segfault

Bug #289377 reported by Brian J. Murrell
2
Affects Status Importance Assigned to Milestone
flashplugin-nonfree (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Binary package hint: firefox-3.0

I know this is a crash in flash-nonfree and I know that it's a closed source application, etc., etc. But I think you cannot disagree that having a working flash on a Linux desktop is a pretty common and important requirement. There is (unfortunately) a lot of flash content out there on the net and crashing every time a website with flash is loaded is a really quick way to turn users off and push them back to windows.

My hope is that you have a team that is working with the flash authors to work these issues out. It would be a pity if you are not.

(gdb) thread apply all bt full

Thread 193 (Thread 0xb2625b90 (LWP 20675)):
#0 0xb7f15430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7ecc075 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2 0xae7db6cf in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#3 0xae90d29f in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#4 0xae7dbb8d in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#5 0xb7ec850f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#6 0xb7d1c7ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 192 (Thread 0xb13ffb90 (LWP 20674)):
#0 0xb7f15430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7ecc075 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2 0xae7db6cf in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#3 0xae90d29f in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#4 0xae7dbb8d in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#5 0xb7ec850f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#6 0xb7d1c7ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 191 (Thread 0xb03fdb90 (LWP 20604)):
#0 0xb7f15430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7ecc3a2 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2 0xb7b6ef9e in pt_TimedWait (cv=0x8cc4f0c, ml=0x8cc519c, timeout=60000) at ptsynch.c:280
 rv = 1483
 now = {tv_sec = 1224999723, tv_usec = 918876}
 tmo = {tv_sec = 1224999783, tv_nsec = 918876000}
 ticks = 1000
#3 0xb7b6fdc0 in PR_WaitCondVar (cvar=0x8cc4f08, timeout=60000) at ptsynch.c:407
 rv = <value optimized out>
 thred = <value optimized out>
#4 0xb7b6feb7 in PR_Wait (mon=0x8cc5198, timeout=60000) at ptsynch.c:584
 rv = -516
 saved_entries = 1
 saved_owner = 2956974992
#5 0xb78971b0 in nsThreadPool::Run (this=0x8cc50e8) at ../../dist/include/xpcom/nsAutoLock.h:340
 now = <value optimized out>
 timeout = 1483
 mon = {<nsAutoLockBase> = {<No data fields>}, mMonitor = 0x8cc5198, mLockCount = 1}
 event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
 current = {<nsCOMPtr_base> = {mRawPtr = 0x17fb27c8}, <No data fields>}
 shutdownThreadOnExit = 0
 exitThread = 0
 wasIdle = 0
 idleSince = 934044558
#6 0xb789556c in nsThread::ProcessNextEvent (this=0x17fb27c8, mayWait=1, result=0xb03fd344)
    at nsThread.cpp:510
 notifyGlobalObserver = 1
 obs = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
 event = {<nsCOMPtr_base> = {mRawPtr = 0x8cc50ec}, <No data fields>}
 rv = 0
#7 0xb7865f88 in NS_ProcessNextEvent_P (thread=0x80, mayWait=1) at nsThreadUtils.cpp:227
 val = <value optimized out>
#8 0xb7895cd3 in nsThread::ThreadFunc (arg=0x17fb27c8) at nsThread.cpp:253
 event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
#9 0xb7b761e1 in _pt_root (arg=0x17fab620) at ptthread.c:221
 detached = 0
#10 0xb7ec850f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#11 0xb7d1c7ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 190 (Thread 0xaa9feb90 (LWP 20603)):
#0 0xb7f15430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7ecc3a2 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2 0xb7b6ef9e in pt_TimedWait (cv=0x88b5fd4, ml=0x88b5f70, timeout=60000) at ptsynch.c:280
 rv = 617
 now = {tv_sec = 1224999670, tv_usec = 623104}
 tmo = {tv_sec = 1224999730, tv_nsec = 623104000}
 ticks = 1000
#3 0xb7b6fdc0 in PR_WaitCondVar (cvar=0x88b5fd0, timeout=60000) at ptsynch.c:407
 rv = <value optimized out>
 thred = <value optimized out>
#4 0xb7149d4a in nsHostResolver::GetHostToLookup (this=0x88b5f10, result=0xaa9fe378)
    at nsHostResolver.cpp:595
 delta = <value optimized out>
 start = 933991263
 timeout = 60000
#5 0xb714a412 in nsHostResolver::ThreadFunc (arg=0x88b5f10) at nsHostResolver.cpp:690
 rec = (nsHostRecord *) 0xaf33f0c8
 ai = (PRAddrInfo *) 0xb294ed08
#6 0xb7b761e1 in _pt_root (arg=0xaf57ffe8) at ptthread.c:221
 detached = 1
#7 0xb7ec850f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#8 0xb7d1c7ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 97 (Thread 0xac3aeb90 (LWP 26061)):
#0 0xb7f15430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7d11f77 in poll () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#2 0xb7b71d8c in _pr_poll_with_poll (pds=0xac3ae2ec, npds=1, timeout=4294967295) at ptio.c:3895
 stack_syspoll = {{fd = 62, events = 1, revents = 0}, {fd = 60945476, events = -3871,
    revents = 18681}, {fd = -1209255816, events = 26896, revents = 3433}, {fd = -1405427800,
    events = 15528, revents = -18448}, {fd = -1209248854, events = 13306, revents = -18507}, {
    fd = -1405427724, events = 31032, revents = -18447}, {fd = 142149696, events = 2,
    revents = -21446}, {fd = -1208970168, events = 13172, revents = -18507}, {fd = -1208911548,
    events = 28660, revents = -18447}, {fd = 142204612, events = 1, revents = 0}, {
    fd = -1405427676, events = 16541, revents = -18448}, {fd = 0, events = 0, revents = 0}, {
    fd = 0, events = 0, revents = 0}, {fd = 0, events = 11196, revents = -18447}, {
    fd = -1405427728, events = 0, revents = 0}, {fd = -1241263273, events = -22432,
    revents = -18449}, {fd = 95428250, events = 64, revents = 0}, {fd = -1209258696,
    events = 10988, revents = -18452}, {fd = 4096, events = 0, revents = 0}, {fd = 0, events = 0,
    revents = 0}, {fd = 5, events = 180, revents = 0}, {fd = 142149696, events = -22432,
    revents = -18449}, {fd = -1212861637, events = 16808, revents = -18452}, {fd = -1212877708,
    events = 1, revents = 0}, {fd = -1208913932, events = -11433, revents = -18941}, {
    fd = 224935048, events = -7920, revents = -21446}, {fd = -1208991057, events = -7936,
    revents = -21446}, {fd = -1212877708, events = -7948, revents = -21446}, {fd = -1208911932,
    events = 0, revents = 0}, {fd = 142149696, events = 5, revents = 0}, {fd = 0, events = 1,
    revents = 0}, {fd = -1212861446, events = -8204, revents = -21446}, {fd = -1208911560,
    events = 2112, revents = 2169}, {fd = -1405485054, events = -20436, revents = -18452}, {
    fd = -1405427456, events = -7948, revents = -21446}, {fd = 0, events = 1, revents = 0}, {
    fd = -1209202797, events = -7872, revents = -21446}, {fd = 142148592, events = 13115,
    revents = -18507}, {fd = -1405424680, events = 0, revents = 0}, {fd = 0, events = -27800,
    revents = -18919}, {fd = -1239833728, events = 0, revents = 0}, {fd = -1210929802,
    events = -16647, revents = -18920}, {fd = -1239838732, events = -8004, revents = -21446}, {
    fd = -1209225172, events = -16423, revents = -18920}, {fd = -1210494988, events = 0,
    revents = 0}, {fd = 1, events = 0, revents = 0}, {fd = -1211450604, events = 3661,
    revents = -18506}, {fd = -1355717964, events = -12, revents = -18505}, {fd = -1405427384,
    events = -784, revents = -18506}, {fd = -1355717964, events = -7952, revents = -21446}, {
    fd = -1282863568, events = 16, revents = -20160}, {fd = 1, events = 14456, revents = -18452}, {
    fd = -1209030560, events = -16231, revents = -18920}, {fd = -1209230882, events = 28660,
    revents = -18447}, {fd = -1212877708, events = 1008, revents = 2169}, {fd = -1405427376,
    events = -31397, revents = -18448}, {fd = 3, events = 2112, revents = 2169}, {
    fd = -1209225172, events = 5, revents = 0}, {fd = 26061, events = 0, revents = 0}, {fd = 1,
    events = 3632, revents = -19575}, {fd = -1405427368, events = -12, revents = -18505}, {
    fd = -1356035536, events = 0, revents = 0}, {fd = -1405427352, events = -208,
    revents = -18506}, {fd = -1356035536, events = -7288, revents = -21446}}
 syspoll = (struct pollfd *) 0xac3adf58
 index = 1
 msecs = -1
 ready = 0
 start = 0
 elapsed = <value optimized out>
#3 0xb7b78b21 in WaitPidDaemonThread (unused=0x0) at uxproces.c:723
 pd = {fd = 0xaf4ce708, in_flags = 1, out_flags = 1}
 fd = <value optimized out>
 rv = <value optimized out>
 buf = "\000�:�M\016��\020_\213\b�?��\024�ʷ\024�ʷ\020_\213\b$�:�p_\213\bp_\213\b�\231��55H68\a\217�\b�'\025@aٷ\002\000\000\000\003\000\000\000�\a\217�,���x�:��e\000\000\000\000\000\000\001\000\000\000hPy�Q�\222�������y\b\000\000\000\000\210�:�0�����y\b@aٷ"
 pid = -1
 status = 0
 op = (struct pr_CreateProcOp *) 0x0
#4 0xb7b761e1 in _pt_root (arg=0xaf2c8a90) at ptthread.c:221
 detached = 0
#5 0xb7ec850f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#6 0xb7d1c7ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 8 (Thread 0xb0bfeb90 (LWP 25361)):
#0 0xb7f15430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7ecc075 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2 0xb7b6fe39 in PR_WaitCondVar (cvar=0x8c382f0, timeout=4294967295) at ptsynch.c:405
 rv = <value optimized out>
 thred = (PRThread *) 0x8c4c2c8
#3 0xb7b6feb7 in PR_Wait (mon=0x9720568, timeout=4294967295) at ptsynch.c:584
 rv = -512
 saved_entries = 1
 saved_owner = 2965367696
#4 0xb7894791 in nsEventQueue::GetEvent (this=0x89a1928, mayWait=1, result=0xb0bfe304)
    at ../../dist/include/xpcom/nsAutoLock.h:340
No locals.
#5 0xb7895540 in nsThread::ProcessNextEvent (this=0x89a1908, mayWait=1, result=0xb0bfe344)
    at nsThread.h:112
 notifyGlobalObserver = 1
 obs = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
 event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
 rv = 3071199589
#6 0xb7865f88 in NS_ProcessNextEvent_P (thread=0x80, mayWait=1) at nsThreadUtils.cpp:227
 val = <value optimized out>
#7 0xb7895cd3 in nsThread::ThreadFunc (arg=0x89a1908) at nsThread.cpp:253
 event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
#8 0xb7b761e1 in _pt_root (arg=0x8c4c2c8) at ptthread.c:221
 detached = 0
#9 0xb7ec850f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#10 0xb7d1c7ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 6 (Thread 0xb5975b90 (LWP 25120)):
#0 0xb7f15430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7d11f77 in poll () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#2 0xb7b71d8c in _pr_poll_with_poll (pds=0x88b2c50, npds=2, timeout=65535000) at ptio.c:3895
 stack_syspoll = {{fd = 23, events = 1, revents = 0}, {fd = 56, events = 3, revents = 0}, {
    fd = 3, events = -12, revents = -18505}, {fd = -1209230882, events = 4096, revents = 0}, {
    fd = 25120, events = 0, revents = 0}, {fd = 1, events = 20580, revents = -19049}, {
    fd = -1210494988, events = 24, revents = 0}, {fd = -1209225172, events = 20424,
    revents = -19049}, {fd = -1211439003, events = 0, revents = 0}, {fd = 1, events = 16,
    revents = -20160}, {fd = 0, events = -12, revents = -18505}, {fd = 364371980, events = -8344,
    revents = 5559}, {fd = -1248374808, events = -208, revents = -18506}, {fd = 364371980,
    events = 16372, revents = -18510}, {fd = -1248374760, events = 5858, revents = -18552}, {
    fd = -1212678156, events = -8184, revents = 5559}, {fd = -1248374776, events = -103,
    revents = -18506}, {fd = 364371980, events = 1, revents = 0}, {fd = -1248374760,
    events = 5772, revents = -18552}, {fd = -1213054988, events = 0, revents = 0}, {
    fd = -1248374744, events = 1484, revents = -18664}, {fd = 364371976, events = -8344,
    revents = 5559}, {fd = -1248374744, events = -538, revents = -18553}, {fd = -1355325288,
    events = 0, revents = 0}, {fd = -1248374664, events = -149, revents = -18553}, {
    fd = -1248374700, events = -8344, revents = 5559}, {fd = -1248374664, events = 3661,
    revents = -18506}, {fd = 143337344, events = 16372, revents = -18510}, {fd = -1248374664,
    events = 2312, revents = -18668}, {fd = 143337344, events = 0, revents = 0}, {fd = 0,
    events = 0, revents = 0}, {fd = 0, events = -8184, revents = 5559}, {fd = 1, events = 16372,
    revents = -18510}, {fd = -2142830585, events = -30200, revents = 6175}, {fd = -1248374632,
    events = 4861, revents = -18554}, {fd = 143337328, events = -30192, revents = 6175}, {fd = 0,
    events = 0, revents = 0}, {fd = 143337332, events = 20664, revents = -19049}, {
    fd = -1248374584, events = 28591, revents = -18664}, {fd = 1000000, events = 0, revents = 0}, {
    fd = -1211338826, events = 0, revents = 0}, {fd = 2038139527, events = 16960, revents = 15}, {
    fd = 143337332, events = 16372, revents = -18510}, {fd = -1418752176, events = -28844,
    revents = -21649}, {fd = -1248374520, events = -9467, revents = -18665}, {fd = 404720136,
    events = -28844, revents = -21649}, {fd = 4096, events = 3661, revents = -18506}, {
    fd = -1418752152, events = 16372, revents = -18510}, {fd = -1248374504, events = -10548,
    revents = -18665}, {fd = -1418752152, events = 23028, revents = -20606}, {fd = 0,
    events = 16372, revents = -18510}, {fd = -1418752176, events = 0, revents = 0}, {
    fd = -1248374488, events = 16372, revents = -18510}, {fd = -1350411804, events = 0,
    revents = 0}, {fd = -1248374472, events = 4861, revents = -18554}, {fd = -1209230882,
    events = 23012, revents = -20606}, {fd = -1248374472, events = 25864, revents = -18506}, {
    fd = -1212783383, events = -12, revents = -18505}, {fd = -1248374456, events = 20856,
    revents = -19049}, {fd = -1212678156, events = 0, revents = 0}, {fd = -1211338826,
    events = 28501, revents = -18505}, {fd = -1248374420, events = 0, revents = 0}, {
    fd = -1248374424, events = 2425, revents = -18668}, {fd = 143339172, events = 1, revents = 0}}
 syspoll = (struct pollfd *) 0xb5974f68
 index = 2
 msecs = 65535000
 ready = 0
 start = 934046042
 elapsed = <value optimized out>
#3 0xb7140a7b in nsSocketTransportService::Poll (this=0x88b2770, wait=1, interval=0xb59751e8)
    at nsSocketTransportService2.cpp:349
 pollList = (PRPollDesc *) 0x88b2c50
 pollCount = 2
 pollTimeout = 65535000
 ts = 934046042
 rv = <value optimized out>
 passedInterval = <value optimized out>
#4 0xb7140f70 in nsSocketTransportService::DoPollIteration (this=0x88b2770, wait=1)
    at nsSocketTransportService2.cpp:644
 i = -1
 pollInterval = <value optimized out>
 n = <value optimized out>
#5 0xb714121a in nsSocketTransportService::OnProcessNextEvent (this=0x88b2770, thread=0x88afc18,
    mayWait=1, depth=1) at nsSocketTransportService2.cpp:523
 val = 0
#6 0xb789550e in nsThread::ProcessNextEvent (this=0x88afc18, mayWait=1, result=0xb5975294)
    at nsThread.cpp:497
 notifyGlobalObserver = 1
 obs = {<nsCOMPtr_base> = {mRawPtr = 0x88b2778}, <No data fields>}
 event = {<nsCOMPtr_base> = {mRawPtr = 0x88b2770}, <No data fields>}
 rv = <value optimized out>
#7 0xb7865f88 in NS_ProcessNextEvent_P (thread=0x2, mayWait=1) at nsThreadUtils.cpp:227
 val = <value optimized out>
#8 0xb7140c93 in nsSocketTransportService::Run (this=0x88b2770)
    at nsSocketTransportService2.cpp:565
 thread = (class nsIThread *) 0x88afc18
 threadInt = {<nsCOMPtr_base> = {mRawPtr = 0x88afc18}, <No data fields>}
 i = <value optimized out>
#9 0xb789556c in nsThread::ProcessNextEvent (this=0x88afc18, mayWait=1, result=0xb5975344)
    at nsThread.cpp:510
 notifyGlobalObserver = 1
 obs = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
 event = {<nsCOMPtr_base> = {mRawPtr = 0x88b277c}, <No data fields>}
 rv = 0
#10 0xb7865f88 in NS_ProcessNextEvent_P (thread=0x2, mayWait=1) at nsThreadUtils.cpp:227
 val = <value optimized out>
#11 0xb7895cd3 in nsThread::ThreadFunc (arg=0x88afc18) at nsThread.cpp:253
 event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
#12 0xb7b761e1 in _pt_root (arg=0x88b2fd8) at ptthread.c:221
 detached = 0
#13 0xb7ec850f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#14 0xb7d1c7ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 5 (Thread 0xb5174b90 (LWP 25121)):
#0 0xb7f15430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7ecc3a2 in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2 0xb7b6ef9e in pt_TimedWait (cv=0x8813424, ml=0x8823c98, timeout=656) at ptsynch.c:280
 rv = 4038165
 now = {tv_sec = 1224999725, tv_usec = 629668}
 tmo = {tv_sec = 1224999726, tv_nsec = 285668000}
 ticks = 1000
#3 0xb7b6fdc0 in PR_WaitCondVar (cvar=0x8813420, timeout=656) at ptsynch.c:407
 rv = <value optimized out>
 thred = <value optimized out>
#4 0xb78984bc in TimerThread::Run (this=0x8823be0) at TimerThread.cpp:345
 waitFor = 4294966780
#5 0xb789556c in nsThread::ProcessNextEvent (this=0x88ee7c8, mayWait=1, result=0xb5174344)
    at nsThread.cpp:510
 notifyGlobalObserver = 1
 obs = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
 event = {<nsCOMPtr_base> = {mRawPtr = 0x8823be0}, <No data fields>}
 rv = 0
#6 0xb7865f88 in NS_ProcessNextEvent_P (thread=0x80, mayWait=1) at nsThreadUtils.cpp:227
 val = <value optimized out>
#7 0xb7895cd3 in nsThread::ThreadFunc (arg=0x88ee7c8) at nsThread.cpp:253
 event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
#8 0xb7b761e1 in _pt_root (arg=0x88ee9d0) at ptthread.c:221
 detached = 0
#9 0xb7ec850f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#10 0xb7d1c7ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 4 (Thread 0xb4784b90 (LWP 25126)):
#0 0xb7f15430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7ecc075 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2 0xb7b6fe39 in PR_WaitCondVar (cvar=0x8df6db0, timeout=4294967295) at ptsynch.c:405
 rv = <value optimized out>
 thred = (PRThread *) 0x8df6df0
#3 0xb769e266 in nsSSLThread::Run (this=0x8df6d28) at nsSSLThread.cpp:964
 threadLock = {<nsAutoLockBase> = {<No data fields>}, mLock = 0x8df6d50, mLocked = 1}
 pending_work = <value optimized out>
 busy_socket_ssl_state = nsSSLSocketThreadData::ssl_reading_done
 needToSetPollableEvent = 1
 socketToDestroy = (class nsNSSSocketInfo *) 0x1
#4 0xb769db9a in nsPSMBackgroundThread::nsThreadRunner (arg=0x8df6d28)
    at nsPSMBackgroundThread.cpp:44
No locals.
#5 0xb7b761e1 in _pt_root (arg=0x8df6df0) at ptthread.c:221
 detached = 0
#6 0xb7ec850f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7 0xb7d1c7ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 3 (Thread 0xb3717b90 (LWP 25127)):
#0 0xb7f15430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7ecc075 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2 0xb7b6fe39 in PR_WaitCondVar (cvar=0x8df6f80, timeout=4294967295) at ptsynch.c:405
 rv = <value optimized out>
 thred = (PRThread *) 0x8df6fc0
#3 0xb769f2fe in nsCertVerificationThread::Run (this=0x8df6ed0)
    at nsCertVerificationThread.cpp:138
No locals.
#4 0xb769db9a in nsPSMBackgroundThread::nsThreadRunner (arg=0x8df6ed0)
    at nsPSMBackgroundThread.cpp:44
No locals.
#5 0xb7b761e1 in _pt_root (arg=0x8df6fc0) at ptthread.c:221
 detached = 0
#6 0xb7ec850f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7 0xb7d1c7ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 1 (Thread 0xb7c396c0 (LWP 25102)):
#0 0xaed9eacb in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#1 0xaedcbcf8 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#2 0xaedc69cc in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#3 0xaedc6b03 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#4 0xaed3144f in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#5 0xaed26621 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#6 0xaed177a9 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#7 0xaed32830 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#8 0xaeddbb26 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#9 0xaede0120 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#10 0xaedc6b1d in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#11 0xaed3144f in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#12 0xaed12d11 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#13 0xae811a61 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#14 0xaeac0759 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#15 0xaeaf8a19 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#16 0xaeaeb506 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#17 0xaeafb98d in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#18 0xaeb31520 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#19 0xaebb0b56 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#20 0xae7c5a82 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#21 0xae7c8c49 in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#22 0xb76dd070 in ns4xPluginStreamListener::OnDataAvailable (this=0x16e6ef80,
    pluginInfo=0x163ddd10, input=0x14814bc8, length=49152) at ns4xPluginInstance.cpp:571
 startTime = 934046042
 numtowrite = 16384
 writeCount = <value optimized out>
 ptrStreamBuffer = 0x15254e58 "CWS\t\024\v\003"
 zeroBytesWriteCount = 0
 guard = {<PRCListStr> = {next = 0xb7b2d7b8, prev = 0xb7b2d7b8},
  mInstance = {<nsCOMPtr_base> = {mRawPtr = 0x16568d78}, <No data fields>}, mDelayedDestroy = 0,
  static sListHead = {next = 0xbfc11274, prev = 0xbfc11274}}
 streamPosition = 0
 streamOffset = 65536
 rv = 0
#23 0xb76e51b6 in nsPluginStreamListenerPeer::OnDataAvailable (this=0x163ddcb0,
    request=0x177e9854, aContext=0x0, aIStream=0x14814bc8, sourceOffset=0, aLength=65536)
    at nsPluginHostImpl.cpp:2303
 brr = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
 stream = {<nsCOMPtr_base> = {mRawPtr = 0x14814bc8}, <No data fields>}
 rv = 0
 url = 0x13d8d638 "http://finance.google.com/finance/s/xoGlurcrEFM/chart9.swf?hl=en&gl=us"
#24 0xb71421da in nsStreamListenerTee::OnDataAvailable (this=0x156d5ed0, request=0x177e9854,
    context=0x0, input=0x15b7df38, offset=0, count=65536) at nsStreamListenerTee.cpp:97
 tee = {<nsCOMPtr_base> = {mRawPtr = 0x14814bc8}, <No data fields>}
 rv = 0
#25 0xb718cce7 in nsHttpChannel::OnDataAvailable (this=0x177e9828, request=0x15b7e078, ctxt=0x0,
    input=0x15b7df38, offset=0, count=65536) at nsHttpChannel.cpp:4522
 transportStatus = <value optimized out>
 rv = <value optimized out>
#26 0xb712c2be in nsInputStreamPump::OnStateTransfer (this=0x15b7e078) at nsInputStreamPump.cpp:508
 offsetBefore = 0
 seekable = {<nsCOMPtr_base> = {mRawPtr = 0x15b7df3c}, <No data fields>}
 odaOffset = 0
 rv = 0
 avail = 65536
#27 0xb712c3f0 in nsInputStreamPump::OnInputStreamReady (this=0x15b7e078, stream=0x15b7df38)
    at nsInputStreamPump.cpp:398
 nextState = 16
#28 0xb7881a2f in nsInputStreamReadyEvent::Run (this=0xc105fd8) at nsStreamUtils.cpp:111
No locals.
#29 0xb789556c in nsThread::ProcessNextEvent (this=0x88238d0, mayWait=1, result=0xbfc114b4)
    at nsThread.cpp:510
 notifyGlobalObserver = 1
 obs = {<nsCOMPtr_base> = {mRawPtr = 0x8be95ac}, <No data fields>}
 event = {<nsCOMPtr_base> = {mRawPtr = 0xc105fd8}, <No data fields>}
 rv = 0
#30 0xb7865f88 in NS_ProcessNextEvent_P (thread=0x0, mayWait=1) at nsThreadUtils.cpp:227
 val = <value optimized out>
#31 0xb77e92c4 in nsBaseAppShell::Run (this=0x8be95a8) at nsBaseAppShell.cpp:170
 thread = (class nsIThread *) 0x88238d0
#32 0xb767eab8 in nsAppStartup::Run (this=0x8c34748) at nsAppStartup.cpp:181
 rv = <value optimized out>
#33 0xb70e3508 in XRE_main (argc=2, argv=0xbfc14c14, aAppData=0x879e830) at nsAppRunner.cpp:3194
 obsService = {<nsCOMPtr_base> = {mRawPtr = 0x884e158}, <No data fields>}
 remoteService = {<nsCOMPtr_base> = {mRawPtr = 0x8e39d58}, <No data fields>}
 appStartup = {<nsCOMPtr_base> = {mRawPtr = 0x8c34748}, <No data fields>}
 workingDir = {<nsCOMPtr_base> = {mRawPtr = 0x8c52318}, <No data fields>}
 chromeObserver = {<nsCOMPtr_base> = {mRawPtr = 0x8be81f0}, <No data fields>}
 cmdLine = {<nsCOMPtr_base> = {mRawPtr = 0x8c522f8}, <No data fields>}
 noEMRestart = <value optimized out>
 xpcom = {mServiceManager = 0x882bc9c}
 desktopStartupIDEnv = <value optimized out>
 desktopStartupID = {<nsFixedCString> = {<nsCString> = {<nsACString_internal> = {<nsCSubstring_base> = {<No data fields>}, mData = 0xbfc11928 "", mLength = 0,
        mFlags = 65553}, <No data fields>}, mFixedCapacity = 63, mFixedBuf = 0xbfc11928 ""},
  mStorage = "\000\031��\n�\212�P�y\b��\004\bX\031����\212�d\032��\001\000\000\000a�\210���\004\bT�y\bH\032��x\031����\004\bH\032��\000\000\000"}
 xremotearg = <value optimized out>
 upgraded = 0
 appInitiatedRestart = <value optimized out>
 dirProvider = {<nsIDirectoryServiceProvider2> = {<nsIDirectoryServiceProvider> = {<nsISupports> = {
        _vptr.nsISupports = 0xb7a6e108}, <No data fields>}, <No data fields>}, <nsIProfileStartup> = {<nsISupports> = {_vptr.nsISupports = 0xb7a6e12c}, <No data fields>},
  mAppProvider = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>},
  mGREDir = {<nsCOMPtr_base> = {mRawPtr = 0x879ea50}, <No data fields>},
  mSysPluginDir = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>},
  mXULAppDir = {<nsCOMPtr_base> = {mRawPtr = 0x879e9b0}, <No data fields>},
  mProfileDir = {<nsCOMPtr_base> = {mRawPtr = 0x88132f0}, <No data fields>},
  mProfileLocalDir = {<nsCOMPtr_base> = {mRawPtr = 0x8813368}, <No data fields>},
  mProfileNotified = 1 '\001', mExtensionsLoaded = 1 '\001',
  mAppBundleDirectories = {<nsCOMArray_base> = {mArray = {mImpl = 0x0}}, <No data fields>},
  mExtensionDirectories = {<nsCOMArray_base> = {mArray = {mImpl = 0x884a088}}, <No data fields>},
  mThemeDirectories = {<nsCOMArray_base> = {mArray = {mImpl = 0x884aa18}}, <No data fields>}}
 display = (GdkDisplay *) 0x87d5028
 nativeApp = {<nsCOMPtr_base> = {mRawPtr = 0x87e61e0}, <No data fields>}
 desktopStartupIDPtr = 0x0
 startOffline = 0
 profLD = {<nsCOMPtr_base> = {mRawPtr = 0x8813368}, <No data fields>}
 profD = {<nsCOMPtr_base> = {mRawPtr = 0x88132f0}, <No data fields>}
 needsRestart = 0
 canRun = 1
 profileLock = {<nsCOMPtr_base> = {mRawPtr = 0x87d4250}, <No data fields>}
 profileName = {<nsFixedCString> = {<nsCString> = {<nsACString_internal> = {<nsCSubstring_base> = {<No data fields>}, mData = 0xbfc118d4 "default", mLength = 7,
        mFlags = 65553}, <No data fields>}, mFixedCapacity = 63,
    mFixedBuf = 0xbfc118d4 "default"},
  mStorage = "default\000@aٷt\000\000\000@aٷ\b\031���_��t\000\000\000H\032��(\031��}\016��X�y\b�?��(\031�� �\210�X�y\b"}
 version = {<nsFixedCString> = {<nsCString> = {<nsACString_internal> = {<nsCSubstring_base> = {<No data fields>}, mData = 0xbfc11880 "3.0.3_2008101315/2008101315", mLength = 27,
        mFlags = 65553}, <No data fields>}, mFixedCapacity = 63,
    mFixedBuf = 0xbfc11880 "3.0.3_2008101315/2008101315"},
  mStorage = "3.0.3_2008101315/2008101315\000H�y\b��y\bd\032��\002\000\000\000\000\000\000\000��y\b�?���\030�� �\210�"}
 osABI = {<nsCString> = {<nsACString_internal> = {<nsCSubstring_base> = {<No data fields>},
      mData = 0xb791e2ee "Linux_x86-gcc3", mLength = 14,
      mFlags = 1}, <No data fields>}, <No data fields>}
 versionOK = <value optimized out>
 rv = 0
 ar = <value optimized out>
 gtkModules = <value optimized out>
 override = 0x0
 appData = {<nsXREAppData> = {size = 56, directory = 0x879e9b0,
    vendor = 0x879f2f0 "Mozilla", name = 0x879f2d0 "Firefox", version = 0x879f2e0 "3.0.3",
    buildID = 0x878fc10 "2008101315", ID = 0x879eaf0 "{ec8030f7-c20a-464f-9b0e-13a3a9e97384}",
    copyright = 0x879eb20 "Copyright (c) 1998 - 2008 mozilla.org", flags = 6,
    xreDirectory = 0x879ea50, minVersion = 0x878fc20 "1.9.0.1", maxVersion = 0x878fc30 "1.9.0.*",
    crashReporterURL = 0x879eb50 "https://crash-reports.mozilla.com/submit",
    profile = 0x0}, <No data fields>}
 iniFile = {<nsCOMPtr_base> = {mRawPtr = 0x879eb80}, <No data fields>}
 localIniFile = {<nsCOMPtr_base> = {mRawPtr = 0x879eb80}, <No data fields>}
 parser = {
  mSections = {<nsBaseHashtable<nsDepCharHashKey, nsAutoPtr<nsINIParser_internal::INIValue>, nsINIParser_internal::INIValue*>> = {<nsTHashtable<nsBaseHashtableET<nsDepCharHashKey, nsAutoPtr<nsINIParser_internal::INIValue> > >> = {mTable = {ops = 0xb7b3a5c0, data = 0x0, hashShift = 28,
          maxAlphaFrac = 192 '�', minAlphaFrac = 64 '@', entrySize = 12, entryCount = 1,
          removedCount = 0, generation = 0,
          entryStore = 0x879ed60 ""}}, <No data fields>}, <No data fields>}, mFileContents = {
    mRawPtr = 0x879ee28 "[Build"}}
 i = <value optimized out>
#34 0x080491ab in ?? ()
No symbol table info available.
#35 0xb7c51685 in __libc_start_main () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#36 0x08048d11 in ?? ()
No symbol table info available.

Revision history for this message
Alexander Sack (asac) wrote :

one way is to use nspluginwrapper. give that a try.

Revision history for this message
Daniel T Chen (crimsun) wrote :

fixed in jaunty; please reset to New status if reproducible in jaunty

Changed in flashplugin-nonfree:
status: New → Fix Released
Revision history for this message
Brian J. Murrell (brian-interlinx) wrote : Re: [Bug 289377] Re: segfault

On Sat, 2009-01-24 at 07:53 +0000, Daniel T Chen wrote:
> fixed in jaunty;

Well, that's just uhm... jaunty for Jaunty. :-)

How about Intrepid though? You know, the release that is currently
stable and that everyone is using. ;-)

> please reset to New status if reproducible in jaunty

I'm not (yet) using Jaunty, but like everyone else, using Intrepid. It
will be great that this is fixed in Jaunty when we are all running
Jaunty, but how about fixing it in the release we are all running
currently -- Intrepid. TIA.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.