MASTER firefox crashed [@ nsGlobalWindow::GetScrollInfo] [@ nsGlobalWindow::ScrollTo]

[Greg Conquest]

Binary package hint: firefox

fstab edited, but no effective changes, I think, No updates or anything else were applied between boots.

ProblemType: Crash
Architecture: i386
Date: Sun Apr 22 10:46:13 2007
DistroRelease: Ubuntu 7.04
ExecutablePath: /usr/lib/firefox/firefox-bin
Package: firefox 2.0.0.3+1-0ubuntu2
PackageArchitecture: i386
ProcCmdline: /usr/lib/firefox/firefox-bin
ProcCwd: /home/gregconquest
ProcEnviron:
 SHELL=/bin/bash
 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
 LANG=en_US.UTF-8
 LANGUAGE=en_US:en
Signal: 11
SourcePackage: firefox
StacktraceTop:
 __kernel_vsyscall ()
 raise () from /lib/tls/i686/cmov/libpthread.so.0
 ?? ()
 ?? ()
 ?? ()
Uname: Linux DIYPCkubuntu 2.6.20-15-generic #2 SMP Sun Apr 15 07:36:31 UTC 2007 i686 GNU/Linux
UserGroups: adm admin audio cdrom dialout dip floppy lpadmin netdev plugdev powerdev scanner video

[Adam Guthrie (ispiked)]

Created attachment 236656
stack trace from a 1.8 build

The stack is a little different in a debug build. It looks like we're failing to get the view manager from the pres shell.

[Roc-ocallahan (roc-ocallahan)]

Branch only? It seems to work for me on trunk.

Care to find the trunk bug that fixed this? :-)

[Martijn-martijn (martijn-martijn)]

Well, the steps to reproduce don't work on trunk, but I remember I did manage to crash somehow with this same stacktrace on trunk, in a more or less related way.

[Greg Conquest (gregconquest)]

Binary package hint: firefox

fstab edited, but no effective changes, I think, No updates or anything else were applied between boots.

ProblemType: Crash
Architecture: i386
Date: Sun Apr 22 10:46:13 2007
DistroRelease: Ubuntu 7.04
ExecutablePath: /usr/lib/firefox/firefox-bin
Package: firefox 2.0.0.3+1-0ubuntu2
PackageArchitecture: i386
ProcCmdline: /usr/lib/firefox/firefox-bin
ProcCwd: /home/gregconquest
ProcEnviron:
 SHELL=/bin/bash
 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
 LANG=en_US.UTF-8
 LANGUAGE=en_US:en
Signal: 11
SourcePackage: firefox
StacktraceTop:
 __kernel_vsyscall ()
 raise () from /lib/tls/i686/cmov/libpthread.so.0
 ?? ()
 ?? ()
 ?? ()
Uname: Linux DIYPCkubuntu 2.6.20-15-generic #2 SMP Sun Apr 15 07:36:31 UTC 2007 i686 GNU/Linux
UserGroups: adm admin audio cdrom dialout dip floppy lpadmin netdev plugdev powerdev scanner video

[Hilario J. Montoliu (hjmf) (hmontoliu)]

Thank you gregconquest for your report.

In case you find out a way to reproduce, please provide us a test case.

[Hilario J. Montoliu (hjmf) (hmontoliu)]

Retrace done.

Extract from retraced stacktrace:
...
#3 <signal handler called>
#4 nsGlobalWindow::GetScrollInfo (this=0x9d493a0,
#5 nsGlobalWindow::ScrollTo (this=0x9d493a0, aXScroll=0,
#6 XPTC_InvokeByIndex () at xptcinvoke_gcc_x86_unix.cpp:50
#7 XPCWrappedNative::CallMethod (ccx=@0xbfe08c20,
#8 XPC_WN_CallMethod (cx=0x8811800, obj=0x9d41be0, argc=2,
#9 js_Invoke (cx=0x8811800, argc=2, flags=2) at jsinterp.c:1396
#10 js_InternalInvoke (cx=0x8811800, obj=0x9d41be0,
#11 JS_CallFunctionValue (cx=0x8811800, obj=0x9d41be0,
#12 XPC_NW_FunctionWrapper (cx=0x8811800, obj=0xaee843b0,
...

Tagging as mt-confirm for further processing

[Hilario J. Montoliu (hjmf) (hmontoliu)]

Confirmed. Upstream's Bug '351247' – crash involving undoing close tab with session restore [@ nsGlobalWindow::GetScrollInfo] https://bugzilla.mozilla.org/show_bug.cgi?id=351247

[Alexander Sack (asac)]

this wont be fixed in ffox2 anymore and according to upstream bug this doesn't exist in firefox 3.

[Martijn-martijn (martijn-martijn)]

Marking worksforme, 1.8 branch isn't maintained anymore and this bug was hard to reproduce anyway.