Firefox 2 and 3 crash when opening a file dialog

[uli]

Binary package hint: firefox-3.0

Firefox 3.0 crashes when trying to open a file dialog
Firefox 2 also seems to have this bug.

How to reproduce:

> sudo adduser testuster
> ssh -X testuser@localhost
> firefox
Click on "file" --> open file or save as
firefox crashes with sigsegv.

Here the output of

gdb /usr/lib/firefox-3.0/firefox
GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu"...
(no debugging symbols found)
(gdb) run
Starting program: /usr/lib/firefox-3.0/firefox
(no debugging symbols found)
(no debugging symbols found)
[....]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x455a6950 (LWP 26965)]
0x0000000000000000 in ?? ()
(gdb) bt
#0 0x0000000000000000 in ?? ()
#1 0x00007f09ad55ae66 in ?? () from /usr/lib/libgio-2.0.so.0
#2 0x00007f09ad56e1bf in ?? () from /usr/lib/libgio-2.0.so.0
#3 0x00007f09ad56842e in ?? () from /usr/lib/libgio-2.0.so.0
#4 0x00007f09b3128bf7 in ?? () from /usr/lib/libglib-2.0.so.0
#5 0x00007f09b3127054 in ?? () from /usr/lib/libglib-2.0.so.0
#6 0x00007f09b7feb3f7 in start_thread () from /lib/libpthread.so.0
#7 0x00007f09b73bcb2d in clone () from /lib/libc.so.6
#8 0x0000000000000000 in ?? ()

Here's the output of firefox-2 -g:
/usr/lib/firefox/run-mozilla.sh -g /usr/lib/firefox/firefox-2-bin
MOZILLA_FIVE_HOME=/usr/lib/firefox
  LD_LIBRARY_PATH=/usr/lib/firefox:/usr/lib/firefox/plugins:/usr/lib/mre/mre
DISPLAY=localhost:10.0
DYLD_LIBRARY_PATH=/usr/lib/firefox:/usr/lib/mre/mre
     LIBRARY_PATH=/usr/lib/firefox:/usr/lib/firefox/components:/usr/lib/mre/mre
       SHLIB_PATH=/usr/lib/firefox:/usr/lib/mre/mre
          LIBPATH=/usr/lib/firefox:/usr/lib/mre/mre
       ADDON_PATH=/usr/lib/firefox
      MOZ_PROGRAM=/usr/lib/firefox/firefox-2-bin
      MOZ_TOOLKIT=
        moz_debug=1
     moz_debugger=
/usr/bin/gdb /usr/lib/firefox/firefox-2-bin -x /tmp/mozargs.Q25784
GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu"...
(no debugging symbols found)
(gdb) run
Starting program: /usr/lib/firefox/firefox-2-bin
(no debugging symbols found)
(no debugging symbols found)
[...]
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x44dfd950 (LWP 25831)]
0x0000000000000000 in ?? ()
(gdb) bt
#0 0x0000000000000000 in ?? ()
#1 0x00007f0e2c92de66 in ?? () from /usr/lib/libgio-2.0.so.0
#2 0x00007f0e2c9411bf in ?? () from /usr/lib/libgio-2.0.so.0
#3 0x00007f0e2c93b42e in ?? () from /usr/lib/libgio-2.0.so.0
#4 0x00007f0e3d329bf7 in ?? () from /usr/lib/libglib-2.0.so.0
#5 0x00007f0e3d328054 in ?? () from /usr/lib/libglib-2.0.so.0
#6 0x00007f0e401403f7 in start_thread () from /lib/libpthread.so.0
#7 0x00007f0e3ee34b2d in clone () from /lib/libc.so.6
#8 0x0000000000000000 in ?? ()

ProblemType: Bug
Architecture: amd64
Date: Sun Jul 20 09:49:22 2008
DistroRelease: Ubuntu 8.04
NonfreeKernelModules: fglrx
Package: firefox-3.0 3.0+nobinonly-0ubuntu0.8.04.1
PackageArchitecture: amd64
ProcEnviron:
 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
 LANG=de_DE.UTF-8
 SHELL=/bin/bash
SourcePackage: firefox-3.0
Uname: Linux 2.6.24-19-generic x86_64

[Alexander Sack (asac)]

this looks quite deep in the guts of gio. Can you please get a backtrace after installing the dbgsym packages for xulrunner-1.9 and firefox-3.0 as well as libgio?

[uli (ulrich-schwenk)]

After some fiddling about, I recognized that not only firefox but also gthumb was suffering from mysterious segfaults. So this does not seem to be a firefox issue but must be a glib/gio problem.

I also tried to add the debug-symbols as described in https://wiki.ubuntu.com/MozillaTeam/Bugs

Alas I've run into problems:

a) gdb still complains about missing debug symbols
b) I'm not able to reproduce the bug. After installing the debug-symbols firefox and gthumb run all right. Is it possible that simply using aptitude can fix dynamic linking problems?!?

So could you please

a) give me a hint why gdb does not find the debug symbols
b) mark this bug as Invalid.
c) excuse me wasting your time.

[Martin Mai (mrkanister-deactivatedaccount-deactivatedaccount)]

We were wondering if this is still an issue for you. Can you try with the latest Ubuntu release? Thanks in advance.

[uli (ulrich-schwenk)]

Using Ubuntu 8.10 i'm not able to reproduce the bug with the procedure described above.

[Martin Mai (mrkanister-deactivatedaccount-deactivatedaccount)]

Thank you. Therefore closing the bug.