MASTER firefox crash [@nsEventQueueImpl::GetYoungestActive]

[Elias Aarnio]

Binary package hint: firefox

From the Attached Crash Report:
Distro Release: Ubuntu 6.10
System Arch: i686
Package (version): firefox (2.0.0.2+0dfsg-0ubuntu0.6.10)
Source Package: firefox

Original Description:
Firefox 2.0.0.2 spontaneous crash while filling form, Beryl
While having 5 other tabs open, Firefox crashed while filling a text form at http://forum.ubuntu-fi.org/. The addition installed is MediaPlayerConnectivity. None of the tabs contained any streaming content, though.

I am using SVN version of Beryl from Trevino´s repositories so this could be caused by Beryl.

Please ask for more detailed information. This is my first bug report on FF.

[Elias Aarnio (elias-aarnio)]

Here's the crash report.

[John Vivirito (gnomefreak)]

Taking for retrace.
Can you please disable beryl (in gnome take it out of startup sessions) in kde remove the symlink. restart X and log in without beryl see if you can than reproduce this bug.

[John Vivirito (gnomefreak)]

hank you for the bug report, can you please describe further what you were doing when the crash occurred.. Was the program even open yet, had you clicked on the icon? Or was it just after you opened firefox, if so what's your homepage?

Do you have any plugins installed, (put 'about:plugins' into the address bar to see), if so can you list them and their versions if possible? Also do you have any extensions or themes installed? You can find this out by going to the Tools Menu at the top and selecting Add-Ons, can you list the extensions/themes for me and their related version numbers also.

Can you please tell us what flash package you have installed and what version it is also did you install it from repos? Can you give us step by step instructions on how to reproduce this?

[John Vivirito (gnomefreak)]

Assigning back to team.

[Elias Aarnio (elias-aarnio)]

Hello,

I have tried to reproduce the crash but I have not been able to reproduce it. Not when using Metacity nor Beryl.

I was typing text into a text box like this at http://forum.ubuntu-fi.org/. The browser had been open for hours and at least 5 minutes with the other open tabs untouched. I do not know what kind of refresh intervals these open pages in tabs have. The crash could be caused by some of these pages as well.

I have MediaPlayerConnectivity 0.8.3 and Wizz RSS Reader 2.1.7 installed. I have no themes installed.

About plugins (Finnish localization but I think it is understandable as it is standard output):

Please ask for more if there's some information I can give.

Asennetut liitännäiset
Lisätietoja selaimen liitännäisistä osoitteesta mozilla.org.
Ohjeita liitännäisten asentamiseen löydät osoitteesta plugindoc.mozdev.org.
Totem Web Browser Plugin 2.16.2

    Tiedostonimi: libtotem-basic-plugin.so
    The Totem 2.16.2 plugin handles video and audio streams.

MIME-tyyppi Kuvaus Päätteet Käytössä
application/ogg Ogg multimedia ogg Kyllä
video/mpeg MPEG-video mpg, mpeg, mpe Kyllä
audio/wav WAV-ääni wav Kyllä
audio/mpeg MP3-ääni mp3 Kyllä
Helix DNA Plugin: RealPlayer G2 Plug-In Compatible (compatible; Totem)

    Tiedostonimi: libtotem-complex-plugin.so
    The Totem 2.16.2 plugin handles video and audio streams.

MIME-tyyppi Kuvaus Päätteet Käytössä
audio/x-pn-realaudio-plugin RealAudio document rpm Kyllä
Windows Media Player Plug-in 10 (compatible; Totem)

    Tiedostonimi: libtotem-gmp-plugin.so
    The Totem 2.16.2 plugin handles video and audio streams.

MIME-tyyppi Kuvaus Päätteet Käytössä
application/x-mplayer2 AVI-video avi, wma, wmv Kyllä
video/x-ms-asf-plugin ASF video asf, wmv Kyllä
video/x-msvideo AVI-video asf, wmv Kyllä
video/x-ms-asf ASF video asf Kyllä
video/x-ms-wmv WMV video wmv Kyllä
video/x-wmv WMV video wmv Kyllä
DivX® Web Player

    Tiedostonimi: libtotem-mully-plugin.so
    The Totem 2.16.2 plugin handles video and audio streams.

MIME-tyyppi Kuvaus Päätteet Käytössä
video/divx AVI-video divx Kyllä
QuickTime Plug-in 7.0 (compatible; Totem)

    Tiedostonimi: libtotem-narrowspace-plugin.so
    The Totem 2.16.2 plugin handles video and audio streams.

MIME-tyyppi Kuvaus Päätteet Käytössä
video/quicktime QT video mov Kyllä
Java(TM) Plug-in Blackdown-1.4.2-02

    Tiedostonimi: libjavaplugin_oji.so
    Blackdown Java-Linux Java(TM) Plug-in 1.4.2

MIME-tyyppi Kuvaus Päätteet Käytössä
application/x-java-vm Java Kyllä
application/x-java-applet Java Kyllä
application/x-java-applet;version=1.1 Java Kyllä
application/x-java-applet;version=1.1.1 Java Kyllä
application/x-java-applet;version=1.1.2 Java Kyllä
application/x-java-applet;version=1.1.3 Java Kyllä
application/x-java-applet;version=1.2 Java Kyllä
application/x-java-applet;version=1.2.1 Java Kyllä
application/x-java-applet;version=1.2.2 Java Kyllä
application/x-java-applet;version=1.3 Java Kyllä
application/x-java-applet;version=1.3.1 Java Kyllä
application/x-java-applet;version=1.4 Java Kyllä
application/x-java-applet;version=1.4.1 Java Kyllä
application/x-java-applet...

[Freddy Martinez (freddymartinez9)]

I read Three (maybe two) plugins:

Totem Web Browser Plugin 2.16.2

QuickTime Plug-in 7.0 (compatible; Totem) [might also be handled by Totem]

Java(TM) Plug-in Blackdown-1.4.2-02

[Hilario J. Montoliu (hjmf) (hmontoliu)]

Retrace done:
...
 #4 nsEventQueueImpl::GetYoungestActive (this=0xfffffffc, aQueue=0xb66db378) at nsEventQueue.cpp:614
  answer = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
 #5 0xb7ecc8e7 in nsEventQueueImpl::GetYoungestActive (this=0x80c8fb8, aQueue=0xb66db3b0)
     at nsEventQueue.cpp:615
  answer = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
 #6 0xb7ecd84c in nsEventQueueServiceImpl::GetThreadEventQueue (this=0x80c8a60, aThread=0x805c548,
     aResult=0xb66db3f4) at nsEventQueueService.cpp:253
  keyThread = (PRThread *) 0x805c548
  queue = {<nsCOMPtr_base> = {mRawPtr = 0x80c8fb8}, <No data fields>}
...

Tagging as mt-confirm for further processing

[Hilario J. Montoliu (hjmf) (hmontoliu)]

Retraced Thread Stacktrace

[Alexander Sack (asac)]

On Thu, Mar 22, 2007 at 07:15:46PM -0000, Hilario J. Montoliu (hjmf) wrote:
> Retrace done:
> ...
> #4 nsEventQueueImpl::GetYoungestActive (this=0xfffffffc, aQueue=0xb66db378) at nsEventQueue.cpp:614
> answer = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
> #5 0xb7ecc8e7 in nsEventQueueImpl::GetYoungestActive (this=0x80c8fb8, aQueue=0xb66db3b0)
> at nsEventQueue.cpp:615
> answer = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
> #6 0xb7ecd84c in nsEventQueueServiceImpl::GetThreadEventQueue (this=0x80c8a60, aThread=0x805c548,
> aResult=0xb66db3f4) at nsEventQueueService.cpp:253
> keyThread = (PRThread *) 0x805c548
> queue = {<nsCOMPtr_base> = {mRawPtr = 0x80c8fb8}, <No data fields>}
> ...

Do we already have another bug with such a signature?

 - Alexander

[Hilario J. Montoliu (hjmf) (hmontoliu)]

El vie, 23-03-2007 a las 13:04 +0000, Alexander Sack escribió:
> On Thu, Mar 22, 2007 at 07:15:46PM -0000, Hilario J. Montoliu (hjmf) wrote:
> [...]
> 0xb7ecd84c in nsEventQueueServiceImpl::GetThreadEventQueue (this=0x80c8a60, aThread=0x805c548,
> > aResult=0xb66db3f4) at nsEventQueueService.cpp:253
> > keyThread = (PRThread *) 0x805c548
> > queue = {<nsCOMPtr_base> = {mRawPtr = 0x80c8fb8}, <No data fields>}
> > ...
>
> Do we already have another bug with such a signature?
>
> - Alexander

No AFAIK, but searching similar crashes (filling forms ones) I've found
a related retrace (but *far* from similar) on bug #80767

[Hilario J. Montoliu (hjmf) (hmontoliu)]

El vie, 23-03-2007 a las 13:04 +0000, Alexander Sack escribió:
> On Thu, Mar 22, 2007 at 07:15:46PM -0000, Hilario J. Montoliu (hjmf) wrote:
> [...]
> 0xb7ecd84c in nsEventQueueServiceImpl::GetThreadEventQueue (this=0x80c8a60, aThread=0x805c548,
> > aResult=0xb66db3f4) at nsEventQueueService.cpp:253
> > keyThread = (PRThread *) 0x805c548
> > queue = {<nsCOMPtr_base> = {mRawPtr = 0x80c8fb8}, <No data fields>}
> > ...
>
> Do we already have another bug with such a signature?
>
> - Alexander

No AFAIK, but searching similar crashes (filling forms ones) I've found
a related retrace (but *far* from similar) on bug #80767

[Alexander Sack (asac)]

no dupes for quite some time. appears to be fixed by any of the various GC/javascript fixes that went into upstream security releases.