firefox crashed [@nsGenericElement::HandleDOMEvent] [@PresShell::HandleEventInternal] [@PresShell::HandleEvent]

Bug #72366 reported by Ross Golder
6
Affects Status Importance Assigned to Milestone
firefox (Ubuntu)
Invalid
High
Mozilla Bugs

Bug Description

... Random crashing

Binary Package Hint: firefox

From the Attached Crash Report:
Distro Release: Ubuntu 6.10
System Arch: x86_64
Package (version): firefox (2.0+0dfsg-0ubuntu3)
Source Package: firefox

Original Description:
This time it crashed clicking a link. It does tend to crash much more often recently. I hope this report helps.

Extracted from symbolized stacktrace:
(file: http://launchpadlibrarian.net/7399553/Stacktrace)
...
#2 <signal handler called>
#3 nsGenericElement::HandleDOMEvent (this=0x2264d10, aPresContext=0x1754f10,
#4 PresShell::HandleEventInternal (this=0x1b3c250,
#5 PresShell::HandleEvent (this=0x1b3c250,
#6 nsViewManager::HandleEvent (this=0x1bc1330,
#7 nsViewManager::DispatchEvent (this=0x1bc1330,
#8 HandleEvent (aEvent=0x7fff86f4f260)
#9 nsCommonWidget::DispatchEvent (this=0x16ffc20,
#10 nsWindow::OnKeyPressEvent (this=0x16ffc20,
#11 _gtk_marshal_BOOLEAN__BOXED ()
...

Revision history for this message
Ross Golder (ross-golder) wrote :
David Farning (dfarning)
Changed in firefox:
status: Unconfirmed → Confirmed
David Farning (dfarning)
Changed in firefox:
assignee: nobody → mozillateam
importance: Undecided → Medium
David Farning (dfarning)
Changed in firefox:
assignee: mozillateam → mozilla-bugs
Revision history for this message
Hilario J. Montoliu (hjmf) (hmontoliu) wrote :

Tagging as mt-confirm. The crash report has debugging symbols.

Changed in firefox:
importance: Medium → High
status: Confirmed → Needs Info
Revision history for this message
Hilario J. Montoliu (hjmf) (hmontoliu) wrote : Retraced Stacktrace from original report

From the stacktrace:

...
#0 raise () from /lib/libpthread.so.0#1 nsProfileLock::FatalSignalHandler (signo=11)#2 <signal handler called>
#3 nsGenericElement::HandleDOMEvent (this=0x2264d10, aPresContext=0x1754f10,
#4 PresShell::HandleEventInternal (this=0x1b3c250,
#5 PresShell::HandleEvent (this=0x1b3c250,
#6 nsViewManager::HandleEvent (this=0x1bc1330,
#7 nsViewManager::DispatchEvent (this=0x1bc1330,
#8 HandleEvent (aEvent=0x7fff86f4f260)
#9 nsCommonWidget::DispatchEvent (this=0x16ffc20,
#10 nsWindow::OnKeyPressEvent (this=0x16ffc20,
#11 _gtk_marshal_BOOLEAN__BOXED ()
#12 g_closure_invoke ()
#13 g_signal_chain_from_overridden ()
...

description: updated
Revision history for this message
Hilario J. Montoliu (hjmf) (hmontoliu) wrote : Retraced Thread Stacktrace from original report
Revision history for this message
Bob Cortez (rjcortez) wrote : Re: Random crashing

I've been having similar random crashing. Freezes up my entire system and I have to power off to reboot the system.

Revision history for this message
johannes (j00hannes) wrote :

i can confirm that it crashes very often and randomly for me too.

i noticed some actions it doesn't like at all, for example searching for a text in the source code window or within a textarea of the previous site (means going back and then searching).

Revision history for this message
johannes (j00hannes) wrote :

ah, yes, there is no crash report at all because the program only disappears without saying something.

Revision history for this message
Hilario J. Montoliu (hjmf) (hmontoliu) wrote : Re: [Bug 72366] Re: Random crashing

El mié, 02-05-2007 a las 08:18 +0000, johannes escribió:
> ah, yes, there is no crash report at all because the program only
> disappears without saying something.

Johannes, there should be a crash report located at /var/crash; If it is
there, please open a *new* bug report.

Thanks in advance.
--
Hilario J. Montoliu <email address hidden>

Revision history for this message
johannes (j00hannes) wrote :

ok, next time.

On 5/4/07, Hilario J. Montoliu (hjmf) <email address hidden> wrote:
> Johannes, there should be a crash report located at /var/crash; If it is
> there, please open a *new* bug report.
>
> Thanks in advance.

Revision history for this message
johannes (j00hannes) wrote :

hi,

now it crashed again, but there is no current crash report at all.
from one second to next it silently disappeared.

what can i do now?

johannes

On 5/4/07, Hilario J. Montoliu (hjmf) <email address hidden> wrote:
> El mié, 02-05-2007 a las 08:18 +0000, johannes escribió:
> Johannes, there should be a crash report located at /var/crash; If it is
> there, please open a *new* bug report.
>
> Thanks in advance.
> --
> Hilario J. Montoliu <email address hidden>

Revision history for this message
Alexander Sack (asac) wrote :

On Tue, May 08, 2007 at 09:11:21PM -0000, johannes wrote:
> hi,
>
> now it crashed again, but there is no current crash report at all.
> from one second to next it silently disappeared.
>
> what can i do now?

Not much. If you can reproduce at some point, please open a new bug
and attach the crash file next time.

 - Alexander

Revision history for this message
johannes (j00hannes) wrote :

hi alexander,

there was _NO_ crash file after crashing.

On 5/11/07, Alexander Sack <email address hidden> wrote:
> On Tue, May 08, 2007 at 09:11:21PM -0000, johannes wrote:
> > hi,
> >
> > now it crashed again, but there is no current crash report at all.
> > from one second to next it silently disappeared.
> >
> > what can i do now?
>
> Not much. If you can reproduce at some point, please open a new bug
> and attach the crash file next time.
>
> - Alexander

Revision history for this message
AleksanderAdamowski (aadamowski) wrote : Re: Random crashing
Download full text (6.6 KiB)

I don't know if the cause is the same, but I experience occasional crashes of firefox 2.0.0.3+1-0ubuntu2 on Feisty Fawn.

Here's the backtrace from a coredump:

(gdb) thread apply all bt

Thread 10 (process 22842):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb770c893 in poll () from /lib/tls/i686/cmov/libc.so.6
#2 0xb7d7bc29 in PR_Poll (pds=0x80e0378, npds=7, timeout=65535000) at ptio.c:3877
#3 0xb70dd6db in nsSocketTransportService::Poll (this=0x80dfe90, interval=0xb6ff2368) at nsSocketTransportService2.cpp:361
#4 0xb70ddf15 in nsSocketTransportService::Run (this=0x80dfe90) at nsSocketTransportService2.cpp:577
#5 0xb7e221cb in nsThread::Main (arg=0x80e0680) at nsThread.cpp:118
#6 0xb7d7fe9d in _pt_root (arg=0x80e0700) at ptthread.c:220
#7 0xb7d4731b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#8 0xb771657e in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 9 (process 22847):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb7d4b84c in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xb7d79093 in pt_TimedWait (cv=0x807e57c, ml=0x807f138, timeout=<value optimized out>) at ptsynch.c:280
#3 0xb7d79ed1 in PR_WaitCondVar (cvar=0x807e578, timeout=127) at ptsynch.c:407
#4 0xb7e244c6 in TimerThread::Run (this=0x807e498) at TimerThread.cpp:318
#5 0xb7e221cb in nsThread::Main (arg=0x81c6aa0) at nsThread.cpp:118
#6 0xb7d7fe9d in _pt_root (arg=0x81cf018) at ptthread.c:220
#7 0xb7d4731b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#8 0xb771657e in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 8 (process 22851):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb7d4b84c in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xb7d79093 in pt_TimedWait (cv=0x8663114, ml=0x86630b0, timeout=<value optimized out>) at ptsynch.c:280
#3 0xb7d79ed1 in PR_WaitCondVar (cvar=0x8663110, timeout=250) at ptsynch.c:407
#4 0xb36b11f7 in nsSSLThread::Run (this=0x8663088) at nsSSLThread.cpp:879
#5 0xb36b0300 in nsPSMBackgroundThread::nsThreadRunner (arg=0x8663088) at nsPSMBackgroundThread.cpp:44
#6 0xb7d7fe9d in _pt_root (arg=0x8663150) at ptthread.c:220
#7 0xb7d4731b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#8 0xb771657e in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 7 (process 22852):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb7d4b84c in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xb7d79093 in pt_TimedWait (cv=0x866337c, ml=0x8663318, timeout=<value optimized out>) at ptsynch.c:280
#3 0xb7d79ed1 in PR_WaitCondVar (cvar=0x8663378, timeout=250) at ptsynch.c:407
#4 0xb36b1f70 in nsCertVerificationThread::Run (this=0x86632c8) at nsCertVerificationThread.cpp:142
#5 0xb36b0300 in nsPSMBackgroundThread::nsThreadRunner (arg=0x86632c8) at nsPSMBackgroundThread.cpp:44
#6 0xb7d7fe9d in _pt_root (arg=0x86633b8) at ptthread.c:220
#7 0xb7d4731b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#8 0xb771657e in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 6 (process 22854):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb7d4b5c6 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/l...

Read more...

Revision history for this message
Alexander Sack (asac) wrote :

we need a proper summary first

Changed in firefox:
importance: High → Undecided
Revision history for this message
johannes (j00hannes) wrote :

it crashed again. this time when i had just opened the personalised google page, so the error can maybe be found in the javascript part.

Revision history for this message
johannes (j00hannes) wrote :

this time the program terminated on alt+tab

Revision history for this message
AleksanderAdamowski (aadamowski) wrote :

Johannes, please install firefox-dbg and try submitting a backtrace (e.g. from a coredump) - set your core file ulimit high using "ulimit -c 1000000" in a terminal window, then launch firefox from this same terminal window.

When it crashes, it should leave a core file in your home directory.

Analyse it with gdb:

gdb /usr/lib/firefox/firefox-bin core_file

....
gdb reads the symbols
...

(gdb) thread apply all bt
... here comes the backtrace ...

Post the resulting backtrace(s) here in this bug.

Revision history for this message
johannes (j00hannes) wrote :
Download full text (10.7 KiB)

here comes the backtrace:

Thread 10 (process 9154):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb77ec893 in poll () from /lib/tls/i686/cmov/libc.so.6
#2 0xb7e5bc39 in PR_Poll (pds=0x80df400, npds=3, timeout=65535000) at ptio.c:3877
#3 0xb71586db in nsSocketTransportService::Poll (this=0x80def18, interval=0xb706d368)
    at nsSocketTransportService2.cpp:361
#4 0xb7158f15 in nsSocketTransportService::Run (this=0x80def18) at nsSocketTransportService2.cpp:577
#5 0xb7efc1cb in nsThread::Main (arg=0x80d2f58) at nsThread.cpp:118
#6 0xb7e5fead in _pt_root (arg=0x80d2fd8) at ptthread.c:220
#7 0xb7e2731b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#8 0xb77f657e in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 9 (process 9159):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb7e2b84c in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xb7e590a3 in pt_TimedWait (cv=0x808208c, ml=0x8082140, timeout=<value optimized out>) at ptsynch.c:280
#3 0xb7e59ee1 in PR_WaitCondVar (cvar=0x8082088, timeout=698) at ptsynch.c:407
#4 0xb7efe4c6 in TimerThread::Run (this=0x8088558) at TimerThread.cpp:318
#5 0xb7efc1cb in nsThread::Main (arg=0x816f310) at nsThread.cpp:118
#6 0xb7e5fead in _pt_root (arg=0x8178f00) at ptthread.c:220
#7 0xb7e2731b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#8 0xb77f657e in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 8 (process 9169):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb7e2b84c in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xb7e590a3 in pt_TimedWait (cv=0x84b4834, ml=0x831d230, timeout=<value optimized out>) at ptsynch.c:280
#3 0xb7e59ee1 in PR_WaitCondVar (cvar=0x84b4830, timeout=250) at ptsynch.c:407
#4 0xb1b831f7 in nsSSLThread::Run (this=0x84657c8) at nsSSLThread.cpp:879
#5 0xb1b82300 in nsPSMBackgroundThread::nsThreadRunner (arg=0x84657c8) at nsPSMBackgroundThread.cpp:44
#6 0xb7e5fead in _pt_root (arg=0x861cd88) at ptthread.c:220
#7 0xb7e2731b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#8 0xb77f657e in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 7 (process 9170):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb7e2b84c in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xb7e590a3 in pt_TimedWait (cv=0x84b4f5c, ml=0x844eb98, timeout=<value optimized out>) at ptsynch.c:280
#3 0xb7e59ee1 in PR_WaitCondVar (cvar=0x84b4f58, timeout=250) at ptsynch.c:407
#4 0xb1b83f80 in nsCertVerificationThread::Run (this=0x8624860) at nsCertVerificationThread.cpp:142
#5 0xb1b82300 in nsPSMBackgroundThread::nsThreadRunner (arg=0x8624860) at nsPSMBackgroundThread.cpp:44
#6 0xb7e5fead in _pt_root (arg=0x84db720) at ptthread.c:220
#7 0xb7e2731b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#8 0xb77f657e in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 6 (process 9175):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb7e2b5c6 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xb7e59f71 in PR_WaitCondVar (cvar=0x8774488, timeout=4294967295) at ptsynch.c:405
#3 0xaf0c0e0d in ProcessAsyncMessages () at mozStorageAsync...

Revision history for this message
johannes (j00hannes) wrote :
Download full text (6.2 KiB)

here comes a new one:

#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb7d667a2 in sem_post@GLIBC_2.0 () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xacee555d in ?? () from /usr/lib/flashplugin-nonfree/libflashplayer.so
#3 0xb522738e in ?? () from /usr/lib/libasound.so.2
#4 0x09fbd7d8 in ?? ()
#5 0x00000001 in ?? ()
#6 0xb52bcc98 in ?? () from /usr/lib/libasound.so.2
#7 0xb6fa60d8 in ?? ()
#8 0x03e7fc18 in ?? ()
#9 0xb779cff4 in ?? () from /lib/tls/i686/cmov/libc.so.6
#10 0xb6fa60a8 in ?? ()
#11 <signal handler called>
#12 0xffffe410 in __kernel_vsyscall ()
#13 0xb7725893 in poll () from /lib/tls/i686/cmov/libc.so.6
#14 0xb7d94c39 in PR_Poll (pds=0x80df408, npds=2, timeout=65535000) at ptio.c:3877
#15 0xb70916db in nsSocketTransportService::Poll (this=0x80def20, interval=0xb6fa6368)
    at nsSocketTransportService2.cpp:361
#16 0xb7091f15 in nsSocketTransportService::Run (this=0x80def20) at nsSocketTransportService2.cpp:577
#17 0xb7e351cb in nsThread::Main (arg=0x80d2f60) at nsThread.cpp:118
#18 0xb7d98ead in _pt_root (arg=0x80d2fe0) at ptthread.c:220
#19 0xb7d6031b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#20 0xb772f57e in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 8 (process 9449):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb7d6484c in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xb7d920a3 in pt_TimedWait (cv=0x8086624, ml=0x8082658, timeout=<value optimized out>) at ptsynch.c:280
#3 0xb7d92ee1 in PR_WaitCondVar (cvar=0x8086620, timeout=246) at ptsynch.c:407
#4 0xb7e374c6 in TimerThread::Run (this=0x8086560) at TimerThread.cpp:318
#5 0xb7e351cb in nsThread::Main (arg=0x816f350) at nsThread.cpp:118
#6 0xb7d98ead in _pt_root (arg=0x8178f40) at ptthread.c:220
#7 0xb7d6031b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#8 0xb772f57e in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 7 (process 9457):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb7d6484c in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xb7d920a3 in pt_TimedWait (cv=0x84a89a4, ml=0x8310b88, timeout=<value optimized out>) at ptsynch.c:280
#3 0xb7d92ee1 in PR_WaitCondVar (cvar=0x84a89a0, timeout=250) at ptsynch.c:407
#4 0xb1afd1f7 in nsSSLThread::Run (this=0x84a20c8) at nsSSLThread.cpp:879
#5 0xb1afc300 in nsPSMBackgroundThread::nsThreadRunner (arg=0x84a20c8) at nsPSMBackgroundThread.cpp:44
#6 0xb7d98ead in _pt_root (arg=0x849f168) at ptthread.c:220
#7 0xb7d6031b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#8 0xb772f57e in clone () from /lib/tls/i686/cmov/libc.so.6

Thread 6 (process 9458):
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb7d6484c in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
#2 0xb7d920a3 in pt_TimedWait (cv=0x849bba4, ml=0x83baa90, timeout=<value optimized out>) at ptsynch.c:280
#3 0xb7d92ee1 in PR_WaitCondVar (cvar=0x849bba0, timeout=250) at ptsynch.c:407
#4 0xb1afdf80 in nsCertVerificationThread::Run (this=0x853b5a0) at nsCertVerificationThread.cpp:142
#5 0xb1afc300 in nsPSMBackgroundThread::nsThreadRunner (arg=0x853b5a0) at nsPSMBackgroundThread.cpp:44
#6 0xb7d98ead in _pt_r...

Read more...

Revision history for this message
AleksanderAdamowski (aadamowski) wrote :

Also try running additionally those from gdb:

"info threads"

"bt"

This bt for all threads doesn't identify the active thread which caused the crash AFAIK...

It might be a good idea if you tried working with the nightl Firefox builds for the 2.0 branch from mozilla.org (http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-mozilla1.8/) and report the crashes to http://bugzilla.mozilla.org directly.

If the version from mozilla.org doesn't crash, though, it means that the problem is in Ubuntu version or in a plugin (e.g. Flash player).

BTW, did you try to eliminate Flash player? Maybe it is the cause of those crashes?

Revision history for this message
johannes (j00hannes) wrote :

(gdb) info threads
  9 process 9448 0xffffe410 in __kernel_vsyscall ()
  8 process 9449 0xffffe410 in __kernel_vsyscall ()
  7 process 9457 0xffffe410 in __kernel_vsyscall ()
  6 process 9458 0xffffe410 in __kernel_vsyscall ()
  5 process 9485 0xffffe410 in __kernel_vsyscall ()
  4 process 9500 0xffffe410 in __kernel_vsyscall ()
  3 process 9516 0xffffe410 in __kernel_vsyscall ()
  2 process 4850 0xffffe410 in __kernel_vsyscall ()
* 1 process 9445 0xffffe410 in __kernel_vsyscall ()

(gdb) bt
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb7d684f1 in raise () from /lib/tls/i686/cmov/libpthread.so.0
#2 0x08057836 in nsProfileLock::FatalSignalHandler (signo=-1210650636) at nsProfileLock.cpp:206
#3 <signal handler called>
#4 0xb7c5bd11 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#5 0x082aa790 in ?? ()
#6 0x00000030 in ?? ()
#7 0x00000000 in ?? ()

Revision history for this message
johannes (j00hannes) wrote :

i didn't uninstall the flashplayer and i don't know how to deactive it for a while.

but the crashes don't appear regularely, just from time to time.

Revision history for this message
John Vivirito (gnomefreak) wrote :

Can you reproduce this while running firefox in safemode using the command: firefox -safe-mode? Is everyone ablet o reproduce on 64bit 32bit ppc? so far the only one i see is 64 and yes it does matter

Revision history for this message
John Vivirito (gnomefreak) wrote :

Can someone please give us step by step instructions on how to reproduce this crash? If more than one way to do it please post that as well. including links and what needs to be done.

description: updated
Changed in firefox:
importance: Undecided → High
Revision history for this message
Hilario J. Montoliu (hjmf) (hmontoliu) wrote :

The OPs crash seems to be not related with the rest of reports. Probably the old title of this thread confused some people.

Please Bob Cortez, johannes graën and AleksanderAdamowski if you still experiment firefox crashes submit a *new* crash report for each crash.

Thank you in advance.

Revision history for this message
Hilario J. Montoliu (hjmf) (hmontoliu) wrote :

We have not received any duplicates for some time. Thus, this crash was likely due to some unique plugin extension combination or has been fixed in the meantime. Please, reopen it at any time if you have more related info.

Thanks for your contribution. Don't hesitate to submit new crashes,

H. Montoliu

Changed in firefox:
status: Incomplete → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.