firefox crashed with SIGSEGV in free() [Firefox-3.5]

[Ryan]

Binary package hint: firefox-3.5

Tried to do full screen on megavideo.com TV show - Firefox crashed.

$ lsb_release -rd
Description: Ubuntu karmic (development branch)
Release: 9.10

$ apt-cache policy firefox-3.5
firefox-3.5:
  Installed: 3.5.2+nobinonly-0ubuntu2
  Candidate: 3.5.2+nobinonly-0ubuntu2
  Version table:
 *** 3.5.2+nobinonly-0ubuntu2 0
        500 http://archive.ubuntu.com karmic/main Packages
        100 /var/lib/dpkg/status

ProblemType: Crash
Architecture: i386
CrashCounter: 1
Date: Sat Aug 15 00:54:46 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/lib/firefox-3.5.2/firefox
NonfreeKernelModules: nvidia
Package: firefox-3.5 3.5.2+nobinonly-0ubuntu2
ProcCmdline: /usr/lib/firefox-3.5.2/firefox
ProcEnviron:
 LANG=en_US.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-5.24-generic
SegvAnalysis:
 Segfault happened at: 0xe1c422 <__kernel_vsyscall+2>: ret
 PC (0x00e1c422) ok
 Reason could not be automatically determined.
Signal: 11
SourcePackage: firefox-3.5
StacktraceTop:
 ?? () from /lib/tls/i686/cmov/libc.so.6
 free () from /lib/tls/i686/cmov/libc.so.6
 ?? () from /usr/lib/libGL.so.1
 ?? ()
 ?? ()
Title: firefox crashed with SIGSEGV in free()
Uname: Linux 2.6.31-5-generic i686
UserGroups: adm admin audio cdrom dialout dip floppy fuse lpadmin netdev plugdev vboxusers video

[Apport retracing service (apport)]

StacktraceTop:_int_free (av=<value optimized out>, p=0xa8a78f38) at malloc.c:4875
*__GI___libc_free (mem=0xa8a78f40) at malloc.c:3716
?? () from /usr/lib/libGL.so.1

[Micah Gersten (micahg)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. This particular bug has already been reported and is a duplicate of bug 333127, so it is being marked as such. Please look at the other bug report to see if there is any missing information that you can provide, or to see if there is a workaround for the bug. Additionally, any further discussion regarding the bug should occur in the other report. Please continue to report any other bugs you may find.