Firefox 6.0 Crash Report [@ uGlobalMenu::RemoveMenuObjectAt ]

[Chris Coulson]

This signature seems to have started with Firefox 6 (affecting Oneiric and Natty):

https://crash-stats.mozilla.com/report/list?product=Firefox&platform=linux&query_search=signature&query_type=contains&reason_type=contains&date=08%2F05%2F2011%2003%3A15%3A23&range_value=1&range_unit=weeks&hang_type=any&process_type=any&do_query=1&signature=uGlobalMenu%3A%3ARemoveMenuObjectAt

Currently no. 35 for all Linux crashers (40 crashes in the last week)

[Launchpad Janitor (janitor)]

This bug was fixed in the package firefox - 6.0~b5+build1+nobinonly-0ubuntu2

---------------
firefox (6.0~b5+build1+nobinonly-0ubuntu2) oneiric; urgency=low

  * Update globalmenu-extension to 1.9.1
    - Drop Firefox 4 and 5 compatibility
    - Drop the uIGlobalMenuLoader interface, as it never served any purpose
    - Rework how we synchronize attributes to menuitems from their
      corresponding command nodes
    - Don't synchronize attributes from command nodes associated with menus
    - Rework how we handle document insertion/removals. Rather than keeping
      our dbusmenu structure in sync at all times, and routing the events
      to the correct node in the tree, we just mark the menu as invalid and
      rebuild it from scratch next time it opens. This should reduce problems
      like LP: #821391
    - Honour the collapsed attribute. This solves a problem with multiple
      seprators appearing adjacent to each other in the greasemonkey menu
    - Store all booleans as PRPackedBool rather than PRBool
    - Add error checking around uGlobalMenuDocListener
    - Make uGlobalMenuDummy more robust, and use it as a fallback if the
      real menuitem fails to initialize. This should help reduce problems
      like LP: #831391
    - If a menu fails to build correctly, mark it invalid and stop processing
      document events on it (which should avoid the crash in LP: #831391)
    - Invalidate a menu if we fail to insert/remove a node whilst processing
      a document event (which should help avoid the crash in LP: #831391)
    - Make uGlobalMenu::CanOpen() respect the collapsed attribute
    - Allow more than one menu node to register as a listener for any DOM
      node. In the case of command nodes, these may be shared across multiple
      menu nodes, with each one interested in receiving events. Previously, we
      just erased the first listener if a second menu node tried to register
      (discovered after adding error checking around uGlobalMenuDocListener)
 -- Chris Coulson <email address hidden> Tue, 09 Aug 2011 18:29:02 +0100

[Chris Coulson (chrisccoulson)]

Well, "fixed" is more like "rewritten tonnes of stuff to hopefully work around a problem that I haven't figured out yet, and hope for the best" :/