regression
QA Contact: untriaged → general
Summary: Crash in libpthread → Crash @ libpthread-2.14.1.so@0xfbcb
Here's a callstack:
#0  0x00007ffff76c0bcb in raise (sig=<optimized out>) at ../nptl/sysdeps/unix/sysv/linux/pt-raise.c:42
#1  0x00007ffff5a86dbe in js_NewContext (rt=0x7fffe8102000, stackChunkSize=<optimized out>)
    at /usr/src/debug/mozilla/js/src/jscntxt.cpp:321
#2  0x00007ffff55adeb1 in XPCJSContextStack::GetSafeJSContext (this=0x7fffc85e1ed0, aSafeJSContext=0x7fffcbefdcd8)
    at /usr/src/debug/mozilla/js/xpconnect/src/XPCThreadContext.cpp:236
#3  0x00007ffff571a33d in mozilla::plugins::parent::_getstringidentifier (name=0x7fffca5f5118 "ja_applet_activ")
    at /usr/src/debug/mozilla/dom/plugins/base/nsNPAPIPlugin.cpp:1397
#4  0x00007fffe5a7b48e in PluginRequestProcessor::setMember(std::vector<std::string*, std::allocator<std::string*> >*) ()
   from /usr/lib64/IcedTeaPlugin.so
#5  0x00007fffe5a7eca2 in queue_processor(void*) () from /usr/lib64/IcedTeaPlugin.so
#6  0x00007ffff76b8f05 in start_thread (arg=0x7fffcbefe700) at pthread_create.c:301
#7  0x00007ffff73fb63d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → DUPLICATE
Since I don't like patching my system on my own, I made a report to opensuse on https://bugzilla.novell.com/show_bug.cgi?id=750323 - hoping they will get a fix real soon!
You need to log in before you can comment on or make changes to this bug.