firefox crashed with SIGSEGV in g_type_check_instance()

[Ryan Ren]

Binary package hint: firefox-3.5

firefox resulted this crash report when i close it.

ProblemType: Crash
Architecture: amd64
CrashCounter: 1
Date: Wed Sep 9 21:31:21 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/lib/firefox-3.5.2/firefox
Package: firefox-3.5 3.5.2+nobinonly-0ubuntu2
ProcCmdline: /usr/lib/firefox-3.5.2/firefox --sm-config-prefix /firefox-yHgMEU/ --sm-client-id 10b3d36e79000125237957100000283740025 --screen 0
ProcEnviron:
 LANGUAGE=
 LC_COLLATE=en_US.UTF-8
 PATH=(custom, user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-8.28-generic
Signal: 11
SourcePackage: firefox-3.5
StacktraceTop:
 g_type_check_instance ()
 g_signal_handlers_disconnect_matched ()
 ?? ()
 ?? ()
 g_closure_invoke ()
Title: firefox crashed with SIGSEGV in g_type_check_instance()
Uname: Linux 2.6.31-8-generic x86_64
UserGroups: adm admin audio cdrom dialout disk lp lpadmin mail plugdev sambashare saned ssh sudo
SegvAnalysis:
 Segfault happened at: 0x7fd5a8d1005b <raise+43>: cmp $0xfffffffffffff000,%rax
 PC (0x7fd5a8d1005b) ok
 source "$0xfffffffffffff000" ok
 destination "%rax" ok
 SP (0x7fff16d81fd8) ok
 Reason could not be automatically determined.
SegvReason: Reason could not be automatically determined.

[Victor Vargas (kamus)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. Please try to obtain a backtrace following the instructions at http://wiki.ubuntu.com/DebuggingProgramCrash and upload the backtrace (as an attachment) to the bug report. Additionally if you can include some steps to reproduce this problem would be great.

Regards

[Ryan Ren (pemryan)]

maybe the same bug. Firefox is running with gdb attached to it, and it crashed when I close it to exit.

Thread 0x7fffd79ff910 (LWP 22240) exited]
[Thread 0x7fffe76ef910 (LWP 21951) exited]
[Thread 0x7fffda1ff910 (LWP 21960) exited]
[Thread 0x7fffbec6e910 (LWP 22465) exited]
[Thread 0x7fffe6ce4910 (LWP 21952) exited]

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff2515688 in IA__g_type_check_instance (type_instance=<value optimized out>) at /build/buildd/glib2.0-2.22.2/gobject/gtype.c:3804
3804 /build/buildd/glib2.0-2.22.2/gobject/gtype.c: No such file or directory.
        in /build/buildd/glib2.0-2.22.2/gobject/gtype.c
(gdb) backtrace
#0 0x00007ffff2515688 in IA__g_type_check_instance (type_instance=<value optimized out>)
    at /build/buildd/glib2.0-2.22.2/gobject/gtype.c:3804
#1 0x00007ffff251499b in IA__g_signal_handlers_disconnect_matched (instance=0x3d0000b800005484, mask=24, signal_id=21636, detail=0,
    closure=0x0, func=<value optimized out>, data=0x7fffdbd4c200) at /build/buildd/glib2.0-2.22.2/gobject/gsignal.c:2667
#2 0x00007fffdc1fbe93 in ?? () from /usr/lib/gtk-2.0/2.10.0/immodules/im-xim.so
#3 0x00007fffdc1fbf2b in ?? () from /usr/lib/gtk-2.0/2.10.0/immodules/im-xim.so
#4 0x00007ffff24fd5ae in IA__g_closure_invoke (closure=0x7ffff68955e0, return_value=0x0, n_param_values=2, param_values=0x7fffd0f3c040,
    invocation_hint=0x7fffffff9660) at /build/buildd/glib2.0-2.22.2/gobject/gclosure.c:767
#5 0x00007ffff2512983 in signal_emit_unlocked_R (node=0x7ffff679f740, detail=<value optimized out>, instance=<value optimized out>,
    emission_return=<value optimized out>, instance_and_params=<value optimized out>) at /build/buildd/glib2.0-2.22.2/gobject/gsignal.c:3247
#6 0x00007ffff2513d39 in IA__g_signal_emit_valist (instance=0x7ffff676a380, signal_id=<value optimized out>, detail=0,
    var_args=0x7fffffff9850) at /build/buildd/glib2.0-2.22.2/gobject/gsignal.c:2980
#7 0x00007ffff2514283 in IA__g_signal_emit (instance=0x3d0000b800005484, signal_id=24, detail=21636)
    at /build/buildd/glib2.0-2.22.2/gobject/gsignal.c:3037
#8 0x00007ffff10fd4a2 in gdk_display_close () from /usr/lib/libgdk-x11-2.0.so.0
#9 0x00007ffff4d0f1ac in MOZ_gdk_display_close (display=0x7ffff676a380) at nsAppRunner.cpp:2480
#10 0x00007ffff4d13319 in XRE_main (argc=<value optimized out>, argv=<value optimized out>, aAppData=<value optimized out>)
    at nsAppRunner.cpp:3459
#11 0x000000000040271f in ?? ()
#12 0x00007ffff6be3abd in __libc_start_main (main=<value optimized out>, argc=<value optimized out>, ubp_av=<value optimized out>,
    init=<value optimized out>, fini=<value optimized out>, rtld_fini=<value optimized out>, stack_end=0x7fffffffe328) at libc-start.c:220
#13 0x0000000000401f99 in ?? ()
#14 0x00007fffffffe328 in ?? ()
#15 0x00...

[Ryan Ren (pemryan)]

happen again with Firefox 3.5.5
Ubuntu lucid (development branch)

[Thread 0x7fffc9e67910 (LWP 4661) exited]
[Thread 0x7fffe6be4910 (LWP 4591) exited]

(firefox:4588): GLib-GObject-WARNING **: instance with invalid (NULL) class pointer

(firefox:4588): GLib-GObject-CRITICAL **: g_signal_handlers_disconnect_matched: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed

Program received signal SIGSEGV, Segmentation fault.
IA__g_type_check_instance (type_instance=0x7fffbfc46d00)
    at /build/buildd/glib2.0-2.22.2/gobject/gtype.c:3802
3802 /build/buildd/glib2.0-2.22.2/gobject/gtype.c: No such file or directory.
 in /build/buildd/glib2.0-2.22.2/gobject/gtype.c
(gdb) bt
#0 IA__g_type_check_instance (type_instance=0x7fffbfc46d00)
    at /build/buildd/glib2.0-2.22.2/gobject/gtype.c:3802
#1 0x00007ffff251499b in IA__g_signal_handlers_disconnect_matched (
    instance=0x7fffbfc46d00, mask=24, signal_id=0, detail=0, closure=0x0,
    func=<value optimized out>, data=0x7fffdc1f8400)
    at /build/buildd/glib2.0-2.22.2/gobject/gsignal.c:2667
#2 0x00007fffda0fbe93 in ?? ()
   from /usr/lib/gtk-2.0/2.10.0/immodules/im-xim.so
#3 0x00007fffda0fbf2b in ?? ()
   from /usr/lib/gtk-2.0/2.10.0/immodules/im-xim.so
#4 0x00007ffff24fd5ae in IA__g_closure_invoke (closure=0x7fffd587c430,
    return_value=0x0, n_param_values=2, param_values=0x7fffbd123040,
    invocation_hint=0x7fffffff96a0)
    at /build/buildd/glib2.0-2.22.2/gobject/gclosure.c:767
#5 0x00007ffff2512983 in signal_emit_unlocked_R (node=0x7ffff679f740,
    detail=<value optimized out>, instance=<value optimized out>,
    emission_return=<value optimized out>,
    instance_and_params=<value optimized out>)
    at /build/buildd/glib2.0-2.22.2/gobject/gsignal.c:3247
#6 0x00007ffff2513d39 in IA__g_signal_emit_valist (instance=0x7ffff67b4190,
    signal_id=<value optimized out>, detail=0, var_args=0x7fffffff9890)
    at /build/buildd/glib2.0-2.22.2/gobject/gsignal.c:2980
#7 0x00007ffff2514283 in IA__g_signal_emit (instance=0x7fffbfc46d00,
---Type <return> to continue, or q <return> to quit---
    signal_id=24, detail=0)
    at /build/buildd/glib2.0-2.22.2/gobject/gsignal.c:3037
#8 0x00007ffff10fd4a2 in gdk_display_close ()
   from /usr/lib/libgdk-x11-2.0.so.0
#9 0x00007ffff4d10298 in MOZ_gdk_display_close (display=0x7ffff67b4190)
    at nsAppRunner.cpp:2480
#10 0x00007ffff4d14405 in XRE_main (argc=<value optimized out>,
    argv=<value optimized out>, aAppData=<value optimized out>)
    at nsAppRunner.cpp:3459
#11 0x000000000040271f in ?? ()
#12 0x00007ffff6be2abd in __libc_start_main (main=<value optimized out>,
    argc=<value optimized out>, ubp_av=<value optimized out>,
    init=<value optimized out>, fini=<value optimized out>,
    rtld_fini=<value optimized out>, stack_end=0x7fffffffe368)
    at libc-start.c:220
#13 0x0000000000401f99 in ?? ()
#14 0x00007fffffffe368 in ?? ()
#15 0x000000000000001c in ?? ()
#16 0x0000000000000001 in ?? ()
#17 0x00007fffffffe6aa in ?? ()
#18 0x0000000000000000 in ?? ()
(gdb)

[dino99 (9d9)]

This version is outdated and no more supported