Closed Bug 763185 Opened 12 years ago Closed 12 years ago

FF13 crashes when mouse cursor leaves blockable (AdBlock plus) Element on OpenSuse

Categories

(Firefox Build System :: General, defect)

Product:
Firefox Build System
Component:
General
Version:
13 Branch
Platform:
x86_64
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
RESOLVED WORKSFORME

People

(Reporter: thomas, Unassigned)

Details

(Keywords: crash, regression)

Crash Data

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0
Build ID: 2012060100

Steps to reproduce:

I hovered an element blockable by the AdBlock plus Add-on with the mouse cursor, then left this element. See https://crash-stats.mozilla.com/report/index/39a50e28-4e4e-41e6-bcfd-b302b2120609 for the crash details. No crash when not using the AdBlock plus Add-on


Actual results:

Browser crash upon MouseOut.


Expected results:

Undisplaying of the 'Block' tab on the upper right of the element
Sorry, wrong crash report. Here's the correct one: https://crash-stats.mozilla.com/report/index/bp-130eb4ce-b2d2-4dbd-845a-91a132120609
Crash only happens after update from FF12 to FF13. FF12 (also opensuse 12.1 package) was not affected.
Severity: normal → critical
Crash Signature: [@ libmozjs185.so.1.0.0@0xa6978 ]
Keywords: crash
It's #2 top crasher in 13.0 on Linux but stacks are various, so yours is probably not the only cause.

(In reply to thomas from comment #3)
> This does not happen with the official mozilla version
It's consistent with missing debug symbols in the stack.

Can you attach the official and OpenSuse build configurations using about:buildconfig?
Can you provide a valid stack trace (see https://developer.mozilla.org/en/How_to_get_a_stacktrace_for_a_bug_report#Linux)?
I've installed a huge load of debug symbols, but I just couldn't get that #0 to show anything useful. If you have any hints as to which debug symbols could be missing, just tell me and I'll try to install the respective package(s).


about:buildconfig
Build Machine

build31
Source

Built from http://hg.mozilla.org/releases/mozilla-release/rev/2b643ea8edf9
Build platform
target
x86_64-unknown-linux-gnu
Build tools
Compiler 	Version 	Compiler flags
gcc 	gcc version 4.6.2 (SUSE Linux) 	-pedantic -Wall -W -Wno-unused -Wpointer-arith -Wdeclaration-after-statement -Wcast-align -W -Wno-long-long -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -g -Os -fno-strict-aliasing -fno-strict-aliasing -ffunction-sections -fdata-sections -pthread -pipe -DNDEBUG -DTRIMMED -g -Os -freorder-blocks -fomit-frame-pointer
c++ 	gcc version 4.6.2 (SUSE Linux) 	-fno-rtti -pedantic -Wall -Wpointer-arith -Woverloaded-virtual -Wsynth -Wno-ctor-dtor-privacy -Wno-non-virtual-dtor -Wcast-align -Wno-invalid-offsetof -Wno-variadic-macros -Werror=return-type -Wno-long-long -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -g -Os -fno-strict-aliasing -fno-exceptions -fno-strict-aliasing -std=gnu++0x -ffunction-sections -fdata-sections -pthread -pipe -DNDEBUG -DTRIMMED -g -Os -freorder-blocks -fomit-frame-pointer
Configure arguments

--enable-application=browser --prefix=/usr --libdir=/usr/lib64 --sysconfdir=/etc --mandir=/usr/share/man --includedir=/usr/include --with-system-nspr --with-system-nss --with-l10n-base=/home/abuild/rpmbuild/BUILD/l10n --with-system-zlib --disable-installer --disable-updater --disable-tests --disable-debug --enable-startup-notification --enable-update-channel=release --disable-gnomevfs --enable-gio --enable-official-branding --enable-libproxy

Program received signal SIGSEGV, Segmentation fault.
0x00007fffd50d6670 in ?? ()
(gdb) backtrace
#0  0x00007fffd50d6670 in ?? ()
#1  0x00007fffcc26a979 in getProperty (receiver=0x7fffd5243b80, vp=0x7fffffff8a60, 
    id=<optimized out>, cx=0x7fffd53c1400, this=0x7fffd5243b80) at jsobj.h:1229
#2  getProperty (vp=0x7fffffff8a60, id=<optimized out>, cx=0x7fffd53c1400, this=0x7fffd5243b80)
    at jsobj.h:1233
#3  fun_hasInstance (cx=0x7fffd53c1400, obj=0x7fffd5243b80, v=0x7fffffff8cd0, bp=
    0x7fffffff8b00) at jsfun.cpp:1937
#4  0x00007ffff5a5cd28 in js::LooselyEqual (cx=0x7fffd53c1400, lval=<optimized out>, 
    rval=<optimized out>, result=0x7fffffff8e20)
    at /usr/src/debug/mozilla/js/src/jsinterp.cpp:757
#5  0x00007ffff5a63dd8 in js::Interpret (cx=0x7fffd53c1400, entryFrame=0x7fffe38ff0a8, 
    interpMode=js::JSINTERP_NORMAL) at /usr/src/debug/mozilla/js/src/jsinterp.cpp:2236
#6  0x00007ffff5a6be76 in js::InvokeKernel (cx=0x7fffd53c1400, args=..., 
    construct=<optimized out>) at /usr/src/debug/mozilla/js/src/jsinterp.cpp:529
#7  0x00007ffff5a6c406 in Invoke (construct=js::NO_CONSTRUCT, args=..., cx=0x7fffd53c1400)
    at /usr/src/debug/mozilla/js/src/jsinterp.h:172
#8  js::Invoke (cx=0x7fffd53c1400, thisv=..., fval=..., argc=1, argv=<optimized out>, rval=
    0x7fffffff94a8) at /usr/src/debug/mozilla/js/src/jsinterp.cpp:561
#9  0x00007ffff59e7c5c in JS_CallFunctionValue (cx=<optimized out>, obj=<optimized out>, fval=
    ..., argc=<optimized out>, argv=<optimized out>, rval=<optimized out>)
    at /usr/src/debug/mozilla/js/src/jsapi.cpp:5432
#10 0x00007ffff548b20f in nsXPCWrappedJSClass::CallMethod (this=0x7fffdae4c080, wrapper=
    0x7fffe1e33cb8, methodIndex=3, info=0x7fffe6607618, nativeParams=0x7fffffff9758)
    at /usr/src/debug/mozilla/js/xpconnect/src/XPCWrappedJSClass.cpp:1518
#11 0x00007ffff5486661 in nsXPCWrappedJS::CallMethod (this=0x7fffd1731180, methodIndex=3, info=
---Type <return> to continue, or q <return> to quit---
    0x7fffe6607618, params=<optimized out>)
    at /usr/src/debug/mozilla/js/xpconnect/src/XPCWrappedJS.cpp:617
#12 0x00007ffff57eca95 in PrepareAndDispatch (self=0x7fffcf4e07e0, 
    methodIndex=<optimized out>, args=<optimized out>, gpregs=0x7fffffff9830, fpregs=
    0x7fffffff9860)
    at /usr/src/debug/mozilla/xpcom/reflect/xptcall/src/md/unix/xptcstubs_x86_64_linux.cpp:153
#13 0x00007ffff57ebf8b in SharedStub () from /usr/lib64/firefox/libxul.so
#14 0x00007ffff515359c in nsEventListenerManager::HandleEventInternal (this=0x7fffd1731200, 
    aPresContext=0x7fffcfcef800, aEvent=0x7fffffff9b30, aDOMEvent=0x7fffffff9a88, 
    aCurrentTarget=0x7fffd0dedd10, aFlags=6, aEventStatus=0x7fffffff9a90, aPusher=
    0x7fffffff9aa0) at /usr/src/debug/mozilla/content/events/src/nsEventListenerManager.cpp:800
#15 0x00007ffff5167adb in HandleEvent (aEventStatus=0x7fffffff9a90, 
    aCurrentTarget=<optimized out>, aDOMEvent=0x7fffffff9a88, aEvent=<optimized out>, 
    aPresContext=<optimized out>, this=<optimized out>, aPusher=0x7fffffff9aa0, aFlags=6)
    at /usr/src/debug/mozilla/content/events/src/nsEventListenerManager.h:169
#16 HandleEvent (aPusher=0x7fffffff9aa0, aFlags=6, aVisitor=..., this=0x7fffdaea4268, 
    aMayHaveNewListenerManagers=<optimized out>)
    at /usr/src/debug/mozilla/content/events/src/nsEventDispatcher.cpp:216
#17 nsEventTargetChainItem::HandleEvent (this=0x7fffdaea4268, aVisitor=..., aFlags=6, 
    aMayHaveNewListenerManagers=false, aPusher=0x7fffffff9aa0)
    at /usr/src/debug/mozilla/content/events/src/nsEventDispatcher.cpp:192
#18 0x00007ffff5167da8 in nsEventTargetChainItem::HandleEventTargetChain (this=0x7fffdaea41c0, 

    aVisitor=..., aFlags=6, aCallback=0x7fffffff9bb8, aMayHaveNewListenerManagers=false, 
    aPusher=0x7fffffff9aa0)
    at /usr/src/debug/mozilla/content/events/src/nsEventDispatcher.cpp:348
---Type <return> to continue, or q <return> to quit---
#19 0x00007ffff51685e9 in nsEventDispatcher::Dispatch (aTarget=<optimized out>, aPresContext=

    0x7fffcfcef800, aEvent=0x7fffffff9b30, aDOMEvent=0x0, aEventStatus=0x7fffffff9bcc, 
    aCallback=0x7fffffff9bb8, aTargets=0x0)
    at /usr/src/debug/mozilla/content/events/src/nsEventDispatcher.cpp:682

#20 0x00007ffff5157ef8 in nsEventStateManager::DispatchMouseEvent (this=0x7fffcf537260, 
    aEvent=<optimized out>, aMessage=<optimized out>, aTargetContent=0x7fffd0dedd10, 
    aRelatedContent=<optimized out>)
    at /usr/src/debug/mozilla/content/events/src/nsEventStateManager.cpp:3805
#21 0x00007ffff515a7e5 in nsEventStateManager::NotifyMouseOut (this=0x7fffcf537260, aEvent=
    0x7fffffffa130, aMovingInto=0x7fffcf6f9a80)
    at /usr/src/debug/mozilla/content/events/src/nsEventStateManager.cpp:3916
#22 0x00007ffff515a8ec in nsEventStateManager::NotifyMouseOver (this=0x7fffcf537260, aEvent=
    0x7fffffffa130, aContent=0x7fffcf6f9a80)
    at /usr/src/debug/mozilla/content/events/src/nsEventStateManager.cpp:3964
#23 0x00007ffff515a9f4 in nsEventStateManager::GenerateMouseEnterExit (this=0x7fffcf537260, 
    aEvent=0x7fffffffa130)
    at /usr/src/debug/mozilla/content/events/src/nsEventStateManager.cpp:4003
#24 0x00007ffff515c116 in nsEventStateManager::PreHandleEvent (this=0x7fffcf537260, 
    aPresContext=0x7fffcfcef800, aEvent=0x7fffffffa130, aTargetFrame=0x7fffd16f9120, aStatus=
    0x7fffffffa0dc) at /usr/src/debug/mozilla/content/events/src/nsEventStateManager.cpp:1148
#25 0x00007ffff4f70e1b in PresShell::HandleEventInternal (this=0x7ffff6d5de20, aEvent=
    0x7fffffffa130, aStatus=0x7fffffffa0dc)
    at /usr/src/debug/mozilla/layout/base/nsPresShell.cpp:6542
#26 0x00007ffff4f7430c in PresShell::HandlePositionedEvent (this=0x7ffff6d5de20, 
    aTargetFrame=<optimized out>, aEvent=0x7fffffffa130, aEventStatus=0x7fffffffa0dc)
---Type <return> to continue, or q <return> to quit---
    at /usr/src/debug/mozilla/layout/base/nsPresShell.cpp:6230
#27 0x00007ffff4f74cad in PresShell::HandleEvent (this=0x7ffff6d59500, aFrame=<optimized out>, 
    aEvent=0x7fffffffa130, aDontRetargetEvents=<optimized out>, aEventStatus=0x7fffffffa0dc)
    at /usr/src/debug/mozilla/layout/base/nsPresShell.cpp:6057
#28 0x00007ffff523cdf6 in nsViewManager::DispatchEvent (this=<optimized out>, aEvent=
    0x7fffffffa130, aView=<optimized out>, aStatus=0x7fffffffa0dc)
    at /usr/src/debug/mozilla/view/src/nsViewManager.cpp:908
#29 0x00007ffff523aebf in HandleEvent (aEvent=0x7fffffffa130)
    at /usr/src/debug/mozilla/view/src/nsView.cpp:158
#30 0x00007ffff56872de in nsWindow::DispatchEvent (this=<optimized out>, 
    aEvent=<optimized out>, aStatus=@0x7fffffffa1c4)
    at /usr/src/debug/mozilla/widget/gtk2/nsWindow.cpp:524
#31 0x00007ffff568b4f8 in nsWindow::OnMotionNotifyEvent (this=0x7fffdaf06500, 
    aWidget=<optimized out>, aEvent=<optimized out>)
    at /usr/src/debug/mozilla/widget/gtk2/nsWindow.cpp:2593
#32 0x00007ffff568b583 in motion_notify_event_cb (widget=0x7fffdbd89880, event=0x7fffd7aa1940)
    at /usr/src/debug/mozilla/widget/gtk2/nsWindow.cpp:5548
#33 0x00007ffff08c8958 in ?? () from /usr/lib64/libgtk-x11-2.0.so.0
#34 0x00007ffff2362a14 in g_closure_invoke () from /usr/lib64/libgobject-2.0.so.0
#35 0x00007ffff237499a in ?? () from /usr/lib64/libgobject-2.0.so.0
#36 0x00007ffff237ddf3 in g_signal_emit_valist () from /usr/lib64/libgobject-2.0.so.0
#37 0x00007ffff237e1c2 in g_signal_emit () from /usr/lib64/libgobject-2.0.so.0
#38 0x00007ffff09e1911 in ?? () from /usr/lib64/libgtk-x11-2.0.so.0
#39 0x00007ffff08c6b13 in gtk_propagate_event () from /usr/lib64/libgtk-x11-2.0.so.0
#40 0x00007ffff08c6e73 in gtk_main_do_event () from /usr/lib64/libgtk-x11-2.0.so.0
---Type <return> to continue, or q <return> to quit---
#41 0x00007fffeffcb64c in ?? () from /usr/lib64/libgdk-x11-2.0.so.0
#42 0x00007ffff1c9558d in g_main_context_dispatch () from /usr/lib64/libglib-2.0.so.0
#43 0x00007ffff1c95d88 in ?? () from /usr/lib64/libglib-2.0.so.0
#44 0x00007ffff1c95f59 in g_main_context_iteration () from /usr/lib64/libglib-2.0.so.0
#45 0x00007ffff568fe7a in nsAppShell::ProcessNextNativeEvent (this=<optimized out>, 
    mayWait=<optimized out>) at /usr/src/debug/mozilla/widget/gtk2/nsAppShell.cpp:162
#46 0x00007ffff56a5ab8 in nsBaseAppShell::DoProcessNextNativeEvent (this=0x7fffe670f160, 
    mayWait=<optimized out>) at /usr/src/debug/mozilla/widget/xpwidgets/nsBaseAppShell.cpp:171
#47 0x00007ffff56a5c84 in nsBaseAppShell::OnProcessNextEvent (this=0x7fffe670f160, thr=
    0x7ffff6d1af50, mayWait=<optimized out>, recursionDepth=<optimized out>)
    at /usr/src/debug/mozilla/widget/xpwidgets/nsBaseAppShell.cpp:324
#48 0x00007ffff57dde94 in nsThread::ProcessNextEvent (this=0x7ffff6d1af50, mayWait=false, 
    result=0x7fffffffaacf) at /usr/src/debug/mozilla/xpcom/threads/nsThread.cpp:619
#49 0x00007ffff57b2ecf in NS_ProcessNextEvent_P (thread=<optimized out>, mayWait=false)
    at /usr/src/debug/obj/xpcom/build/nsThreadUtils.cpp:245
#50 0x00007ffff5745644 in mozilla::ipc::MessagePump::Run (this=0x7ffff6dff300, aDelegate=
    0x7ffff6deb240) at /usr/src/debug/mozilla/ipc/glue/MessagePump.cpp:110
#51 0x00007ffff57fc911 in RunHandler (this=0x7ffff6deb240)
    at /usr/src/debug/mozilla/ipc/chromium/src/base/message_loop.cc:201
#52 MessageLoop::Run (this=0x7ffff6deb240)
    at /usr/src/debug/mozilla/ipc/chromium/src/base/message_loop.cc:175
#53 0x00007ffff56a57cc in nsBaseAppShell::Run (this=0x7fffe670f160)
    at /usr/src/debug/mozilla/widget/xpwidgets/nsBaseAppShell.cpp:189
#54 0x00007ffff5579040 in nsAppStartup::Run (this=0x7fffe6705650)
    at /usr/src/debug/mozilla/toolkit/components/startup/nsAppStartup.cpp:295
---Type <return> to continue, or q <return> to quit---
#55 0x00007ffff4dfb435 in XRE_main (argc=<optimized out>, argv=<optimized out>, 
    aAppData=<optimized out>) at /usr/src/debug/mozilla/toolkit/xre/nsAppRunner.cpp:3703
#56 0x00000000004020d7 in do_main (argv=0x7fffffffd5f8, argc=1)
    at /usr/src/debug/mozilla/browser/app/nsBrowserApp.cpp:190
#57 main (argc=<optimized out>, argv=<optimized out>)
    at /usr/src/debug/mozilla/browser/app/nsBrowserApp.cpp:277
(gdb)
Status: UNCONFIRMED → NEW
Component: Untriaged → Build Config
Ever confirmed: true
Keywords: regression
QA Contact: untriaged → build.config
Summary: FF13 crashes when mouse cursor leaves blockable (AdBlock plus) Element → FF13 crashes when mouse cursor leaves blockable (AdBlock plus) Element on OpenSuse
This seems to be fixed in 13.0.1 (opensuse 12.1; Package version number is 13.0.1-1.1).
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
Component: Build Config → General
Product: Firefox → Firefox Build System
You need to log in before you can comment on or make changes to this bug.