Firefox-3.0.5 crashes when drag-dropping folder bookmark sidebar

[Remove Me]

Binary package hint: mozilla-firefox

The possible sequence of event is: create a directory in the sidebar. It is placed
at the end of list (which is quite annoying, why not place it close to the pointer?).
Than I try to move it up, where I need it, release the button and firefox crashes.

Core was generated by `/usr/lib/firefox-3.0.5/firefox'.
Program terminated with signal 11, Segmentation fault.
#0 0x00007fa37a506fab in raise () from /lib/libpthread.so.0
#0 0x00007fa37a506fab in raise () from /lib/libpthread.so.0
#1 0x00007fa3785f3327 in nsProfileLock::FatalSignalHandler (signo=11) at nsProfileLock.cpp:212
#2 <signal handler called>
#3 0x0000000000000021 in ?? ()
#4 0x00007fa378c82afe in nsNavHistoryResult::OnItemMoved (this=0x4a3a860, aItemId=1633, aOldParent=248, aOldIndex=31, aNewParent=248, aNewIndex=19) at nsNavHistoryResult.cpp:4244
#5 0x00007fa378c8e58c in nsNavBookmarks::MoveItem (this=0x2408600, aItemId=1633, aNewParent=248, aIndex=19) at nsNavBookmarks.cpp:1707
#6 0x00007fa378d768ec in NS_InvokeByIndex_P (that=0x2408600, methodIndex=15, paramCount=3, params=0x1f) at xptcinvoke_x86_64_linux.cpp:208
#7 0x00007fa378615b71 in XPCWrappedNative::CallMethod (ccx=@0x7fff829280f0, mode=<value optimized out>) at xpcwrappednative.cpp:2393
#8 0x00007fa37861d901 in XPC_WN_CallMethod (cx=0x14cfe00, obj=<value optimized out>, argc=<value optimized out>, argv=<value optimized out>, vp=<value optimized out>) at xpcwrappednativejsops.cpp:1473
#9 0x00007fa379571f2a in js_Invoke (cx=0x14cfe00, argc=3, vp=0x5986390, flags=2) at jsinterp.c:1297
#10 0x00007fa379564d17 in js_Interpret (cx=0x14cfe00) at jsinterp.c:4857
#11 0x00007fa379571f71 in js_Invoke (cx=0x14cfe00, argc=0, vp=0x5986380, flags=0) at jsinterp.c:1313
#12 0x00007fa3786130d3 in nsXPCWrappedJSClass::CallMethod (this=0x4893860, wrapper=<value optimized out>, methodIndex=3, info=0x12e9b08, nativeParams=0x7fff82928b80) at xpcwrappedjsclass.cpp:1523
#13 0x00007fa378d774d9 in PrepareAndDispatch (self=0x5555a20, methodIndex=<value optimized out>, args=0x7fff82928d00, gpregs=0x7fff82928c80, fpregs=0x7fff82928cb0) at xptcstubs_x86_64_linux.cpp:151
#14 0x00007fa378d76987 in SharedStub () from /usr/lib/xulrunner-1.9.0.5/libxul.so
#15 0x00007fa378d768ec in NS_InvokeByIndex_P (that=0x5555a20, methodIndex=3, paramCount=0, params=0x1f) at xptcinvoke_x86_64_linux.cpp:208
#16 0x00007fa378615b71 in XPCWrappedNative::CallMethod (ccx=@0x7fff82929370, mode=<value optimized out>) at xpcwrappednative.cpp:2393
#17 0x00007fa37861d901 in XPC_WN_CallMethod (cx=0x14cfe00, obj=<value optimized out>, argc=<value optimized out>, argv=<value optimized out>, vp=<value optimized out>) at xpcwrappednativejsops.cpp:1473
#18 0x00007fa379571f2a in js_Invoke (cx=0x14cfe00, argc=0, vp=0x5986360, flags=2) at jsinterp.c:1297
#19 0x00007fa379564d17 in js_Interpret (cx=0x14cfe00) at jsinterp.c:4857
#20 0x00007fa379571f71 in js_Invoke (cx=0x14cfe00, argc=0, vp=0x5986238, flags=0) at jsinterp.c:1313
#21 0x00007fa3786130d3 in nsXPCWrappedJSClass::CallMethod (this=0x4893860, wrapper=<value optimized out>, methodIndex=3, info=0x12e9b08, nativeParams=0x7fff82929e00) at xpcwrappedjsclass.cpp:1523
#22 0x00007fa378d774d9 in PrepareAndDispatch (self=0x45ca6b0, methodIndex=<value optimized out>, args=0x7fff82929f80, gpregs=0x7fff82929f00, fpregs=0x7fff82929f30) at xptcstubs_x86_64_linux.cpp:151
#23 0x00007fa378d76987 in SharedStub () from /usr/lib/xulrunner-1.9.0.5/libxul.so
#24 0x00007fa378b5b6d3 in nsTransactionManager::BeginTransaction (this=0x45911d0, aTransaction=<value optimized out>) at nsTransactionManager.cpp:1071
#25 0x00007fa378b5a61d in nsTransactionManager::DoTransaction (this=0x45911d0, aTransaction=0x45ca6b0) at nsTransactionManager.cpp:132
#26 0x00007fa378d768ec in NS_InvokeByIndex_P (that=0x45911d0, methodIndex=3, paramCount=1, params=0x1f) at xptcinvoke_x86_64_linux.cpp:208
#27 0x00007fa378615b71 in XPCWrappedNative::CallMethod (ccx=@0x7fff8292a650, mode=<value optimized out>) at xpcwrappednative.cpp:2393
#28 0x00007fa37861d901 in XPC_WN_CallMethod (cx=0x14cfe00, obj=<value optimized out>, argc=<value optimized out>, argv=<value optimized out>, vp=<value optimized out>) at xpcwrappednativejsops.cpp:1473
#29 0x00007fa379571f2a in js_Invoke (cx=0x14cfe00, argc=1, vp=0x5986210, flags=2) at jsinterp.c:1297
#30 0x00007fa379564d17 in js_Interpret (cx=0x14cfe00) at jsinterp.c:4857
#31 0x00007fa379571f71 in js_Invoke (cx=0x14cfe00, argc=1, vp=0x59861f8, flags=0) at jsinterp.c:1313
#32 0x00007fa3786130d3 in nsXPCWrappedJSClass::CallMethod (this=0x4591720, wrapper=<value optimized out>, methodIndex=3, info=0x223a580, nativeParams=0x7fff8292b0e0) at xpcwrappedjsclass.cpp:1523
#33 0x00007fa378d774d9 in PrepareAndDispatch (self=0x45916d0, methodIndex=<value optimized out>, args=0x7fff8292b1e0, gpregs=0x7fff8292b1e0, fpregs=0x7fff8292b210) at xptcstubs_x86_64_linux.cpp:151
#34 0x00007fa378d76987 in SharedStub () from /usr/lib/xulrunner-1.9.0.5/libxul.so
#35 0x00007fa378d768ec in NS_InvokeByIndex_P (that=0x45916d0, methodIndex=3, paramCount=1, params=0x1f) at xptcinvoke_x86_64_linux.cpp:208
#36 0x00007fa378615b71 in XPCWrappedNative::CallMethod (ccx=@0x7fff8292b8d0, mode=<value optimized out>) at xpcwrappednative.cpp:2393
#37 0x00007fa37861d901 in XPC_WN_CallMethod (cx=0x14cfe00, obj=<value optimized out>, argc=<value optimized out>, argv=<value optimized out>, vp=<value optimized out>) at xpcwrappednativejsops.cpp:1473
#38 0x00007fa379571f2a in js_Invoke (cx=0x14cfe00, argc=1, vp=0x59861a0, flags=2) at jsinterp.c:1297
#39 0x00007fa379564d17 in js_Interpret (cx=0x14cfe00) at jsinterp.c:4857
#40 0x00007fa379571f71 in js_Invoke (cx=0x14cfe00, argc=2, vp=0x5986008, flags=0) at jsinterp.c:1313
#41 0x00007fa3786130d3 in nsXPCWrappedJSClass::CallMethod (this=0x4f29030, wrapper=<value optimized out>, methodIndex=15, info=0x128f3f0, nativeParams=0x7fff8292c360) at xpcwrappedjsclass.cpp:1523
#42 0x00007fa378d774d9 in PrepareAndDispatch (self=0x4f292b0, methodIndex=<value optimized out>, args=0x7fff8292c460, gpregs=0x7fff8292c460, fpregs=0x7fff8292c490) at xptcstubs_x86_64_linux.cpp:151
#43 0x00007fa378d76987 in SharedStub () from /usr/lib/xulrunner-1.9.0.5/libxul.so
#44 0x00007fa3789ea772 in nsTreeBodyFrame::HandleEvent (this=0x4ca5768, aPresContext=<value optimized out>, aEvent=0x7fff8292c920, aEventStatus=<value optimized out>) at nsTreeBodyFrame.cpp:2698
#45 0x00007fa3788c7b43 in nsEventTargetChainItem::HandleEventTargetChain (this=0x32f4a18, aVisitor=@0x7fff8292c5f0, aFlags=6, aCallback=0x7fff8292c680) at nsEventDispatcher.cpp:313
#46 0x00007fa3788c7e98 in nsEventDispatcher::Dispatch (aTarget=<value optimized out>, aPresContext=<value optimized out>, aEvent=0x7fff8292c920, aDOMEvent=0x0, aEventStatus=0x7fff8292c80c, aCallback=0x7fff8292c680) at nsEventDispatcher.cpp:483
#47 0x00007fa3787519a8 in PresShell::HandleEventInternal (this=0x5072240, aEvent=0x7fff8292c920, aView=0x4f288e0, aStatus=0x7fff8292c80c) at nsPresShell.cpp:5929
#48 0x00007fa3787520d4 in PresShell::HandlePositionedEvent (this=0x5072240, aView=0x4f288e0, aTargetFrame=<value optimized out>, aEvent=0x7fff8292c920, aEventStatus=0x7fff8292c80c) at nsPresShell.cpp:5817
#49 0x00007fa3787522ff in PresShell::HandleEvent (this=0x1473e00, aView=0x13e88f0, aEvent=0x7fff8292c920, aEventStatus=0x7fff8292c80c) at nsPresShell.cpp:5670
#50 0x00007fa37897a84f in nsViewManager::HandleEvent (this=<value optimized out>, aView=0x13e88f0, aPoint=<value optimized out>, aEvent=0x7fff8292c920, aCaptured=248) at nsViewManager.cpp:1382
#51 0x00007fa37897c290 in nsViewManager::DispatchEvent (this=0x4f28850, aEvent=0x7fff8292c920, aStatus=0x7fff8292c8ec) at nsViewManager.cpp:1337
#52 0x00007fa378977431 in HandleEvent (aEvent=0x7fff8292c920) at nsView.cpp:168
#53 0x00007fa378cb3721 in nsCommonWidget::DispatchEvent (this=0x4cae760, aEvent=0x7fff8292c920, aStatus=@0x7fff8292c9d4) at nsCommonWidget.cpp:158
#54 0x00007fa378cad682 in nsWindow::OnDragDropEvent (this=<value optimized out>, aWidget=0xcd9010, aDragContext=0x219e4e0, aX=241, aY=<value optimized out>, aTime=1856811, aData=0x0) at nsWindow.cpp:2893
#55 0x00007fa378cad7a7 in drag_drop_event_cb (aWidget=0xcd9010, aDragContext=0x219e4e0, aX=241, aY=223, aTime=1856811, aData=0x0) at nsWindow.cpp:4975
#56 0x00007fa37784b0b5 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#57 0x000000300820d25d in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#58 0x0000003008222f5d in ?? () from /usr/lib/libgobject-2.0.so.0
#59 0x000000300822448a in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#60 0x0000003008224987 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#61 0x00007fa37797004b in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#62 0x00007fa37796e83c in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#63 0x00007fa37796e996 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#64 0x00007fa37796fdf2 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#65 0x00007fa377845384 in gtk_main_do_event () from /usr/lib/libgtk-x11-2.0.so.0
#66 0x00007fa3774c809c in ?? () from /usr/lib/libgdk-x11-2.0.so.0
#67 0x0000003004639d3b in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#68 0x000000300463d50d in ?? () from /usr/lib/libglib-2.0.so.0
#69 0x000000300463d6cb in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#70 0x00007fa378cc5e5d in nsBaseAppShell::DoProcessNextNativeEvent (this=0x3d4ad60, mayWait=1633) at nsBaseAppShell.cpp:151
#71 0x00007fa378cc5fab in nsBaseAppShell::OnProcessNextEvent (this=0xc7aa40, thr=0xb02400, mayWait=1, recursionDepth=<value optimized out>) at nsBaseAppShell.cpp:296
#72 0x00007fa378d6c5ad in nsThread::ProcessNextEvent (this=0xb02400, mayWait=1, result=0x7fff8292d42c) at nsThread.cpp:497
#73 0x00007fa378d418c2 in NS_ProcessNextEvent_P (thread=0x3d4ad60, mayWait=1) at nsThreadUtils.cpp:227
#74 0x00007fa378cc60c9 in nsBaseAppShell::Run (this=0xc7aa40) at nsBaseAppShell.cpp:170
#75 0x00007fa378b660a9 in nsAppStartup::Run (this=0xcf7820) at nsAppStartup.cpp:181
#76 0x00007fa3785ede82 in XRE_main (argc=<value optimized out>, argv=<value optimized out>, aAppData=<value optimized out>) at nsAppRunner.cpp:3213
#77 0x00000000004016b4 in ?? ()
#78 0x00007fa3797f6466 in __libc_start_main () from /lib/libc.so.6
#79 0x00000000004011b9 in ?? ()
#80 0x00007fff82930e18 in ?? ()
#81 0x000000000000001c in ?? ()
#82 0x0000000000000001 in ?? ()
#83 0x00007fff82932b97 in ?? ()
#84 0x0000000000000000 in ?? ()

[Andreas Moog (ampelbein)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. You reported this bug a while ago and there hasn't been any activity in it recently. We were wondering if this is still an issue for you. Can you try with the latest Ubuntu release? Thanks in advance.

[Remove Me (remove-me)]

Don't know. I stopped using Firefox 3.0.* and removed it from my systems long time ago.

You know, it would be much nicer if you (or Ubuntu, I don't know who is more stupid, or nasty, in this case) realize that it is a fscking bit annoying to call back regarding a bug report which is _that_ old.

And please stop assuming I am trying to make Ubuntu better. I don't give a fscking dime if Ubuntu get better or disappear altogether. The project is a primitive integrator and not especially good at that.

[John Vivirito (gnomefreak)]

Alex if all you want to do is complain than please do it somewhere else.

[Remove Me (remove-me)]

If that was all I wanted, I wouldn't take time to create the gdb output above, and I would do the complaining on slashdot.

OTOH, if there is a place were I can complain about how useless Ubuntu handling of bug reports is (half a year, and a version long forgotten, for fsck sake!), pray tell me.

I'm perfectly fine with a bug closed because "Bug report sent upstream" (which this wasn't), or "Cannot fix: no time" (which is ok, shit happens), and even "We don't care, please send it upstream yourself" (it's a public project, no obligations expected). I'm still fine if any such resolution happens after a fscking year.

But asking to *just* retest, without even taking a look at the matter (and no one did, I'm damn sure!)...