Bugzilla – Bug 3389
in97 firefox (3.0.1) dies in unsigned nsGNOMEShellService::GetShouldCheckDefaultBrowser(int*)
Last modified: 2008-10-17 02:16:59 UTC
You need to log in before you can comment on or make changes to this bug.
On indiana 96, for me, firefox worked fine. In 97, it crashes on every startup as follows: core 'core.firefox-bin.uid77293.20234@1221094938' of 20234: /usr/lib/firefox/firefox-bin ----------------- lwp# 1 / thread# 1 -------------------- fecde8f5 _lwp_kill (1, b) + 15 fec920b2 raise (b, 8045ed0, 0, fcc7ce1e) + 22 fcc7ceff __1cNnsProfileLockSFatalSignalHandler6Fi_v_ (b, 0, 8045fa4) + ef fecda3cf __sighndlr (b, 0, 8045fa4, fcc7ce10) + f feccf3b2 call_user_handler (b, 0, 8045fa4) + 2bf feccf5e6 sigacthandler (b, 0, 8045fa4) + d0 --- called from signal handler with signal 11 (SIGSEGV) --- f6f6d6ba __1cTnsGNOMEShellServicebCGetShouldCheckDefaultBrowser6Mpi_I_ (f2552160, 8046320, 1, 8170a08, f25521 60, 5) + 8a 0814eb27 NS_InvokeByIndex_P (f2552160, 5, 1, 8046320) + 51 fccbdccb __1cQXPCWrappedNativeKCallMethod6FrnOXPCCallContext_n0AICallMode__i_ (80464a0, 1, f2876670, 0) + 148 3 fccc734f __1cTXPC_WN_GetterSetter6FpnJJSContext_pnIJSObject_Ipl4_i_ (f8684da0, f252dca0, 0, f4e860b8, 804660c , 0) + 153 f8b3b988 js_Invoke (f8684da0, 0, f4e860b0, 0) + 9c4 f8b3bf9b js_InternalGetOrSet (f8684da0, f252dca0, f4e0bd1c, f252dcc0, 4, 0) + 1f7 f8b56558 js_NativeGet (f8684da0, f252dca0, f252dca0, f252fbb0, 8046834, f4e0bd1c) + 10c f8b570c0 js_GetPropertyHelper (f8684da0, f252dca0, f4e0bd1c, 8046834, 804685c, 1) + 870 f8b37911 js_Interpret (f8684da0, 8046950, f4e24220, f8b3afd5) + 9865 f8b3b9dc js_Invoke (f8684da0, 1, f4e86020, 0) + a18 f8b3bcc2 js_InternalInvoke (f8684da0, f4e24220, f2cb2000, 0, 1, f4e7b9a4) + 182 f8ab3b15 JS_CallFunctionValue (f8684da0, f4e24220, f2cb2000, 1, f4e7b9a4, 8046a74) + 2d fd3d6e9c __1cLnsJSContextQCallEventHandler6MpnLnsISupports_pv3pnInsIArray_ppnKnsIVariant__I_ (f62b98e0, f8652 350, f4e24220, f2cb2000, f62e3ac4, 8046b74) + 320 fd3ffed4 __1cOnsGlobalWindowKRunTimeout6MpnJnsTimeout__v_ (f8652350, f28d87c0, 436fba92, fd400dda) + 478 fd400dfa __1cOnsGlobalWindowNTimerCallback6FpnInsITimer_pv_v_ (f28db040, f28d87c0, e56e0d5a, e56f16ee) + 2e fdc2cc40 __1cLnsTimerImplEFire6M_v_ (f28db040, 0, 8046cb8, fdc2cd0e) + 144 fdc2cd51 __1cMnsTimerEventDRun6M_I_ (f28e9590, 1, 8046cdc, 0) + 51 fdc28afb __1cInsThreadQProcessNextEvent6Mipi_I_ (f860fe70, 1, 8046d1c, fdbc5f89) + 143 fdbc5fc0 __1cVNS_ProcessNextEvent_P6FpnJnsIThread_i_i_ (f860fe70, 1, 8046d58, fda6b6c6) + 44 fda6b6e6 __1cOnsBaseAppShellDRun6M_I_ (f66933d0, fd7fd254, 0, fd7fee3c) + 3a fd7fee64 __1cMnsAppStartupDRun6M_I_ (f624a280, f862f0d8, 8046fa4, 0) + 34 fcc73adc XRE_main (1, 80471f4, f86030c0, 2) + 33b4 080ae32b main (1, 80471f4, 80471fc, 80adf60) + 223 080adffd _start (1, 80473b4, 0, 80473d1, 80473ea, 804742c) + 7d ----------------- lwp# 2 / thread# 2 -------------------- Filtered, this is: ----------------- lwp# 1 / thread# 1 -------------------- fecde8f5 _lwp_kill (1, b) + 15 fec920b2 raise (b, 8045ed0, 0, fcc7ce1e) + 22 fcc7ceff void nsProfileLock::FatalSignalHandler(int) (b, 0, 8045fa4) + ef fecda3cf __sighndlr (b, 0, 8045fa4, fcc7ce10) + f feccf3b2 call_user_handler (b, 0, 8045fa4) + 2bf feccf5e6 sigacthandler (b, 0, 8045fa4) + d0 --- called from signal handler with signal 11 (SIGSEGV) --- f6f6d6ba unsigned nsGNOMEShellService::GetShouldCheckDefaultBrowser(int*) (f2552160, 8046320, 1, 8170a08, f25 52160, 5) + 8a 0814eb27 NS_InvokeByIndex_P (f2552160, 5, 1, 8046320) + 51 fccbdccb int XPCWrappedNative::CallMethod(XPCCallContext&,XPCWrappedNative::CallMode) (80464a0, 1, f2876670, 0) + 1483 fccc734f int XPC_WN_GetterSetter(JSContext*,JSObject*,unsigned,long*,long*) (f8684da0, f252dca0, 0, f4e860b8, 804660c, 0) + 153 f8b3b988 js_Invoke (f8684da0, 0, f4e860b0, 0) + 9c4 f8b3bf9b js_InternalGetOrSet (f8684da0, f252dca0, f4e0bd1c, f252dcc0, 4, 0) + 1f7 f8b56558 js_NativeGet (f8684da0, f252dca0, f252dca0, f252fbb0, 8046834, f4e0bd1c) + 10c f8b570c0 js_GetPropertyHelper (f8684da0, f252dca0, f4e0bd1c, 8046834, 804685c, 1) + 870 f8b37911 js_Interpret (f8684da0, 8046950, f4e24220, f8b3afd5) + 9865 f8b3b9dc js_Invoke (f8684da0, 1, f4e86020, 0) + a18 f8b3bcc2 js_InternalInvoke (f8684da0, f4e24220, f2cb2000, 0, 1, f4e7b9a4) + 182 f8ab3b15 JS_CallFunctionValue (f8684da0, f4e24220, f2cb2000, 1, f4e7b9a4, 8046a74) + 2d fd3d6e9c unsigned nsJSContext::CallEventHandler(nsISupports*,void*,void*,nsIArray*,nsIVariant**) (f62b98e0, f 8652350, f4e24220, f2cb2000, f62e3ac4, 8046b74) + 320 fd3ffed4 void nsGlobalWindow::RunTimeout(nsTimeout*) (f8652350, f28d87c0, 436fba92, fd400dda) + 478 fd400dfa void nsGlobalWindow::TimerCallback(nsITimer*,void*) (f28db040, f28d87c0, e56e0d5a, e56f16ee) + 2e fdc2cc40 void nsTimerImpl::Fire() (f28db040, 0, 8046cb8, fdc2cd0e) + 144 fdc2cd51 unsigned nsTimerEvent::Run() (f28e9590, 1, 8046cdc, 0) + 51 fdc28afb unsigned nsThread::ProcessNextEvent(int,int*) (f860fe70, 1, 8046d1c, fdbc5f89) + 143 fdbc5fc0 int NS_ProcessNextEvent_P(nsIThread*,int) (f860fe70, 1, 8046d58, fda6b6c6) + 44 fda6b6e6 unsigned nsBaseAppShell::Run() (f66933d0, fd7fd254, 0, fd7fee3c) + 3a fd7fee64 unsigned nsAppStartup::Run() (f624a280, f862f0d8, 8046fa4, 0) + 34 fcc73adc XRE_main (1, 80471f4, f86030c0, 2) + 33b4 080ae32b main (1, 80471f4, 80471fc, 80adf60) + 223 080adffd _start (1, 80473b4, 0, 80473d1, 80473ea, 804742c) + 7d This is repeatable even if I move aside my .mozilla folder! Stephen Hahn had the same problem with the same stack trace on one of his machines, but not on another. As a workaround, I downloaded firefox 3.0.1 from mozilla.org and that worked OK. I also noticed that if I run under libumem with debugging enabled, firefox crashes on heap corruption.
1) Please remove /usr/lib/firefox/components/compreg.dat and try again. 2) For preloading libumem. Please use Firefox 3.0.1 in96 instead for now. We've fixed this issue in build 99.
Thanks, this workaround worked for me. Removing compreg.dat did the trick.