888258 - crash in nsAppShell::ProcessNextNativeEvent @ dbus_threads_init_default

Status: RESOLVED WORKSFORME

(Core :: Widget: Gtk, defect)

Description

[Scoobidiver (away)]

There are a few crashes in 22.0.

Signature 	dbus_threads_init_default More Reports Search
UUID 	d499c252-ffcd-4e9e-b163-350302130627
Date Processed	2013-06-27 11:35:49.170780
Uptime	61
Last Crash	62 seconds before submission
Install Age 	346 since version was first installed.
Install Time 	2013-06-27 11:29:54
Product 	Firefox
Version 	22.0
Build ID 	20130620123127
Release Channel 	release
OS 	Linux
OS Version 	0.0.0 Linux 3.5.0-34-generic #55-Ubuntu SMP Thu Jun 6 20:18:19 UTC 2013 x86_64
Build Architecture 	amd64
Build Architecture Info 	family 6 model 23 stepping 7 | None
Crash Reason 	SIGSEGV
Crash Address 	0x4
App Notes 	
OpenGL: nouveau -- Gallium 0.4 on NV94 -- 3.0 Mesa 9.0.3 -- texture_from_pixmap
Processor Notes 	sp-processor04_phx1_mozilla_com_24870:2012; exploitability tool: ERROR: unable to analyze dump

Crashing Thread
Frame 	Module 	Signature 	Source
0 	libdbus-1.so.3.7.2 	dbus_threads_init_default 	
1 	libdbus-1.so.3.7.2 	dbus_threads_init_default 	
2 	libdbus-1.so.3.7.2 	dbus_threads_init_default 	
3 	libdbus-1.so.3.7.2 	dbus_threads_init_default 	
4 	libdbus-1.so.3.7.2 	dbus_threads_init_default 	
5 	libdbus-1.so.3.7.2 	dbus_connection_has_messages_to_send 	
6 	libdbus-1.so.3.7.2 	dbus_connection_get_dispatch_status 	
7 	libdbus-glib-1.so.2.2.2 	message_queue_prepare 	dbus-gmain.c
8 	libglib-2.0.so.0.3400.1 	g_main_context_prepare 	/build/buildd/glib2.0-2.34.1/./glib/gmain.c
9 	libglib-2.0.so.0.3400.1 	g_main_context_iterate 	/build/buildd/glib2.0-2.34.1/./glib/gmain.c
10 	libglib-2.0.so.0.3400.1 	g_main_context_iteration 	/build/buildd/glib2.0-2.34.1/./glib/gmain.c
11 	libxul.so 	nsAppShell::ProcessNextNativeEvent(bool) 	/build/buildd/firefox-22.0+build2/widget/gtk2/nsAppShell.cpp
12 	libxul.so 	nsBaseAppShell::DoProcessNextNativeEvent(bool, unsigned int) 	/build/buildd/firefox-22.0+build2/widget/xpwidgets/nsBaseAppShell.cpp
13 	libxul.so 	nsBaseAppShell::OnProcessNextEvent(nsIThreadInternal*, bool, unsigned int) 	/build/buildd/firefox-22.0+build2/widget/xpwidgets/nsBaseAppShell.cpp
14 	libxul.so 	nsThread::ProcessNextEvent(bool, bool*) 	/build/buildd/firefox-22.0+build2/xpcom/threads/nsThread.cpp
15 	libxul.so 	TimerThread::RemoveTimer(nsTimerImpl*) 	/build/buildd/firefox-22.0+build2/xpcom/threads/TimerThread.cpp
16 	libxul.so 	mozilla::Preferences::UseUserPrefFile() 	/build/buildd/firefox-22.0+build2/modules/libpref/src/Preferences.cpp
17 	libxul.so 	nsLocalFile::AppendRelativePath(nsAString_internal const&) 	/build/buildd/firefox-22.0+build2/xpcom/io/nsLocalFileUnix.cpp
18 	libxul.so 	NS_ProcessNextEvent(nsIThread*, bool) 	/build/buildd/firefox-22.0+build2/obj-x86_64-linux-gnu/xpcom/build/nsThreadUtils.cpp
19 	libxul.so 	mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) 	/build/buildd/firefox-22.0+build2/ipc/glue/MessagePump.cpp
20 	libxul.so 	tag_nsresult CallQueryInterface<nsIPrefBranch, nsIPrefBranch>(nsIPrefBranch*, nsIPrefBranch**) 	/build/buildd/firefox-22.0+build2/obj-x86_64-linux-gnu/modules/libpref/src/../../../dist/include/nsISupportsUtils.h
21 	libxul.so 	MessageLoop::Run() 	/build/buildd/firefox-22.0+build2/ipc/chromium/src/base/message_loop.cc
22 	libxul.so 	nsBaseAppShell::Run() 	/build/buildd/firefox-22.0+build2/widget/xpwidgets/nsBaseAppShell.cpp
23 	libxul.so 	nsAppStartup::Run() 	/build/buildd/firefox-22.0+build2/toolkit/components/startup/nsAppStartup.cpp
24 	libxul.so 	XREMain::XRE_mainRun() 	/build/buildd/firefox-22.0+build2/toolkit/xre/nsAppRunner.cpp
25 	libxul.so 	nsLocalFile::Release() 	/build/buildd/firefox-22.0+build2/obj-x86_64-linux-gnu/xpcom/io/../../dist/include/mozilla/mozalloc.h
26 	libxul.so 	NS_InitXPCOM2 	/build/buildd/firefox-22.0+build2/xpcom/build/../glue/nsCOMPtr.h
27 	libxul.so 	NS_TableDrivenQI(void*, QITableEntry const*, nsID const&, void**) 	/build/buildd/firefox-22.0+build2/obj-x86_64-linux-gnu/xpcom/build/nsISupportsImpl.cpp
28 	libxul.so 	nsCOMPtr_base::assign_from_qi(nsQueryInterface, nsID const&) 	/build/buildd/firefox-22.0+build2/obj-x86_64-linux-gnu/xpcom/build/nsCOMPtr.cpp
29 	libxul.so 	nsLocalFile::AppendRelativePath(nsAString_internal const&) 	/build/buildd/firefox-22.0+build2/xpcom/io/nsLocalFileUnix.cpp
30 	libxul.so 	XREMain::XRE_main(int, char**, nsXREAppData const*) 	/build/buildd/firefox-22.0+build2/toolkit/xre/nsAppRunner.cpp
31 	libxul.so 	XRE_main 	/build/buildd/firefox-22.0+build2/toolkit/xre/nsAppRunner.cpp

More reports at:
https://crash-stats.mozilla.com/report/list?product=Firefox&signature=dbus_threads_init_default

Comment 1

[Karl Tomlinson (:karlt)]

I'm suspicious of the symbols for libdbus-1.so.3.7.2 02780F9D8E5EFA00884455EB922A6BBA0 because I don't think dbus_connection_has_messages_to_send can call dbus_threads_init_default, and there are no source files reported.  I suspect dbus_threads_init_default may just be the nearest exported symbol.

Likely a duplicate of bug 849204.

Comment 2

[Scoobidiver (away)]

(In reply to Karl Tomlinson (:karlt) from comment #1)
> Likely a duplicate of bug 849204.
There are also strack traces like in bug 849204 comment 1:
Frame 	Module 	Signature 	Source
0 	libdbus-1.so.3.7.2 	dbus_threads_init_default 	
1 	libdbus-1.so.3.7.2 	dbus_threads_init_default 	
2 	libdbus-1.so.3.7.2 	dbus_threads_init_default 	
3 	libdbus-1.so.3.7.2 	dbus_threads_init_default 	
4 	libdbus-1.so.3.7.2 	dbus_threads_init_default 	
5 	libdbus-1.so.3.7.2 	dbus_threads_init_default 	
6 	libdbus-1.so.3.7.2 	dbus_threads_init_default 	
7 	libdbus-1.so.3.7.2 	dbus_threads_init_default 	
8 	libdbus-1.so.3.7.2 	dbus_connection_open 	
9 	libdbus-1.so.3.7.2 	dbus_connection_flush 	
10 	libdbus-1.so.3.7.2 	dbus_connection_send_with_reply_and_block 	
11 	libxul.so 	mozilla::nsWifiScannerDBus::SendMessage(char const*, char const*, char const*) 	/build/buildd/firefox-22.0+build2/netwerk/wifi/nsWifiScannerDBus.cpp
12 	libdbus-1.so.3.7.2 	dbus_message_iter_init 	
13 	libdbus-1.so.3.7.2 	dbus_shutdown 	
14 	libdbus-1.so.3.7.2 	dbus_message_iter_get_basic 	
15 	libxul.so 	mozilla::nsWifiScannerDBus::IdentifyAccessPoints(DBusMessage*) 	/build/buildd/firefox-22.0+build2/netwerk/wifi/nsWifiScannerDBus.cpp
16 	libdbus-1.so.3.7.2 	dbus_shutdown 	
17 	libdbus-1.so.3.7.2 	dbus_shutdown 	
18 	libxul.so 	mozilla::nsWifiScannerDBus::SendMessage(char const*, char const*, char const*) 	/build/buildd/firefox-22.0+build2/netwerk/wifi/nsWifiScannerDBus.cpp
19 	libdbus-1.so.3.7.2 	dbus_pending_call_unref

A comment says: "So, this now happens as soon as I share my location with google maps. If someone would like, I can probably run a debugger to see what is going on."

Comment 3

[Wayne Mery (:wsmwk)]

(In reply to Karl Tomlinson (back Oct 8 ni?:karlt) from comment #1)
> I'm suspicious of the symbols for libdbus-1.so.3.7.2
> 02780F9D8E5EFA00884455EB922A6BBA0 because I don't think
> dbus_connection_has_messages_to_send can call dbus_threads_init_default, and
> there are no source files reported.  I suspect dbus_threads_init_default may
> just be the nearest exported symbol.
> 
> Likely a duplicate of bug 849204.

Was fixed in firefox 26, and there are currently no crashes with this signature