firefox crashed with SIGSEGV in js_ObjectOps()

[Miloš Mandarić]

Binary package hint: firefox-3.0

Steps to reproduce bug:

1. In Firefox, open 'Organize Bookmarks...' from bookmarks menu
2. Create new folder and put it in another folder by dragging it with mouse
3. After releasing mouse button the application first hangs and eventually crashes

If firefox didn't crash, click on X and press Force quit to produce crash.

ProblemType: Crash
Architecture: i386
DistroRelease: Ubuntu 8.10
ExecutablePath: /usr/lib/firefox-3.0.1/firefox
NonfreeKernelModules: nvidia
Package: firefox-3.0 3.0.1+build1+nobinonly-0ubuntu2
ProcAttrCurrent: unconfined
ProcCmdline: /usr/lib/firefox-3.0.1/firefox
ProcEnviron:
 PATH=/usr/lib/jvm/java-6-sun-1.6.0.07/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
 LANG=en_US.UTF-8
 SHELL=/bin/bash
Signal: 11
SourcePackage: firefox-3.0
StacktraceTop:
 js_ObjectOps () from /usr/lib/xulrunner-1.9.0.2/libmozjs.so
 nsNavHistoryResult::OnItemMoved (this=0xb01dbd8,
 nsNavBookmarks::MoveItem (this=0xa3a8b30, aItemId=834,
 NS_InvokeByIndex_P ()
 XPCWrappedNative::CallMethod (ccx=@0xbfa913d4,
Title: firefox crashed with SIGSEGV in js_ObjectOps()
Uname: Linux 2.6.27-2-generic i686
UserGroups: adm admin audio cdrom dialout dip floppy fuse lpadmin plugdev root video

[Apport retracing service (apport)]

StacktraceTop:js_ObjectOps () from /usr/lib/xulrunner-1.9.0.2/libmozjs.so
nsNavHistoryResult::OnItemMoved (this=0xb01dbd8, aItemId=834, aOldParent=2, aOldIndex=16,
nsNavBookmarks::MoveItem (this=0xa3a8b30, aItemId=834, aNewParent=813, aIndex=-1)
NS_InvokeByIndex_P () from /usr/lib/xulrunner-1.9.0.2/libxul.so
XPCWrappedNative::CallMethod (ccx=@0xbfa913d4, mode=XPCWrappedNative::CALL_METHOD)

[Alexander Sack (asac)]

cannot reproduce in this way. do i need to use a special folder (i created two empty folders in the bookmark menu).

[Miloš Mandarić (mandzo18)]

Yes, I have tried with two empty folders and it crashes almost always. Recorded video is in attachment. Maybe I should try to compile it from source to see if the problem is in packaging.

[Martin Mai (mrkanister-deactivatedaccount-deactivatedaccount)]

 Thank you for taking the time to report this bug and helping to make Ubuntu better. You reported this bug a while ago and there hasn't been any activity in it recently. We were wondering if this is still an issue for you. Can you try with the latest Ubuntu release? Thanks in advance.

[Miloš Mandarić (mandzo18)]

I can't reproduce it anymore so i am closing this bug.