794718 - SIGSEGV in libglobalmenu.so

Status: RESOLVED INVALID

(Firefox :: Shell Integration, defect)

Description

[edwardhowl]

User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.4 (KHTML, like Gecko) Chrome/22.0.1229.79 Safari/537.4

Steps to reproduce:

Updated Firefox 9/26/12. Open Firefox (15.0.1). Click another application in Ubuntu dock. 


Actual results:

Null pointer deference cause a crash.

Program received signal SIGSEGV, Segmentation fault.
0x00007fffdbff4e50 in ?? ()
   from /usr/lib/firefox/extensions/[e-mail]/components/libglobalmenu.so
(gdb) x/20i 0x00007fffdbff4e50
=> 0x7fffdbff4e50:	mov    rax,QWORD PTR [rdi]
   0x7fffdbff4e53:	movzx  r9d,r8b
   0x7fffdbff4e57:	mov    r8,rcx
   0x7fffdbff4e5a:	xor    ecx,ecx
   0x7fffdbff4e5c:	mov    rax,QWORD PTR [rax+0x5d8]
   0x7fffdbff4e63:	jmp    rax
   0x7fffdbff4e65:	nop
   0x7fffdbff4e66:	push   rbx
   0x7fffdbff4e67:	mov    ebx,DWORD PTR [rdi+0x8]
   0x7fffdbff4e6a:	dec    ebx
   0x7fffdbff4e6c:	test   ebx,ebx
   0x7fffdbff4e6e:	mov    DWORD PTR [rdi+0x8],ebx
   0x7fffdbff4e71:	jne    0x7fffdbff4e80
   0x7fffdbff4e73:	mov    rax,QWORD PTR [rdi]
   0x7fffdbff4e76:	mov    DWORD PTR [rdi+0x8],0x1
   0x7fffdbff4e7d:	call   QWORD PTR [rax+0x10]
   0x7fffdbff4e80:	mov    eax,ebx
   0x7fffdbff4e82:	pop    rbx
   0x7fffdbff4e83:	ret    
   0x7fffdbff4e84:	push   r12
(gdb) info reg
rax            0x0	0
rbx            0x7fffc6e3bca0	140736530201760
rcx            0x7fffffffb2d8	140737488335576
rdx            0x7fffdbca1280	140736880841344
rsi            0x0	0
rdi            0x0	0
rbp            0x7fffc6e3bca0	0x7fffc6e3bca0
rsp            0x7fffffffb2a8	0x7fffffffb2a8
r8             0x0	0
r9             0x7fffc0a4aa28	140736425404968
r10            0x7fffc0a4aa28	140736425404968
r11            0x7fffc0c291f8	140736427364856
r12            0x7fffc6e41080	140736530223232
r13            0x7fffc6e3bd00	140736530201856
r14            0x7fffffffb530	140737488336176
r15            0x7fffffffb4c0	140737488336064
rip            0x7fffdbff4e50	0x7fffdbff4e50
eflags         0x10246	[ PF ZF IF RF ]
cs             0x33	51
ss             0x2b	43
ds             0x0	0
es             0x0	0
fs             0x0	0
gs             0x0	0





Expected results:

New application should have been brought to the foreground.

Comment 1

[edwardhowl]

Ubuntu 12.04

Comment 2

[edwardhowl]

Rebooted and it does not crash now. Cheers.

Comment 3

[edwardhowl]

Reopening since it has started happening again. Null pointer dereference in libglobalmenu.so, appears to be same offset as before.

(gdb) x/10i 0x00007fffdbff4e50
=> 0x7fffdbff4e50:	mov    rax,QWORD PTR [rdi]
...
(gdb) info reg
...
rdi            0x0	0

Comment 4

[Mark Banner (:standard8)]

extensions/[e-mail]/components/libglobalmenu.so is a extension file from legacy extensions which aren't supported now.