firefox crashed [@moz_gtk_widget_paint] at #9 [@nsNativeThemeGTK::DrawWidgetBackground] at #10

[tobiasschulz]

... firefox crashed

... Firefox, Thunderbird, ... crash while opening an new window

*** glibc detected *** /usr/lib/thunderbird/thunderbird-bin: double free or corruption (out): 0x08d818b0 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb7448dd5]
/lib/tls/i686/cmov/libc.so.6(cfree+0x90)[0xb744c870]
/usr/lib/libglib-2.0.so.0(g_free+0x31)[0xb7682981]
/usr/lib/thunderbird/components/libgfx_gtk.so[0xb52d4c66]
/usr/lib/thunderbird/components/libgfx_gtk.so[0xb52f4239]
/usr/lib/thunderbird/components/libgklayout.so[0xb4d2b17d]
...
/usr/lib/thunderbird/components/libgklayout.so[0xb5023586]
/usr/lib/thunderbird/components/libwidget_gtk2.so[0xb5d742fe]
/usr/lib/thunderbird/components/libwidget_gtk2.so[0xb5d6bfb2]
/usr/lib/thunderbird/components/libwidget_gtk2.so[0xb5d6c03b]
/usr/lib/libgtk-x11-2.0.so.0[0xb7b8eb72]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x123)[0xb77157c3]
/usr/lib/libgobject-2.0.so.0[0xb7727735]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x6d6)[0xb7728a46]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x29)[0xb7728e39]
/usr/lib/libgtk-x11-2.0.so.0[0xb7cc8158]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main_do_event+0x42f)[0xb7b87ebf]
/usr/lib/libgdk-x11-2.0.so.0[0xb79c1821]
/usr/lib/libgdk-x11-2.0.so.0(gdk_window_process_all_updates+0x97)[0xb79c1a47]
/usr/lib/libgdk-x11-2.0.so.0[0xb79c1aab]
/usr/lib/libgdk-x11-2.0.so.0[0xb79a7a58]
/usr/lib/libglib-2.0.so.0[0xb76795e1]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x17c)[0xb767b1ac]
/usr/lib/libglib-2.0.so.0[0xb767e5ef]
======= Memory map: ========
08048000-0805b000 r-xp 00000000 08:05 6508095 /usr/lib/thunderbird/thunderbird-bin
0805b000-0805d000 rw-p 00012000 08:05 6508095 /usr/lib/thunderbird/thunderbird-bin
0805d000-09306000 rw-p 0805d000 00:00 0 [heap]
afc29000-afe6a000 rw-p afc29000 00:

This appears when I'm clicking on the "new mail" button in the toolbar.

Same with firefox, but not on opening a new window with websites, but on opening the save dialogue, by exemple.

Extracted from K8BeBop's symbolized stacktrace:
(file: http://launchpadlibrarian.net/8790017/gdb-firefox.log)
...
#4 raise () from /lib/tls/i686/cmov/libc.so.6
#5 abort () from /lib/tls/i686/cmov/libc.so.6
#6 __libc_message () from /lib/tls/i686/cmov/libc.so.6
#7 free () from /lib/tls/i686/cmov/libc.so.6
#8 g_free () from /usr/lib/libglib-2.0.so.0
#9 moz_gtk_widget_paint (widget=MOZ_GTK_DROPDOWN,
#10 nsNativeThemeGTK::DrawWidgetBackground (this=0x84e8680,
#11 nsCSSRendering::PaintBackgroundWithSC (
#12 nsCSSRendering::PaintBackground (aPresContext=0x8e62240,

...

[tobiasschulz (tobischulz)]

PS: I suppose these applications are running "free()" or "delete" twice:

(C++)
string* x = new string("I'm going to crash firefox!");
delete x;
delete x;

[tobiasschulz (tobischulz)]

tobias@tobias-laptop:/usr/lib/thunderbird$ /usr/lib/thunderbird/run-mozilla.sh -g thunderbird-bin -d gdb
MOZILLA_FIVE_HOME=/usr/lib/thunderbird
  LD_LIBRARY_PATH=/usr/lib/thunderbird:/usr/lib/thunderbird/plugins:/usr/lib/thunderbird
DISPLAY=:0.0
DYLD_LIBRARY_PATH=/usr/lib/thunderbird:/usr/lib/thunderbird
     LIBRARY_PATH=/usr/lib/thunderbird:/usr/lib/thunderbird/components:/usr/lib/thunderbird
       SHLIB_PATH=/usr/lib/thunderbird:/usr/lib/thunderbird
          LIBPATH=/usr/lib/thunderbird:/usr/lib/thunderbird
       ADDON_PATH=/usr/lib/thunderbird
      MOZ_PROGRAM=thunderbird-bin
      MOZ_TOOLKIT=
        moz_debug=1
     moz_debugger=
/usr/bin/gdb thunderbird-bin -x /tmp/mozargs.s18434
GNU gdb 6.6-debian
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i486-linux-gnu"...
(no debugging symbols found)
Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1".
(gdb) run
Starting program: /usr/lib/thunderbird/thunderbird-bin -d gdb
(no debugging symbols found)
Failed to read a valid object file image from memory.
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[Thread debugging using libthread_db enabled]
[New Thread -1221511488 (LWP 18437)]
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
---Type <return> to continue, or q <return> to quit---
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[New Thread -1227834480 (LWP 18440)]
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols fo...

[Hilario J. Montoliu (hjmf) (hmontoliu)]

Thank you tobiasschulz for submitting this report.

Unfortunately this report lacks information we need to investigate it
further. Of course this is not your fault, but the coredump attached to
your report doesn't provide useful information for us.

Could you please try to obtain a backtrace by following the instructions
on [1] and upload it to [2].

Please indicate which extensions/plugins do you have enabled; and if
this crash is reproducible describe the steps that lead to it (it is
very important for us to have a test case for each crash).

This will greatly aid us in tracking down your problem.

Thanks in advance.

H. Montoliu

[1] https://wiki.ubuntu.com/MozillaTeam/Bugs
[2] https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/128185/+addcomment

[K8BeBop (kennybob6)]

I too get this crash. When I open thunderbird and try to compose a message (write), thunderbird freezes. All boxes/programs running on the screen corrupt the desktop. Firefox crashes if I try to print something. Total crash. I will attach the backtrace that I followed in the previous message.

[K8BeBop (kennybob6)]

I kinda believe this may not be a problem with firefox, per se. I have just noticed that if I try to print thru OpenOffice too, the print dialog freezes up, and totally locks up the app. Have to force quit the app.

[K8BeBop (kennybob6)]

I was looking into past bugs and came upon bug #45008. I remember that I just downloaded a bunch of themes thru Art Manager, to try them out. I was using Aluminum-Alloy-Volcanic, and then all these crashes started happening.

Just for the heck of it, I switched back to the Human default theme, and everything works ok. Firefox, Thunderbird, and OpenOffice. All dialogs work now.

[Hilario J. Montoliu (hjmf) (hmontoliu)]

Thank you K8BeBop; are you using KDE? The retrace you attached in the gdb-firefox.log file looks very close to those in bug #110053 [1]

[1] https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/110053

[K8BeBop (kennybob6)]

No, Gnome only, although I do notice that alot of KDE libraries are installed when doing updates, but not using KDE.

[Nico Bauer (oshelpdesk)]

same problem here

[Hilario J. Montoliu (hjmf) (hmontoliu)]

Hi McKinney, thank you for your input,

can you follow the hints on post [1] and answer those questions? Also, what theme are you using?

[1] https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/128185/comments/3

[Hilario J. Montoliu (hjmf) (hmontoliu)]

Hi K8BeBop,

last question. What version of ubuntu are you using?

TIA

[Nico Bauer (oshelpdesk)]

i am using the standard-theme the only extension / plugin that was installed was enigmail.

when thunderbird crashed i geht the following message:

1 ~$ thunderbird
2 *** glibc detected *** /usr/lib/thunderbird/thunderbird-bin: double free or corruption (out): 0x082b5a90 ***
3 ======= Backtrace: =========
4 /lib/tls/i686/cmov/libc.so.6[0xb7472d75]
5 /lib/tls/i686/cmov/libc.so.6(cfree+0x90)[0xb7476810]
6 /usr/lib/libglib-2.0.so.0(g_free+0x31)[0xb76ad8c1]
7 /usr/lib/thunderbird/components/libgfx_gtk.so[0xb5421c56]
8 /usr/lib/thunderbird/components/libgfx_gtk.so[0xb5441219]
9 /usr/lib/thunderbird/components/libgklayout.so[0xb4e5a15d]
10 /usr/lib/thunderbird/components/libgklayout.so[0xb4e5aee7]
11 /usr/lib/thunderbird/components/libgklayout.so[0xb4ea0fcb]
12 /usr/lib/thunderbird/components/libgklayout.so[0xb4fb2441]
13 /usr/lib/thunderbird/components/libgklayout.so[0xb4fb22b0]
14 /usr/lib/thunderbird/components/libgklayout.so[0xb4fb30fb]
15 /usr/lib/thunderbird/components/libgklayout.so[0xb4fb23a5]
16 /usr/lib/thunderbird/components/libgklayout.so[0xb4fb22b0]
17 /usr/lib/thunderbird/components/libgklayout.so[0xb4fb30fb]
18 /usr/lib/thunderbird/components/libgklayout.so[0xb4fb23a5]
19 /usr/lib/thunderbird/components/libgklayout.so[0xb4fb22b0]
20 /usr/lib/thunderbird/components/libgklayout.so[0xb4fb30fb]
21 /usr/lib/thunderbird/components/libgklayout.so[0xb4fb23a5]
22 /usr/lib/thunderbird/components/libgklayout.so[0xb4fb22b0]
23 /usr/lib/thunderbird/components/libgklayout.so[0xb4fb30fb]
24 /usr/lib/thunderbird/components/libgklayout.so[0xb4fb23a5]
25 /usr/lib/thunderbird/components/libgklayout.so[0xb4fb22b0]
26 /usr/lib/thunderbird/components/libgklayout.so[0xb4fb30fb]
27 /usr/lib/thunderbird/components/libgklayout.so[0xb4fb23a5]
28 /usr/lib/thunderbird/components/libgklayout.so[0xb4e98b09]
29 /usr/lib/thunderbird/components/libgklayout.so[0xb4e98964]
30 /usr/lib/thunderbird/components/libgklayout.so[0xb4e981d7]
31 /usr/lib/thunderbird/components/libgklayout.so[0xb4e73745]
32 /usr/lib/thunderbird/components/libgklayout.so[0xb5152825]
33 /usr/lib/thunderbird/components/libgklayout.so[0xb51553f9]
34 /usr/lib/thunderbird/components/libgklayout.so[0xb515b840]
35 /usr/lib/thunderbird/components/libgklayout.so[0xb515d909]
36 /usr/lib/thunderbird/components/libgklayout.so[0xb515e728]
37 /usr/lib/thunderbird/components/libgklayout.so[0xb5152526]
38 /usr/lib/thunderbird/components/libwidget_gtk2.so[0xb5d8b2de]
39 /usr/lib/thunderbird/components/libwidget_gtk2.so[0xb5d82f92]
40 /usr/lib/thunderbird/components/libwidget_gtk2.so[0xb5d8301b]
41 /usr/lib/libgtk-x11-2.0.so.0[0xb7bb7b62]
42 /usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x122)[0xb7742772]
43 /usr/lib/libgobject-2.0.so.0[0xb77532fd]
44 /usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x68f)[0xb77545cf]
45 /usr/lib/libgobject-2.0.so.0(g_signal_emit+0x29)[0xb77549c9]
46 /usr/lib/libgtk-x11-2.0.so.0[0xb7cf1118]
47 /usr/lib/libgtk-x11-2.0.so.0(gtk_main_do_event+0x42f)[0xb7bb0eaf]
48 /usr/lib/libgdk-x11-2.0.so.0[0xb79ea831]
49 /usr/lib/libgdk-x11-2.0.so.0(gdk_window_process_all_updates+0x97)[0xb79eaa57]
50 /usr/lib/libgdk-x11-2.0.so.0[0xb79eaabb]
51 /usr/lib/libgdk-x11-2.0.so.0[0xb79d0a48]
52 /usr/lib...

[Hilario J. Montoliu (hjmf) (hmontoliu)]

Thank you for your report,

This particular issue has already been reported as bug #129007 [1]
([MASTER] firefox-bin crashed with crux theme [@moz_gtk_widget_paint] at
#10).

Please feel free to add any other information you might consider to be
related to this particular issue (e.g. a test case) either to [1] or [2].

As the original reporter you'll be informed by email of all comments or
changes that affects either this report or the Master Bug (bug
#129007 [1]). You can unsubscribe [3] to stop receiving this
mailing at any time.

And, of course, please don't doubt to report any other crashes/issues
you might find in the future.

Further information can be found at [4].

Again, thank you.

[1] https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/129007
[2] https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/128185
[3] https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/129007/+subscribe
[4] https://wiki.ubuntu.com/MozillaTeam/Bugs

[Hilario J. Montoliu (hjmf) (hmontoliu)]

Please K8BeBop, can you confirm that the problem gets back by reisntalling the crux theme?

Thanks in advance.