Ubuntu
firefox-3.0 package

SIGABRT in nsDeque::GrowCapacity

Bug #309415 reported by Brian J. Murrell
2
Affects Status Importance Assigned to Milestone
firefox-3.0 (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

Binary package hint: firefox-3.0

Got a SIGABRT in today's brand new 3.0.5 update. First here's the trace of the aborted thread:

#0 0xb807b430 in __kernel_vsyscall ()
#1 0xb7dcb880 in raise () from /lib/tls/i686/cmov/libc.so.6
#2 0xb7dcd248 in abort () from /lib/tls/i686/cmov/libc.so.6
#3 0xb7fef6f8 in __gnu_cxx::__verbose_terminate_handler ()
   from /usr/lib/libstdc++.so.6
#4 0xb7fed5d5 in ?? () from /usr/lib/libstdc++.so.6
#5 0xb7fed612 in std::terminate () from /usr/lib/libstdc++.so.6
#6 0xb7fed74a in __cxa_throw () from /usr/lib/libstdc++.so.6
#7 0xb7fedda3 in operator new () from /usr/lib/libstdc++.so.6
#8 0xb7fede8d in operator new[] () from /usr/lib/libstdc++.so.6
#9 0xb79c9e28 in nsDeque::GrowCapacity (this=0xbf874cfc) at nsDeque.cpp:182
#10 0xb79c9f57 in nsDeque::Push (this=0xbf874cfc, aItem=0xa8d6de8c)
    at nsDeque.cpp:219
#11 0xb7a03d9e in GraphWalker::DoWalk (this=0xbf874d5c, aQueue=@0xbf874cfc)
    at nsCycleCollector.cpp:1169
#12 0xb7a03e3b in GraphWalker::WalkFromRoots (this=0xbf874d5c,
    aGraph=@0xa082f20) at nsCycleCollector.cpp:1153
#13 0xb7a03e8a in nsCycleCollector::ScanRoots (this=0xa082ee0)
    at nsCycleCollector.cpp:1588
#14 0xb7a03f31 in nsCycleCollector::BeginCollection (this=0xa082ee0)
    at nsCycleCollector.cpp:2379
#15 0xb7a03f6c in nsCycleCollector_beginCollection ()
    at nsCycleCollector.cpp:2910
#16 0xb725189c in XPCCycleCollectGCCallback (cx=0xa555100,
    status=JSGC_MARK_END) at nsXPConnect.cpp:440
#17 0xb7d3cce7 in js_GC (cx=0xa555100, gckind=GC_NORMAL) at jsgc.c:3247
#18 0xb7d1963a in JS_GC (cx=0xa555100) at jsapi.c:2469
#19 0xb7250b20 in nsXPConnect::Collect (this=0xa0e91f8) at nsXPConnect.cpp:529
#20 0xb7a0408e in nsCycleCollector::Collect (this=0xa082ee0, aTryCollections=1)
    at nsCycleCollector.cpp:2250
#21 0xb7a041cd in nsCycleCollector_collect () at nsCycleCollector.cpp:2898
#22 0xb75ff2ae in nsJSContext::CC () at nsJSEnvironment.cpp:3346
#23 0xb75ff37e in nsJSContext::MaybeCC (aHigherProbability=1)
    at nsJSEnvironment.cpp:3397
#24 0xb75ff731 in nsUserActivityObserver::Observe (this=0xa505530,
    aSubject=0x0, aTopic=0xb7b6b3d4 "user-interaction-inactive", aData=0x0)
    at nsJSEnvironment.cpp:291
#25 0xb79d304c in nsObserverList::NotifyObservers (this=0xa2205a0,
    aSubject=0x0, aTopic=0xb7b6b3d4 "user-interaction-inactive", someData=0x0)
    at nsObserverList.cpp:128
#26 0xb79d331a in nsObserverService::NotifyObservers (this=0xa097830,
    aSubject=0x0, aTopic=0xb7b6b3d4 "user-interaction-inactive", someData=0x0)
    at nsObserverService.cpp:181
#27 0xb7528956 in nsUITimerCallback::Notify (this=0xa5fc8e8, aTimer=0xa5fcb60)
    at nsEventStateManager.cpp:210
#28 0xb79fb1d6 in nsTimerImpl::Fire (this=0xa5fcb60) at nsTimerImpl.cpp:403
#29 0xb79fb24b in nsTimerEvent::Run (this=0x1baf8ea0) at nsTimerImpl.cpp:490
#30 0xb79f8d00 in nsThread::ProcessNextEvent (this=0xa06d118, mayWait=1,
    result=0xbf8790d4) at nsThread.cpp:510
#31 0xb79c9624 in NS_ProcessNextEvent_P (thread=0x2042, mayWait=1)
    at nsThreadUtils.cpp:227
#32 0xb794c780 in nsBaseAppShell::Run (this=0xa437e00)
    at nsBaseAppShell.cpp:170
#33 0xb77e1ed8 in nsAppStartup::Run (this=0xa473540) at nsAppStartup.cpp:181
#34 0xb72456d8 in XRE_main (argc=2, argv=0xbf87c834, aAppData=0x9fe7838)
    at nsAppRunner.cpp:3213
#35 0x080491ab in ?? ()
#36 0xb7db6685 in __libc_start_main () from /lib/tls/i686/cmov/libc.so.6
#37 0x08048d11 in ?? ()

and the fully threaded back trace:

Thread 49 (Thread 0xb40deb90 (LWP 26044)):
#0 0xb807b430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb80313a2 in pthread_cond_timedwait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2 0xb7cd2f9e in pt_TimedWait (cv=0xa0ff70c, ml=0xa0ff6a8, timeout=60000)
    at ptsynch.c:280
 rv = 981
 now = {tv_sec = 1229622287, tv_usec = 363786}
 tmo = {tv_sec = 1229622347, tv_nsec = 363786000}
 ticks = 1000
#3 0xb7cd3dc0 in PR_WaitCondVar (cvar=0xa0ff708, timeout=60000)
    at ptsynch.c:407
 rv = <value optimized out>
 thred = <value optimized out>
#4 0xb72ac356 in nsHostResolver::GetHostToLookup (this=0xa0ff648,
    result=0xb40de378) at nsHostResolver.cpp:595
 delta = <value optimized out>
 start = 1261640707
 timeout = 60000
#5 0xb72aca1e in nsHostResolver::ThreadFunc (arg=0xa0ff648)
    at nsHostResolver.cpp:690
 rec = (nsHostRecord *) 0x19ea4eb0
 ai = (PRAddrInfo *) 0x1a9c3f38
#6 0xb7cda1e1 in _pt_root (arg=0x19b7d628) at ptthread.c:221
 detached = 1
#7 0xb802d50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#8 0xb7e817ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 9 (Thread 0xb5acfb90 (LWP 8294)):
#0 0xb807b430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7e76f77 in poll () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#2 0xb7cd5d8c in _pr_poll_with_poll (pds=0xa0fc220, npds=6, timeout=65535000)
    at ptio.c:3895
 stack_syspoll = {{fd = 23, events = 1, revents = 0}, {fd = 75,
    events = 3, revents = 0}, {fd = 76, events = 3, revents = 0}, {fd = 60,
    events = 3, revents = 0}, {fd = 61, events = 3, revents = 0}, {fd = 77,
    events = 3, revents = 0}, {fd = -1246957640, events = -27596,
    revents = -18483}, {fd = 1, events = -3980, revents = -19028}, {fd = 3,
    events = 16372, revents = -18482}, {fd = -1, events = 2, revents = 0}, {
    fd = -1246957624, events = -27945, revents = -18484}, {fd = -1211329847,
    events = 16372, revents = -18482}, {fd = -1246957592, events = -18804,
    revents = -18483}, {fd = -5998, events = 11, revents = 0}, {
    fd = -1246957576, events = 16372, revents = -18482}, {fd = -1246957292,
    events = 16372, revents = -18482}, {fd = -1246957560, events = 18401,
    revents = -18483}, {fd = 11, events = 2912, revents = -22954}, {
    fd = -1246957448, events = 16372, revents = -18482}, {fd = -1246957448,
    events = 16372, revents = -18482}, {fd = -1246957448, events = 31253,
    revents = -18483}, {fd = 63, events = -3877, revents = -19028}, {fd = 1,
    events = 2, revents = 0}, {fd = -1207768610, events = -1, revents = -1}, {
    fd = -1246957496, events = -27596, revents = -18483}, {fd = 1,
    events = -3980, revents = -19028}, {fd = 3, events = 16372,
    revents = -18482}, {fd = -1207762900, events = 2, revents = 0}, {
    fd = 8294, events = 0, revents = 0}, {fd = 1, events = 21952,
    revents = 6789}, {fd = -1246957420, events = 16372, revents = -18482}, {
    fd = 426034016, events = 8920, revents = 6499}, {fd = -1246957432,
    events = 16176, revents = -18483}, {fd = 426034016, events = 8920,
    revents = 6499}, {fd = -1246957416, events = 7973, revents = -18429}, {
    fd = -1211596812, events = -3888, revents = -19028}, {fd = -1246957400,
    events = 9485, revents = -18646}, {fd = 426034016, events = -3880,
    revents = -19028}, {fd = -1246957336, events = 9463, revents = -18646}, {
    fd = -1211596812, events = 32756, revents = -18488}, {fd = -1246957336,
    events = -1159, revents = -18647}, {fd = -1246957360, events = 25240,
    revents = 2851}, {fd = -1246954492, events = -1020, revents = -19028}, {
    fd = -1209028288, events = 7160, revents = 7032}, {fd = 186868376,
    events = 32756, revents = -18488}, {fd = 426034016, events = 1,
    revents = 0}, {fd = -1246957304, events = 32756, revents = -18488}, {
    fd = 446363184, events = 0, revents = 0}, {fd = -1246957288,
    events = -2410, revents = -18643}, {fd = 425927384, events = -3820,
    revents = -19028}, {fd = 0, events = 0, revents = 0}, {fd = -1050656179,
    events = 16960, revents = 15}, {fd = -1246957256, events = -31579,
    revents = -18532}, {fd = 446363184, events = 1, revents = 0}, {
    fd = -1246957272, events = -3752, revents = -19028}, {fd = -1207768610,
    events = 0, revents = 0}, {fd = -1246957256, events = -23288,
    revents = -18484}, {fd = -1211325207, events = 16372, revents = -18482}, {
    fd = -1246957240, events = -3720, revents = -19028}, {fd = -1211219980,
    events = 0, revents = 0}, {fd = -1209876554, events = -20651,
    revents = -18483}, {fd = -1246957204, events = 0, revents = 0}, {
    fd = -1246957208, events = 12149, revents = -18646}, {fd = 168805748,
    events = 5, revents = 0}}
 syspoll = (struct pollfd *) 0xb5acef68
 index = 6
 msecs = 65535000
 ready = 0
 start = 1261669728
 elapsed = <value optimized out>
#3 0xb72a3077 in nsSocketTransportService::Poll (this=0xa0fbd40, wait=1,
    interval=0xb5acf1e8) at nsSocketTransportService2.cpp:349
 pollList = (PRPollDesc *) 0xa0fc220
 pollCount = 6
 pollTimeout = 65535000
 ts = 1261669728
 rv = <value optimized out>
 passedInterval = <value optimized out>
#4 0xb72a356c in nsSocketTransportService::DoPollIteration (this=0xa0fbd40,
    wait=1) at nsSocketTransportService2.cpp:644
 i = -1
 pollInterval = <value optimized out>
 n = <value optimized out>
#5 0xb72a3816 in nsSocketTransportService::OnProcessNextEvent (
    this=0xa0fbd40, thread=0xa0fc488, mayWait=1, depth=1)
    at nsSocketTransportService2.cpp:523
 val = 0
#6 0xb79f8ca2 in nsThread::ProcessNextEvent (this=0xa0fc488, mayWait=1,
    result=0xb5acf294) at nsThread.cpp:497
 notifyGlobalObserver = 1
 obs = {<nsCOMPtr_base> = {mRawPtr = 0xa0fbd48}, <No data fields>}
 event = {<nsCOMPtr_base> = {mRawPtr = 0xa0fbd40}, <No data fields>}
 rv = <value optimized out>
#7 0xb79c9624 in NS_ProcessNextEvent_P (thread=0x6, mayWait=1)
    at nsThreadUtils.cpp:227
 val = <value optimized out>
#8 0xb72a328f in nsSocketTransportService::Run (this=0xa0fbd40)
    at nsSocketTransportService2.cpp:565
 thread = (class nsIThread *) 0xa0fc488
 threadInt = {<nsCOMPtr_base> = {mRawPtr = 0xa0fc488}, <No data fields>}
 i = <value optimized out>
#9 0xb79f8d00 in nsThread::ProcessNextEvent (this=0xa0fc488, mayWait=1,
    result=0xb5acf344) at nsThread.cpp:510
 notifyGlobalObserver = 1
 obs = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
 event = {<nsCOMPtr_base> = {mRawPtr = 0xa0fbd4c}, <No data fields>}
 rv = 0
#10 0xb79c9624 in NS_ProcessNextEvent_P (thread=0x6, mayWait=1)
    at nsThreadUtils.cpp:227
 val = <value optimized out>
#11 0xb79f9467 in nsThread::ThreadFunc (arg=0xa0fc488) at nsThread.cpp:253
 event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
#12 0xb7cda1e1 in _pt_root (arg=0xa0fc690) at ptthread.c:221
 detached = 0
#13 0xb802d50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#14 0xb7e817ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 8 (Thread 0xb52ceb90 (LWP 8295)):
#0 0xb807b430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb80313a2 in pthread_cond_timedwait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2 0xb7cd2f9e in pt_TimedWait (cv=0xa05cc6c, ml=0xa06d4e0, timeout=664)
    at ptsynch.c:280
 rv = 1537841
 now = {tv_sec = 1229622330, tv_usec = 720003}
 tmo = {tv_sec = 1229622331, tv_nsec = 384003000}
 ticks = 1000
#3 0xb7cd3dc0 in PR_WaitCondVar (cvar=0xa05cc68, timeout=664) at ptsynch.c:407
 rv = <value optimized out>
 thred = <value optimized out>
#4 0xb79fbc50 in TimerThread::Run (this=0xa06d428) at TimerThread.cpp:345
 waitFor = 4294966780
#5 0xb79f8d00 in nsThread::ProcessNextEvent (this=0xa137a20, mayWait=1,
    result=0xb52ce344) at nsThread.cpp:510
 notifyGlobalObserver = 1
 obs = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
 event = {<nsCOMPtr_base> = {mRawPtr = 0xa06d428}, <No data fields>}
 rv = 0
#6 0xb79c9624 in NS_ProcessNextEvent_P (thread=0x80, mayWait=1)
    at nsThreadUtils.cpp:227
 val = <value optimized out>
#7 0xb79f9467 in nsThread::ThreadFunc (arg=0xa137a20) at nsThread.cpp:253
 event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
#8 0xb7cda1e1 in _pt_root (arg=0xa137c40) at ptthread.c:221
 detached = 0
#9 0xb802d50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#10 0xb7e817ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 7 (Thread 0xb267bb90 (LWP 8314)):
#0 0xb807b430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb8031075 in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2 0xb7cd3e39 in PR_WaitCondVar (cvar=0xaf8e2c0, timeout=4294967295)
    at ptsynch.c:405
 rv = <value optimized out>
 thred = (PRThread *) 0xafc8078
#3 0xb78016fa in nsSSLThread::Run (this=0xaf8e238) at nsSSLThread.cpp:964
 threadLock = {<nsAutoLockBase> = {<No data fields>},
  mLock = 0xaf8e260, mLocked = 1}
 pending_work = <value optimized out>
 busy_socket_ssl_state = nsSSLSocketThreadData::ssl_reading_done
 needToSetPollableEvent = 1
 socketToDestroy = (class nsNSSSocketInfo *) 0x1
#4 0xb780102e in nsPSMBackgroundThread::nsThreadRunner (arg=0xaf8e238)
    at nsPSMBackgroundThread.cpp:44
No locals.
#5 0xb7cda1e1 in _pt_root (arg=0xafc8078) at ptthread.c:221
 detached = 0
#6 0xb802d50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7 0xb7e817ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 6 (Thread 0xb48dfb90 (LWP 8315)):
#0 0xb807b430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb8031075 in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2 0xb7cd3e39 in PR_WaitCondVar (cvar=0xafc81d8, timeout=4294967295)
    at ptsynch.c:405
 rv = <value optimized out>
 thred = (PRThread *) 0xafc8218
#3 0xb7802792 in nsCertVerificationThread::Run (this=0xafc8128)
    at nsCertVerificationThread.cpp:138
No locals.
#4 0xb780102e in nsPSMBackgroundThread::nsThreadRunner (arg=0xafc8128)
    at nsPSMBackgroundThread.cpp:44
No locals.
#5 0xb7cda1e1 in _pt_root (arg=0xafc8218) at ptthread.c:221
 detached = 0
#6 0xb802d50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7 0xb7e817ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 5 (Thread 0xb2e7cb90 (LWP 8316)):
#0 0xb807b430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb8031075 in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2 0xb7cd3e39 in PR_WaitCondVar (cvar=0xb012300, timeout=4294967295)
    at ptsynch.c:405
 rv = <value optimized out>
 thred = (PRThread *) 0xb016450
#3 0xb7cd3eb7 in PR_Wait (mon=0xb012340, timeout=4294967295) at ptsynch.c:584
 rv = -512
 saved_entries = 1
 saved_owner = 3001535376
#4 0xb79f7f25 in nsEventQueue::GetEvent (this=0xb012278, mayWait=1,
    result=0xb2e7c304) at ../../dist/include/xpcom/nsAutoLock.h:340
No locals.
#5 0xb79f8cd4 in nsThread::ProcessNextEvent (this=0xb012258, mayWait=1,
    result=0xb2e7c344) at nsThread.h:112
 notifyGlobalObserver = 1
 obs = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
 event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
 rv = 3072650037
#6 0xb79c9624 in NS_ProcessNextEvent_P (thread=0x80, mayWait=1)
    at nsThreadUtils.cpp:227
 val = <value optimized out>
#7 0xb79f9467 in nsThread::ThreadFunc (arg=0xb012258) at nsThread.cpp:253
 event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
#8 0xb7cda1e1 in _pt_root (arg=0xb016450) at ptthread.c:221
 detached = 0
#9 0xb802d50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#10 0xb7e817ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 4 (Thread 0xb367db90 (LWP 8501)):
#0 0xb807b430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb8031075 in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2 0xafe196cf in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#3 0xaff4b29f in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.

#4 0xafe19b8d in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#5 0xb802d50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#6 0xb7e817ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 3 (Thread 0xadfe9b90 (LWP 8502)):
#0 0xb807b430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb8031075 in pthread_cond_wait@@GLIBC_2.3.2 ()
   from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.

#2 0xafe196cf in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#3 0xaff4b29f in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#4 0xafe19b8d in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
No symbol table info available.
#5 0xb802d50f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0

No symbol table info available.
#6 0xb7e817ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 1 (Thread 0xb7d9e6c0 (LWP 8258)):
#0 0xb807b430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7dcb880 in raise () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#2 0xb7dcd248 in abort () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

#3 0xb7fef6f8 in __gnu_cxx::__verbose_terminate_handler ()
   from /usr/lib/libstdc++.so.6
No symbol table info available.
#4 0xb7fed5d5 in ?? () from /usr/lib/libstdc++.so.6
No symbol table info available.
#5 0xb7fed612 in std::terminate () from /usr/lib/libstdc++.so.6
No symbol table info available.
#6 0xb7fed74a in __cxa_throw () from /usr/lib/libstdc++.so.6
No symbol table info available.
#7 0xb7fedda3 in operator new () from /usr/lib/libstdc++.so.6
No symbol table info available.
#8 0xb7fede8d in operator new[] () from /usr/lib/libstdc++.so.6
No symbol table info available.

#9 0xb79c9e28 in nsDeque::GrowCapacity (this=0xbf874cfc) at nsDeque.cpp:182
 theNewSize = 131072
#10 0xb79c9f57 in nsDeque::Push (this=0xbf874cfc, aItem=0xa8d6de8c)
    at nsDeque.cpp:219
No locals.
#11 0xb7a03d9e in GraphWalker::DoWalk (this=0xbf874d5c, aQueue=@0xbf874cfc)
    at nsCycleCollector.cpp:1169
No locals.
#12 0xb7a03e3b in GraphWalker::WalkFromRoots (this=0xbf874d5c,
    aGraph=@0xa082f20) at nsCycleCollector.cpp:1153
 queue = {mSize = 32768, mCapacity = 32768, mOrigin = 2610,
  mDeallocator = 0x0, mBuffer = {0xa8d5f00c, 0xa8d5f024, 0xa8d5f03c,
    0xa8d5f054, 0xa8d5f06c, 0xa8d5f084, 0xa8d5f09c, 0xa8d5f0b4},
  mData = 0xa59c4650}
#13 0xb7a03e8a in nsCycleCollector::ScanRoots (this=0xa082ee0)
    at nsCycleCollector.cpp:1588
No locals.
#14 0xb7a03f31 in nsCycleCollector::BeginCollection (this=0xa082ee0)
    at nsCycleCollector.cpp:2379
 builder = {<nsCycleCollectionTraversalCallback> = {
    _vptr.nsCycleCollectionTraversalCallback = 0xb7c85f28}, mNodeBuilder = {
    mNextBlock = 0xa573f008, mNext = @0xa082f24, mBlockEnd = 0xa57ff00c},
  mEdgeBuilder = {mCurrent = 0xa8e73ef4, mBlockEnd = 0xa8eae000,
    mNextBlockPtr = 0xa8eae004}, mPtrToNodeMap = {ops = 0xb7c9e848,
    data = 0x0, hashShift = 15, maxAlphaFrac = 192 '�', minAlphaFrac = 64 '@',
    entrySize = 8, entryCount = 65536, removedCount = 0, generation = 2,
    entryStore = 0xa55fd008 ""}, mCurrPi = 0xa57feff4, mRuntimes = 0xa082ef0}
#15 0xb7a03f6c in nsCycleCollector_beginCollection ()
    at nsCycleCollector.cpp:2910
No locals.
#16 0xb725189c in XPCCycleCollectGCCallback (cx=0xa555100,
    status=JSGC_MARK_END) at nsXPConnect.cpp:440
 ok = <value optimized out>
#17 0xb7d3cce7 in js_GC (cx=0xa555100, gckind=GC_NORMAL) at jsgc.c:3247
 rt = (JSRuntime *) 0xa078208
 keepAtoms = 0
 callback = <value optimized out>
 i = 173922712
 type = <value optimized out>
 trc = {context = 0xa555100, callback = 0}
 thingSize = 173363456
 a = <value optimized out>
 ap = (JSGCArenaInfo **) 0xa07828c
 emptyArenas = (JSGCArenaInfo *) 0xa07abc4
 flags = <value optimized out>
 flagp = (uint8 *) 0xa07abc0 ""
 thing = <value optimized out>
 freeList = (JSGCThing *) 0xbf874ea8
 arenaList = (JSGCArenaList *) 0xb7cd3f30
 allClear = 168274884
 requestDebit = 1
 acx = <value optimized out>
 iter = (JSContext *) 0x0
#18 0xb7d1963a in JS_GC (cx=0xa555100) at jsapi.c:2469
No locals.

#19 0xb7250b20 in nsXPConnect::Collect (this=0xa0e91f8) at nsXPConnect.cpp:529
 cycleCollectionContext = {<nsAXPCNativeCallContext> = {
    _vptr.nsAXPCNativeCallContext = 0xb7bd27c8},
  mState = XPCCallContext::HAVE_CONTEXT, mXPC = 0xa0e91f8,
  mThreadData = 0xa0780f0, mXPCContext = 0xa5552c8, mJSContext = 0xa555100,
  mContextPopRequired = 1, mDestroyJSContextInDestructor = 0,
  mCallerLanguage = XPCContext::LANG_NATIVE,
  mPrevCallerLanguage = XPCContext::LANG_UNKNOWN, mPrevCallContext = 0x0,
  mOperandJSObject = 0xf519f85a, mCurrentJSObject = 0xb7a996ba,
  mFlattenedJSObject = 0x7a, mWrapper = 0xb79c7d3b, mTearOff = 0x19,
  mScriptableInfo = 0xb7c87ff4, mSet = 0xbf874ff8, mInterface = 0xb79d305a,
  mMember = 0x0, mName = 168392764, mStaticMemberIsLocal = -1081651192,
  mArgc = 3080468072, mArgv = 0x0, mRetVal = 0xb7a996ba,
  mExceptionWasThrown = -1213718508, mReturnValueWasSet = -1509869648,
  mMethodIndex = 30780, mCallee = 0x0,
  mStringWrapperData = "�\226��Z�\031�<x\t\n\000\000\000\000(P\207�,3\235�XP\207�\000\000\000"}
 cx = (JSContext *) 0xa555100
#20 0xb7a0408e in nsCycleCollector::Collect (this=0xa082ee0, aTryCollections=1)
    at nsCycleCollector.cpp:2250
 collected = 3
 obs = {<nsCOMPtr_base> = {mRawPtr = 0xa097830}, <No data fields>}

 whiteNodes = {<nsTPtrArray<PtrInfo>> = {<nsTArray<PtrInfo*>> = {<nsTArray_base> = {static sEmptyHdr = {mLength = 0, mCapacity = 0, mIsAutoArray = 0},
        mHdr = 0xbf875060}, <No data fields>}, <No data fields>},
  mAutoBuf = "\000\000\000\000�\017\000\200\000\000\000\000\024U\207�\000\000\000\000\024U\207� >g\n\000\000\000\000\000\000\000\000\000�'\n\000\000\000\000\000\000\000\000�0\005�,\000\003�\000\020\000\000�P\207�\000\000\000\000\001\000\000\0008\037\234��P\207��_\v�h\037(\n\001\000\000\000�P\207��0\005�X�\036\n�_\v��P\207��1\005�X�\036\ny�\n�h;\v��\035\v� >g\ne\000\000\000�U\207�kQ\n�\216�\n�\000\000\000\000�U\207�\000\000\000\000�U\207��a\n\n\000\000\000\000\000\000\000\000�U\207�\024U\207�Ƞ\a\n\224T\207�P�s�"...}
 totalCollections = 0
#21 0xb7a041cd in nsCycleCollector_collect () at nsCycleCollector.cpp:2898
No locals.

#22 0xb75ff2ae in nsJSContext::CC () at nsJSEnvironment.cpp:3346
No locals.
#23 0xb75ff37e in nsJSContext::MaybeCC (aHigherProbability=1)
    at nsJSEnvironment.cpp:3397
No locals.

#24 0xb75ff731 in nsUserActivityObserver::Observe (this=0xa505530,
    aSubject=0x0, aTopic=0xb7b6b3d4 "user-interaction-inactive", aData=0x0)
    at nsJSEnvironment.cpp:291
 higherProbability = 6
#25 0xb79d304c in nsObserverList::NotifyObservers (this=0xa2205a0,
    aSubject=0x0, aTopic=0xb7b6b3d4 "user-interaction-inactive", someData=0x0)
    at nsObserverList.cpp:128
 i = 1
 observers = {<nsCOMArray_base> = {mArray = {
      mImpl = 0xa60137a0}}, <No data fields>}
#26 0xb79d331a in nsObserverService::NotifyObservers (this=0xa097830,
    aSubject=0x0, aTopic=0xb7b6b3d4 "user-interaction-inactive", someData=0x0)
    at nsObserverService.cpp:181
No locals.

#27 0xb7528956 in nsUITimerCallback::Notify (this=0xa5fc8e8, aTimer=0xa5fcb60)
    at nsEventStateManager.cpp:210
 rv = 0
 obs = {<nsCOMPtr_base> = {mRawPtr = 0xa097830}, <No data fields>}

#28 0xb79fb1d6 in nsTimerImpl::Fire (this=0xa5fcb60) at nsTimerImpl.cpp:403
 now = 1261683976
 timeout = <value optimized out>
 callback = {c = 0xa5fc8e8, i = 0xa5fc8e8, o = 0xa5fc8e8}
 callbackType = 1
#29 0xb79fb24b in nsTimerEvent::Run (this=0x1baf8ea0) at nsTimerImpl.cpp:490
No locals.
#30 0xb79f8d00 in nsThread::ProcessNextEvent (this=0xa06d118, mayWait=1,
    result=0xbf8790d4) at nsThread.cpp:510
 notifyGlobalObserver = 1
 obs = {<nsCOMPtr_base> = {mRawPtr = 0xa437e04}, <No data fields>}
 event = {<nsCOMPtr_base> = {mRawPtr = 0x1baf8ea0}, <No data fields>}
 rv = 0
#31 0xb79c9624 in NS_ProcessNextEvent_P (thread=0x2042, mayWait=1)
    at nsThreadUtils.cpp:227
 val = <value optimized out>
#32 0xb794c780 in nsBaseAppShell::Run (this=0xa437e00)
    at nsBaseAppShell.cpp:170
 thread = (class nsIThread *) 0xa06d118
#33 0xb77e1ed8 in nsAppStartup::Run (this=0xa473540) at nsAppStartup.cpp:181
 rv = <value optimized out>

#34 0xb72456d8 in XRE_main (argc=2, argv=0xbf87c834, aAppData=0x9fe7838)
    at nsAppRunner.cpp:3213
 obsService = {<nsCOMPtr_base> = {
    mRawPtr = 0xa097830}, <No data fields>}
 remoteService = {<nsCOMPtr_base> = {
    mRawPtr = 0xa657378}, <No data fields>}
 appStartup = {<nsCOMPtr_base> = {
    mRawPtr = 0xa473540}, <No data fields>}
 workingDir = {<nsCOMPtr_base> = {
    mRawPtr = 0xa492008}, <No data fields>}
 chromeObserver = {<nsCOMPtr_base> = {
    mRawPtr = 0xa0c9f60}, <No data fields>}
 cmdLine = {<nsCOMPtr_base> = {mRawPtr = 0xa490440}, <No data fields>}
 noEMRestart = <value optimized out>

 xpcom = {mServiceManager = 0xa0754e4}
 desktopStartupIDEnv = <value optimized out>
 desktopStartupID = {<nsFixedCString> = {<nsCString> = {<nsACString_internal> = {<nsCSubstring_base> = {<No data fields>}, mData = 0xbf879548 "",
        mLength = 0, mFlags = 65553}, <No data fields>}, mFixedCapacity = 63,
    mFixedBuf = 0xbf879548 ""},
  mStorage = "\000\225\207�\236-��Xz�\t��\004\bx\225\207�X\035��\204\226\207�\001\000\000\000��\236���\004\b\\x�\th\226\207�\230\225\207���\004\bh\226\207�\000\000\000"}
 xremotearg = <value optimized out>
 upgraded = 0
 appInitiatedRestart = <value optimized out>
 dirProvider = {<nsIDirectoryServiceProvider2> = {<nsIDirectoryServiceProvider> = {<nsISupports> = {
        _vptr.nsISupports = 0xb7bd2028}, <No data fields>}, <No data fields>}, <nsIProfileStartup> = {<nsISupports> = {
      _vptr.nsISupports = 0xb7bd204c}, <No data fields>},
  mAppProvider = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>},
  mGREDir = {<nsCOMPtr_base> = {mRawPtr = 0x9fe7a58}, <No data fields>},
  mSysPluginDir = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>},
  mXULAppDir = {<nsCOMPtr_base> = {mRawPtr = 0x9fe79b8}, <No data fields>},
  mProfileDir = {<nsCOMPtr_base> = {mRawPtr = 0xa05cb38}, <No data fields>},
  mProfileLocalDir = {<nsCOMPtr_base> = {
      mRawPtr = 0xa05cbb0}, <No data fields>}, mProfileNotified = 1 '\001',
  mExtensionsLoaded = 1 '\001', mAppBundleDirectories = {<nsCOMArray_base> = {
      mArray = {mImpl = 0x0}}, <No data fields>},
  mExtensionDirectories = {<nsCOMArray_base> = {mArray = {
        mImpl = 0xa0938c0}}, <No data fields>},
  mThemeDirectories = {<nsCOMArray_base> = {mArray = {
        mImpl = 0xa0938f0}}, <No data fields>}}
 display = (GdkDisplay *) 0xa01e028
 nativeApp = {<nsCOMPtr_base> = {mRawPtr = 0xa02df98}, <No data fields>}
 desktopStartupIDPtr = 0x0
 startOffline = 0
 profLD = {<nsCOMPtr_base> = {mRawPtr = 0xa05cbb0}, <No data fields>}
 profD = {<nsCOMPtr_base> = {mRawPtr = 0xa05cb38}, <No data fields>}
 needsRestart = 0
 canRun = 1
 profileLock = {<nsCOMPtr_base> = {
    mRawPtr = 0xa01de08}, <No data fields>}
 profileName = {<nsFixedCString> = {<nsCString> = {<nsACString_internal> = {<nsCSubstring_base> = {<No data fields>}, mData = 0xbf8794f4 "default",
        mLength = 7, mFlags = 65553}, <No data fields>}, mFixedCapacity = 63,
    mFixedBuf = 0xbf8794f4 "default"},
  mStorage = "default\000@���t\000\000\000@���(\225\207���\001�t\000\000\000h\226\207�H\225\207�}N̷`z�\t�\177ȷH\225\207��\003\237�`z�\t"}
 version = {<nsFixedCString> = {<nsCString> = {<nsACString_internal> = {<nsCSubstring_base> = {<No data fields>},
        mData = 0xbf8794a0 "3.0.5_2008111318/2008121622", mLength = 27,
        mFlags = 65553}, <No data fields>}, mFixedCapacity = 63,
    mFixedBuf = 0xbf8794a0 "3.0.5_2008111318/2008121622"},
  mStorage = "3.0.5_2008111318/2008121622\000Pz�\t�y�\t\204\226\207�\002\000\000\000\000\000\000\000�y�\t�\177ȷ�\224\207��\003\237�"}
 osABI = {<nsCString> = {<nsACString_internal> = {<nsCSubstring_base> = {<No data fields>}, mData = 0xb7a81a6e "Linux_x86-gcc3", mLength = 14,
      mFlags = 1}, <No data fields>}, <No data fields>}
 versionOK = <value optimized out>
 rv = 0
 ar = <value optimized out>
 gtkModules = <value optimized out>
 override = 0x0
 appData = {<nsXREAppData> = {
size = 56, directory = 0x9fe79b8,
    vendor = 0x9fe82f8 "Mozilla", name = 0x9fe82d8 "Firefox",
    version = 0x9fe82e8 "3.0.5", buildID = 0x9fd8c10 "2008111318",
    ID = 0x9fe7af8 "{ec8030f7-c20a-464f-9b0e-13a3a9e97384}",
    copyright = 0x9fe7b28 "Copyright (c) 1998 - 2008 mozilla.org", flags = 6,
    xreDirectory = 0x9fe7a58, minVersion = 0x9fd8c20 "1.9.0.1",
    maxVersion = 0x9fd8c30 "1.9.0.*",
    crashReporterURL = 0x9fe7b58 "https://crash-reports.mozilla.com/submit",
    profile = 0x0}, <No data fields>}
 iniFile = {<nsCOMPtr_base> = {mRawPtr = 0x9fe7b88}, <No data fields>}
 localIniFile = {<nsCOMPtr_base> = {
    mRawPtr = 0x9fe7b88}, <No data fields>}
 parser = {
  mSections = {<nsBaseHashtable<nsDepCharHashKey, nsAutoPtr<nsINIParser_internal::INIValue>, nsINIParser_internal::INIValue*>> = {<nsTHashtable<nsBaseHashtableET<nsDepCharHashKey, nsAutoPtr<nsINIParser_internal::INIValue> > >> = {
        mTable = {ops = 0xb7c9e5dc, data = 0x0, hashShift = 28,
          maxAlphaFrac = 192 '�', minAlphaFrac = 64 '@', entrySize = 12,
          entryCount = 1, removedCount = 0, generation = 0,
          entryStore = 0x9fe7d68 ""}}, <No data fields>}, <No data fields>},
  mFileContents = {mRawPtr = 0x9fe7e30 "[Build"}}
 i = <value optimized out>
#35 0x080491ab in ?? ()
No symbol table info available.

#36 0xb7db6685 in __libc_start_main () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#37 0x08048d11 in ?? ()
No symbol table info available.

Revision history for this message
Alexander Sack (asac) wrote :

can you reproduce this?

Changed in firefox-3.0:
status: New → Incomplete
Revision history for this message
Brian J. Murrell (brian-interlinx) wrote : Re: [Bug 309415] Re: SIGABRT in nsDeque::GrowCapacity

On Mon, 2008-12-22 at 17:05 +0000, Alexander Sack wrote:
> can you reproduce this?

No. It happened at random. It's an "abort()" complete with stack
trace, so it should be traceable in the code.

Revision history for this message
xteejx (xteejx) wrote :

Thank you for reporting this to us and helping to make Ubuntu better. Ubuntu has been upgraded to the later firefox-3.5. Can you test with the latest Ubuntu release (Live CD is available) and see if you can reproduce this problem? If so, please allow apport to automatically file a new bug report for this.

Changed in firefox-3.0 (Ubuntu):
status: Incomplete → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.