[GUTSY] firefox crashed [@nsTextFrame::Paint] [@nsContainerFrame::PaintChild] [@nsContainerFrame::PaintChildren]

Bug #134861 reported by web.jdm
2
Affects Status Importance Assigned to Milestone
firefox (Ubuntu)
Confirmed
High
Mozilla Bugs

Bug Description

Binary package hint: firefox

... firefox crash in "special" website

I'am on Gutsy
Firefox crash at the end of the page http://live.gnome.org/GettingTraces/Details#obtain-a-stacktrace

debug info:
###
joel@joel-gutsy:~$ gdb $(which firefox) 8477
GNU gdb 6.6-debian
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i486-linux-gnu"...
"/usr/bin/firefox": not in executable format: File format not recognized
Attaching to process 8477
Reading symbols from /bin/dash...(no debugging symbols found)...done.
Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1".
Reading symbols from /lib/tls/i686/cmov/libc.so.6...(no debugging symbols found)...done.
Loaded symbols for /lib/tls/i686/cmov/libc.so.6
Reading symbols from /lib/ld-linux.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/ld-linux.so.2
Failed to read a valid object file image from memory.
0xffffe410 in ??
    ()
(gdb) cont
Continuing.

Program exited with code 0213.
###

Regards

Extracted from symbolized stacktrace:
(file: http://launchpadlibrarian.net/8999852/gdb-firefox.log)
...
#0 nsTextFrame::Paint (this=0x963a168, aPresContext=0x9092728,
#1 nsContainerFrame::PaintChild (this=0x963a134,
#2 nsContainerFrame::PaintChildren (this=0x963a134,
#3 nsHTMLContainerFrame::PaintDecorationsAndChildren (
#4 nsInlineFrame::Paint (this=0x963a134,
#5 nsContainerFrame::PaintChild (this=0x963a100,
#6 nsContainerFrame::PaintChildren (this=0x963a100,
#7 nsHTMLContainerFrame::PaintDecorationsAndChildren (
#8 nsInlineFrame::Paint (this=0x963a100,
#9 nsContainerFrame::PaintChild (this=0x91dba60,
...

Revision history for this message
web.jdm (web.jdm-deactivatedaccount) wrote :

http://live.gnome.org/GettingTraces/Details#obtain-a-stacktrace is a example of firefox crash on my computer.
firefox crash on many website.

Revision history for this message
Saša Bodiroža (jazzva) wrote :

Thank you joeldmhs for submitting this report.

Could you please try to obtain a backtrace by following the instructions
on [1], or upload the crash report that probably was generated during
the crash and that should be located at /var/crash/ to [2].

Please indicate which extensions/plugins do you have enabled; and if
this crash is reproducible describe the steps that lead to it (it is
very important for us to have a test case for each crash).

This will greatly aid us in tracking down your problem.

Thanks in advance.

[1] https://wiki.ubuntu.com/MozillaTeam/Bugs
[2] https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/134861/+addcomment

Changed in firefox:
status: New → Incomplete
Revision history for this message
web.jdm (web.jdm-deactivatedaccount) wrote :

[1]

Revision history for this message
web.jdm (web.jdm-deactivatedaccount) wrote :

I have extensions/plugins but the crash was reproducible without extensions/plugins

Regards

description: updated
Changed in firefox:
assignee: nobody → mozilla-bugs
importance: Undecided → High
Revision history for this message
Hilario J. Montoliu (hjmf) (hmontoliu) wrote : Re: firefox crashed [@nsTextFrame::Paint] [@nsContainerFrame::PaintChild] [@nsContainerFrame::PaintChildren]

I'm not able to reproduce the crash with that url. Can you give us another examples?

Thanks.

Revision history for this message
web.jdm (web.jdm-deactivatedaccount) wrote :
Revision history for this message
Hilario J. Montoliu (hjmf) (hmontoliu) wrote :

Both pages are OK for me. Adding mt-needtester tag to see if someone is able to confirm this report.

Revision history for this message
xtknight (xt-knight) wrote :

I am not able to reproduce this bug on Gutsy AMD64.

Revision history for this message
Hilario J. Montoliu (hjmf) (hmontoliu) wrote :

hmm, if I leave the page https://www.creditmutuel.fr/cmne/fr/ open for around 10 minutes firefox ends crashing, but looks it is a different problem:

...
#0 __kernel_vsyscall ()
#1 send () from /lib/tls/i686/cmov/libpthread.so.0
#2 pt_Send (fd=0x8587e08, buf=0x85c1720, amount=23, flags=0, timeout=0) at ptio.c:1903
#3 ssl_DefSend (ss=0x859ba28, buf=0x85c1720 "\025\003\001", len=23, flags=0) at ssldef.c:128
#4 ssl3_SendRecord (ss=0x859ba28, type=<value optimized out>, pIn=0xb70be1ba "\001", nIn=2, flags=0)
#5 SSL3_SendAlert (ss=0x859ba28, level=alert_warning, desc=<value optimized out>) at ssl3con.c:2262
#6 ssl_SecureClose (ss=0x859ba28) at sslsecur.c:958
#7 ssl_Close (fd=0xb0585bf0) at sslsock.c:1372
#8 nsNSSSocketInfo::CloseSocketAndDestroy (this=0x85c0c38) at nsNSSIOLayer.cpp:1024
#9 nsSSLThread::requestClose (si=0x85c0c38) at nsSSLThread.cpp:425
#10 nsSSLIOLayerClose (fd=0xb0585bf0) at nsNSSIOLayer.cpp:1009
#11 PR_Close (fd=0xb0585bf0) at priometh.c:136
#12 nsSocketTransport::ReleaseFD_Locked (this=0x839a800, fd=0xb0585bf0) at nsSocketTransport2.cpp:1347
#13 nsSocketTransport::OnSocketDetached (this=0x839a800, fd=0xb0585bf0) at nsSocketTransport2.cpp:1569
#14 nsSocketTransportService::DetachSocket (this=0x80d4ca0, sock=0x80d4f64) at nsSocketTransportService2.cpp:193
#15 nsSocketTransportService::Run (this=0x80d4ca0) at nsSocketTransportService2.cpp:567
#16 nsThread::Main (arg=0x80c8ad0) at nsThread.cpp:118
#17 _pt_root (arg=0x80c8b50) at ptthread.c:220
#18 start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#19 clone () from /lib/tls/i686/cmov/libc.so.6
#0 __kernel_vsyscall ()

(in fact this crash seems to be the one at bug #108929)
...

Revision history for this message
Hilario J. Montoliu (hjmf) (hmontoliu) wrote :

Please joeldmhs can you confirm that all the crashes you get have the same stacktrace (the one in your gdb-firefox.log).

Thank you

Revision history for this message
web.jdm (web.jdm-deactivatedaccount) wrote :
Revision history for this message
web.jdm (web.jdm-deactivatedaccount) wrote :

I post the crash log of the page https://www.dellbatteryprogram.com/

Revision history for this message
web.jdm (web.jdm-deactivatedaccount) wrote :

I post the crash log of the page https://www.creditmutuel.fr/cmne/fr/

Revision history for this message
web.jdm (web.jdm-deactivatedaccount) wrote :

Info:
With the (Tribe5 i386) Live-CD Firefox don't crash but gparted crash too (http://bugzilla.gnome.org/show_bug.cgi?id=470387) . Thus I take a alternate install.
joel@joel-gutsy:/media/hda3$ md5sum --check ./MD5SUM
gutsy-alternate-i386.ISO: OK

I hope that problems will be solved.
Regards

Revision history for this message
Hilario J. Montoliu (hjmf) (hmontoliu) wrote :

Thanks joeldmhs

Revision history for this message
web.jdm (web.jdm-deactivatedaccount) wrote :

I take a desktop install and firefox have no crash. There are problems on alternate tribe5 install with firefox

Changed in firefox:
status: Incomplete → Confirmed
Revision history for this message
Hilario J. Montoliu (hjmf) (hmontoliu) wrote : Re: MASTER [GUTSY] firefox crashed [@nsTextFrame::Paint] [@nsContainerFrame::PaintChild] [@nsContainerFrame::PaintChildren]

Moving to new MASTER as seems to be more complete: Bug #124424

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.