firefox crashed with SIGSEGV in g_closure_invoke()

Bug #425593 reported by Ryan Ren
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
firefox-3.5 (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

Binary package hint: firefox-3.5

firefox corrupted when i'm not not using it. The crash report windows poped up when I was viewing a pdf file with Okular.

ProblemType: Crash
Architecture: amd64
CrashCounter: 1
Date: Mon Sep 7 17:31:01 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/lib/firefox-3.5.2/firefox
Package: firefox-3.5 3.5.2+nobinonly-0ubuntu2
ProcCmdline: /usr/lib/firefox-3.5.2/firefox --sm-client-id 10b3d36e79000125196557400000030450284 --screen 0
ProcEnviron:
 LANGUAGE=
 LC_COLLATE=en_US.UTF-8
 PATH=(custom, user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-8.28-generic
Signal: 11
SourcePackage: firefox-3.5
StacktraceTop:
 ?? ()
 g_closure_invoke ()
 ?? () from /usr/lib/libgobject-2.0.so.0
 g_signal_emit_valist ()
 g_signal_emit () from /usr/lib/libgobject-2.0.so.0
Title: firefox crashed with SIGSEGV in g_closure_invoke()
Uname: Linux 2.6.31-8-generic x86_64
UserGroups: adm admin audio cdrom dialout disk lp lpadmin mail plugdev sambashare saned ssh sudo
SegvAnalysis:
 Segfault happened at: 0x7fd3ddb0305b <raise+43>: cmp $0xfffffffffffff000,%rax
 PC (0x7fd3ddb0305b) ok
 source "$0xfffffffffffff000" ok
 destination "%rax" ok
 SP (0x7ffff12cc398) ok
 Reason could not be automatically determined.
SegvReason: Reason could not be automatically determined.

Revision history for this message
Ryan Ren (pemryan) wrote :
Revision history for this message
Victor Vargas (kamus) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. Please try to obtain a backtrace following the instructions at http://wiki.ubuntu.com/DebuggingProgramCrash and upload the backtrace (as an attachment) to the bug report. Additionally if you can include some steps to reproduce this problem would be great.

Regards

Changed in firefox-3.5 (Ubuntu):
status: New → Incomplete
Revision history for this message
Ryan Ren (pemryan) wrote :
Download full text (3.7 KiB)

Maybe the same bug.
Firefox is started in gdb. When I close the GUI of firefox to exit, gdb catched this SIGSEGV:

[Thread 0x7fffdb2ff910 (LWP 17777) exited]
[Thread 0x7fffe6ce4910 (LWP 25702) exited]

Program received signal SIGSEGV, Segmentation fault.
IA__g_type_check_instance (type_instance=0x7fffd0310a80) at /build/buildd/glib2.0-2.22.2/gobject/gtype.c:3802
3802 /build/buildd/glib2.0-2.22.2/gobject/gtype.c: No such file or directory.
        in /build/buildd/glib2.0-2.22.2/gobject/gtype.c
(gdb)
(gdb) backtrace
#0 IA__g_type_check_instance (type_instance=0x7fffd0310a80) at /build/buildd/glib2.0-2.22.2/gobject/gtype.c:3802
#1 0x00007ffff251499b in IA__g_signal_handlers_disconnect_matched (instance=0x7fffd0310a80, mask=24, signal_id=0, detail=0, closure=0x0,
    func=<value optimized out>, data=0x7fffd12af200) at /build/buildd/glib2.0-2.22.2/gobject/gsignal.c:2667
#2 0x00007fffdc2b4e93 in ?? () from /usr/lib/gtk-2.0/2.10.0/immodules/im-xim.so
#3 0x00007fffdc2b4f2b in ?? () from /usr/lib/gtk-2.0/2.10.0/immodules/im-xim.so
#4 0x00007ffff24fd5ae in IA__g_closure_invoke (closure=0x7fffdd7352b0, return_value=0x0, n_param_values=2, param_values=0x7fffc9909040,
    invocation_hint=0x7fffffff9660) at /build/buildd/glib2.0-2.22.2/gobject/gclosure.c:767
#5 0x00007ffff2512983 in signal_emit_unlocked_R (node=0x7ffff679f740, detail=<value optimized out>, instance=<value optimized out>,
    emission_return=<value optimized out>, instance_and_params=<value optimized out>) at /build/buildd/glib2.0-2.22.2/gobject/gsignal.c:3247
#6 0x00007ffff2513d39 in IA__g_signal_emit_valist (instance=0x7ffff676a380, signal_id=<value optimized out>, detail=0,
    var_args=0x7fffffff9850) at /build/buildd/glib2.0-2.22.2/gobject/gsignal.c:2980
#7 0x00007ffff2514283 in IA__g_signal_emit (instance=0x7fffd0310a80, signal_id=24, detail=0)
    at /build/buildd/glib2.0-2.22.2/gobject/gsignal.c:3037
#8 0x00007ffff10fd4a2 in gdk_display_close () from /usr/lib/libgdk-x11-2.0.so.0
#9 0x00007ffff4d0f1ac in MOZ_gdk_display_close (display=0x7ffff676a380) at nsAppRunner.cpp:2480
#10 0x00007ffff4d13319 in XRE_main (argc=<value optimized out>, argv=<value optimized out>, aAppData=<value optimized out>)
    at nsAppRunner.cpp:3459 ...

Read more...

Revision history for this message
Ryan Ren (pemryan) wrote :

I re-run firefox in gdb:
(gdb) r

...

when firefox started up, I close it and got this, I dont know know whether it is relevant or not:

[Thread 0x7fffe6ce4910 (LWP 17828) exited]

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff3038548 in require_socket (dpy=0x7ffff67a0000) at ../../src/xcb_io.c:35
35 ../../src/xcb_io.c: No such file or directory.
        in ../../src/xcb_io.c
(gdb) backtrace
#0 0x00007ffff3038548 in require_socket (dpy=0x7ffff67a0000) at ../../src/xcb_io.c:35
#1 0x00007ffff3039289 in _XFlush (dpy=0x7ffff67a0000) at ../../src/xcb_io.c:348
#2 0x00007ffff30267c0 in XQueryExtension (dpy=0x7ffff67a0000, name=0x7ffff352e120 "RENDER", major_opcode=0x7fffffffe024,
    first_event=0x7fffffffe028, first_error=0x7fffffffe02c) at ../../src/QuExt.c:47
#3 0x00007ffff301ae22 in XInitExtension (dpy=0x7ffff67a0000, name=0x7ffff3039170 "SH\213\207h\t") at ../../src/InitExt.c:49
#4 0x00007ffff332c00f in XRenderFindDisplay () from /usr/lib/libXrender.so.1
#5 0x00007ffff3329bae in XRenderFreePicture () from /usr/lib/libXrender.so.1
#6 0x00007fffe515d0dd in QX11PixmapData::release (this=0x7fffd7b38550) at image/qpixmap_x11.cpp:1206
#7 0x00007fffe515d814 in ~QX11PixmapData (this=0x7ffff67a0000, __in_chrg=<value optimized out>) at image/qpixmap_x11.cpp:1182
#8 0x00007fffe514e6cb in QPixmap::deref (this=0x7fffd7b030d0) at image/qpixmap.cpp:1322
#9 0x00007fffe514e8cb in ~QPixmap (this=0x7ffff67a0000, __in_chrg=<value optimized out>) at image/qpixmap.cpp:332
#10 0x00007fffe4aae08c in ~TileSet (this=0x7fffd7b03000, __in_chrg=<value optimized out>) at ../../../kstyles/oxygen/lib/tileset.h:61
#11 0x00007fffe4abab87 in QCache<unsigned long long, TileSet>::clear (this=0x7fffe85ce210) at /usr/include/qt4/QtCore/qcache.h:138
#12 0x00007fffe4abadb7 in ~QCache (this=0x7fffe85ce000, __in_chrg=<value optimized out>) at /usr/include/qt4/QtCore/qcache.h:102
#13 ~OxygenStyleHelper (this=0x7fffe85ce000, __in_chrg=<value optimized out>) at ../../../kstyles/oxygen/helper.h:40
#14 0x00007ffff6bfdc12 in __run_exit_handlers (status=0) at exit.c:78
#15 *__GI_exit (status=0) at exit.c:100
#16 0x00007ffff6be3ac4 in __libc_start_main (main=<value optimized out>, argc=<value optimized out>, ubp_av=<value optimized out>,
    init=<value optimized out>, fini=<value optimized out>, rtld_fini=<value optimized out>, stack_end=0x7fffffffe328) at libc-start.c:252
#17 0x0000000000401f99 in ?? ()
#18 0x00007fffffffe328 in ?? ()
#19 0x000000000000001c in ?? ()
#20 0x0000000000000001 in ?? ()
#21 0x00007fffffffe67a in ?? ()
#22 0x0000000000000000 in ?? ()
(gdb)

Ryan Ren (pemryan)
Changed in firefox-3.5 (Ubuntu):
status: Incomplete → New
Kees Cook (kees)
description: updated
Revision history for this message
dino99 (9d9) wrote :

This version is outdated and no more supported

Changed in firefox-3.5 (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.