firefox crashed with SIGSEGV in g_closure_invoke()

Bug #274863 reported by Rocko
74
This bug affects 3 people
Affects Status Importance Assigned to Milestone
Mozilla Firefox
Fix Released
Critical
xulrunner-1.9 (Ubuntu)
Invalid
Medium
Unassigned

Bug Description

Binary package hint: firefox-3.0

Attempting to add a comment in launchpad to another bug, I clicked on the 'log in' button, whereupon Firefox froze, greyed out and then crashed.

ProblemType: Crash
Architecture: amd64
DistroRelease: Ubuntu 8.10
ExecutablePath: /usr/lib/firefox-3.0.3/firefox
NonfreeKernelModules: nvidia
Package: firefox-3.0 3.0.3+build1+nobinonly-0ubuntu1
ProcAttrCurrent: unconfined
ProcCmdline: /usr/lib/firefox-3.0.3/firefox
ProcEnviron:
 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
 LANG=en_AU.UTF-8
 SHELL=/bin/bash
Signal: 11
SourcePackage: firefox-3.0
StacktraceTop:
 ?? () from /usr/lib/xulrunner-1.9.0.3/libxul.so
 ?? () from /usr/lib/xulrunner-1.9.0.3/libxul.so
 ?? () from /usr/lib/libgtk-x11-2.0.so.0
 g_closure_invoke ()
 ?? () from /usr/lib/libgobject-2.0.so.0
Title: firefox crashed with SIGSEGV in g_closure_invoke()
Uname: Linux 2.6.27-4-generic x86_64
UserGroups: adm admin cdrom dialout fuse lpadmin plugdev sambashare

Tags: apport-crash
Revision history for this message
Rocko (rockorequin) wrote :
Revision history for this message
Apport retracing service (apport) wrote : Symbolic stack trace

StacktraceTop:nsRefPtr (this=<value optimized out>, aRawPtr=0x2308bd0)
leave_notify_event_cb (widget=0xf4b8a0, event=0x32ade40) at nsWindow.cpp:4609
_gtk_marshal_BOOLEAN__BOXED (closure=0x11685f0, return_value=0x7fff92250da0,
IA__g_closure_invoke (closure=0x11685f0, return_value=0x7fff92250da0, n_param_values=2,
signal_emit_unlocked_R (node=0xe07800, detail=0, instance=0xf4b8a0,

Revision history for this message
Apport retracing service (apport) wrote : Symbolic threaded stack trace
Changed in firefox-3.0:
importance: Undecided → Medium
Revision history for this message
Alexander Sack (asac) wrote :

appears like you dragged the button or something. can you try to reproduce it somehow?

Changed in firefox-3.0:
status: New → Incomplete
Revision history for this message
Kurt Huwig (k-huwig) wrote :

I am afraid I can't. It works now fine.

Revision history for this message
Rocko (rockorequin) wrote :

I haven't been able to make it happen again either.

Revision history for this message
Alexander Sack (asac) wrote :

we have 5 duplicates. someone willing to response for eventual upstream answers, please file this crash in bugzilla.mozilla.org and post your bug id here. remember to attach the stacktrace there.

Changed in firefox-3.0:
status: Incomplete → Triaged
Revision history for this message
In , Aaron Whitehouse (aaron-whitehouse) wrote :

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.3) Gecko/2008101315 Ubuntu/8.10 (intrepid) Firefox/3.0.3
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.3) Gecko/2008101315 Ubuntu/8.10 (intrepid) Firefox/3.0.3

From https://bugs.launchpad.net/ubuntu/+source/firefox-3.0/+bug/274863 with five duplicates:
"Binary package hint: firefox-3.0

Attempting to add a comment in launchpad to another bug, I clicked on the 'log in' button, whereupon Firefox froze, greyed out and then crashed.

ProblemType: Crash
Architecture: amd64
DistroRelease: Ubuntu 8.10
ExecutablePath: /usr/lib/firefox-3.0.3/firefox
NonfreeKernelModules: nvidia
Package: firefox-3.0 3.0.3+build1+nobinonly-0ubuntu1
ProcAttrCurrent: unconfined
ProcCmdline: /usr/lib/firefox-3.0.3/firefox
ProcEnviron:
 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
 LANG=en_AU.UTF-8
 SHELL=/bin/bash
Signal: 11
SourcePackage: firefox-3.0
StacktraceTop:
 ?? () from /usr/lib/xulrunner-1.9.0.3/libxul.so
 ?? () from /usr/lib/xulrunner-1.9.0.3/libxul.so
 ?? () from /usr/lib/libgtk-x11-2.0.so.0
 g_closure_invoke ()
 ?? () from /usr/lib/libgobject-2.0.so.0
Title: firefox crashed with SIGSEGV in g_closure_invoke()
Uname: Linux 2.6.27-4-generic x86_64
UserGroups: adm admin cdrom dialout fuse lpadmin plugdev sambashare"

Stacktrace available here:
http://launchpadlibrarian.net/17984130/ThreadStacktrace.txt

There is a lot of information in the five duplicates if more is necessary.

Reproducible: Couldn't Reproduce

Steps to Reproduce:
1.
2.
3.
Actual Results:
FF greys and crashes.

Changed in firefox:
importance: Undecided → Unknown
status: New → Unknown
Changed in firefox:
status: Unknown → New
Revision history for this message
In , Timeless-bemail (timeless-bemail) wrote :

http://launchpadlibrarian.net/17984123/Stacktrace.txt seems like a slightly less confusing url to start from.

for reference, you really should update summaries as bugs evolve (this includes the Ubuntu bug). e.g. "Apport retracing service" told you which functions actually crashed. and asac told you what you were doing.

http://mxr.mozilla.org/mozilla-central/source/xpcom/base/nsAutoPtr.h?mark=980-980#975

so we have a window pointer which isn't a valid nsWindow (and possibly not even related to nsISupports)....

#3 0x00007f3887f958ce in nsRefPtr (this=<value optimized out>, aRawPtr=0x2308bd0)
 window = {mRawPtr = 0x2308bd0}
#9 0x00007f388542ab33 in IA__g_signal_emit (instance=0x2308bd0, signal_id=36735952, detail=18253296)
#20 0x00007f388542ab33 in IA__g_signal_emit (instance=0x2308bd0, signal_id=36735952, detail=18253296)
#36 0x00007f3887917336 in nsInputStreamPump::OnInputStreamReady (this=0x34edf80, stream=0x2308bd0)
#39 0x00007f3888024d0e in NS_ProcessNextEvent_P (thread=0x2308bd0, mayWait=1) at nsThreadUtils.cpp:227
#54 0x00007f3888e8cda7 in js_Interpret (cx=0x371d250) at jsinterp.c:4857
 str = (JSString *) 0x2308bd0
#79 0x00007f3888024d0e in NS_ProcessNextEvent_P (thread=0x2308bd0, mayWait=1) at nsThreadUtils.cpp:227

I presume you're using a 32bit version of firefox?

Revision history for this message
Rocko (rockorequin) wrote :

Is bug #322244 the same, and/or does it contain more useful information? I made Firefox crash in Jaunty this time.

Revision history for this message
In , Karlt (karlt) wrote :

This will be fixed in 1.9.0.11.

Changed in firefox:
status: New → Fix Released
Revision history for this message
John Vivirito (gnomefreak) wrote :

Changed package since it is a xulrunner bug not firefox.
The fix will land in 1.9.0.11

affects: firefox-3.0 (Ubuntu) → xulrunner-1.9 (Ubuntu)
Changed in firefox:
importance: Unknown → Critical
Revision history for this message
Phillip Susi (psusi) wrote :

This package has been removed from Ubuntu. Closing all related bugs.

Changed in xulrunner-1.9 (Ubuntu):
status: Triaged → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.