Package: firefox
Version: 1.5.dfsg+1.5.0.7-1
Severity: important

Hi,

Sometimes, closing the print preview window crashes firefox.  This
seems to be bugzilla bug #351225 [1].  Since I can't tell whether this
has been resolved yet in the current debian package, I decided to
report it.  Just in case, I've added a gdb backtrace.

Thanks.


- Felix

[1] https://bugzilla.mozilla.org/show_bug.cgi?id=351225

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (900, 'unstable'), (890, 'testing'), (870, 'experimental')
Architecture: powerpc (ppc)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-1-powerpc
Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1)

Versions of packages firefox depends on:
ii  debianutils               2.17.3         Miscellaneous utilities specific t
ii  fontconfig                2.4.1-2        generic font configuration library
ii  libatk1.0-0               1.12.2-1       The ATK accessibility toolkit
ii  libc6                     2.3.6.ds1-4    GNU C Library: Shared libraries
ii  libcairo2                 1.2.4-1        The Cairo 2D vector graphics libra
ii  libfontconfig1            2.4.1-2        generic font configuration library
ii  libfreetype6              2.2.1-5        FreeType 2 font engine, shared lib
ii  libgcc1                   1:4.1.1-15     GCC support library
ii  libglib2.0-0              2.12.3-2       The GLib library of C routines
ii  libgtk2.0-0               2.8.20-2       The GTK+ graphical user interface
ii  libjpeg62                 6b-13          The Independent JPEG Group's JPEG
ii  libpango1.0-0             1.14.4-2       Layout and rendering of internatio
ii  libpng12-0                1.2.8rel-5.2   PNG library - runtime
ii  libstdc++6                4.1.1-15       The GNU Standard C++ Library v3
ii  libx11-6                  2:1.0.0-9      X11 client-side library
ii  libxft2                   2.1.8.2-8      FreeType-based font drawing librar
ii  libxinerama1              1:1.0.1-4.1    X11 Xinerama extension library
ii  libxp6                    1:1.0.0.xsf1-1 X Printing Extension (Xprint) clie
ii  libxt6                    1:1.0.2-2      X11 toolkit intrinsics library
ii  psmisc                    22.3-1         Utilities that use the proc filesy
ii  zlib1g                    1:1.2.3-13     compression library - runtime

firefox recommends no packages.

-- no debconf information

-- 
Felix C. Stegerman <[EMAIL PROTECTED]>                  http://obfusk.net
~ "Any sufficiently advanced bug is indistinguishable from a feature."
~   -- R. Kulawiec
~ vim: set ft=mail tw=70 sw=2 sts=2 et:
$ firefox -g -safe-mode

 1. Go to http://en.wikipedia.org/wiki/Discworld_MUD
 2. Go to print preview
 3. Close print preview
 4. Go to print preview (again)
 5. Close print preview

Segmentation fault
$ firefox -g -safe-mode
GNU gdb 6.4.90-debian
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "powerpc-linux-gnu"...Using host libthread_db 
library "/lib/tls/libthread_db.so.1".

(gdb) set pagination off
(gdb) run
Starting program: /usr/lib/firefox/firefox-bin -safe-mode -a firefox
[Thread debugging using libthread_db enabled]
[New Thread 805451648 (LWP 22557)]
[New Thread 816342240 (LWP 22565)]
[New Thread 824792288 (LWP 22566)]
[New Thread 833598688 (LWP 22569)]
[New Thread 841987296 (LWP 22570)]
[New Thread 852018400 (LWP 22571)]
[New Thread 860407008 (LWP 22572)]
[New Thread 870315232 (LWP 22588)]
[Thread 870315232 (LWP 22588) exited]
[New Thread 878703840 (LWP 22589)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 805451648 (LWP 22557)]
0x0f432dbc in FcCharSetDestroy () from /usr/lib/libfontconfig.so.1
(gdb) bt full
#0  0x0f432dbc in FcCharSetDestroy () from /usr/lib/libfontconfig.so.1
No symbol table info available.
#1  0x1020f888 in ~nsFontMetricsPS (this=0x11978040) at nsFontMetricsPS.cpp:111
No locals.
#2  0x1020c6fc in nsFontMetricsPS::Release (this=0x32318b28) at 
nsFontMetricsPS.cpp:135
No locals.
#3  0x10b271c0 in nsFontCache::Flush (this=<value optimized out>) at 
nsDeviceContext.cpp:715
        i = 13
#4  0x10b272f8 in ~nsFontCache (this=0x32318b28) at nsDeviceContext.cpp:580
No locals.
#5  0x1020a994 in ~nsFontCachePS (this=0x32318b28) at nsDeviceContextPS.cpp:547
No locals.
#6  0x10b28468 in ~DeviceContextImpl (this=0x1108ef38) at nsDeviceContext.cpp:88
No locals.
#7  0x1020a544 in ~nsDeviceContextPS (this=0x11a2bf20) at 
nsDeviceContextPS.cpp:134
No locals.
#8  0x10b2752c in DeviceContextImpl::Release (this=0x32318b28) at 
nsDeviceContext.cpp:54
No locals.
#9  0x10209b80 in nsDeviceContextPS::Release (this=0x32318b28) at 
nsDeviceContextPS.cpp:179
No locals.
#10 0x0fe3c5ac in nsCOMPtr_base::assign_with_AddRef (this=0x0, rawPtr=0x0) at 
./../glue/nsCOMPtr.h:531
No locals.
#11 0x10b26af8 in DeviceContextImpl::SetAltDevice (this=0x1119b2f0, 
aAltDC=0x20) at ../../dist/include/xpcom/nsCOMPtr.h:713
No locals.
#12 0x102ee854 in DocumentViewerImpl::InitInternal (this=0x115e4b10, 
aParentWidget=0x113baa60, aState=0x0, aDeviceContext=0x1119b2f0, [EMAIL 
PROTECTED], aDoCreation=2147122984, aInPrintPreview=1) at 
nsDocumentViewer.cpp:786
        rv = <value optimized out>
        makeCX = <value optimized out>
        requestor = {<nsCOMPtr_base> = {mRawPtr = 0x118a4338}, <No data fields>}
#13 0x102eee74 in DocumentViewerImpl::ReturnToGalleyPresentation 
(this=0x115e4b10) at nsDocumentViewer.cpp:3972
        bounds = {x = 0, y = 0, width = 1024, height = 687}
        dstParentItem = {<nsCOMPtr_base> = {mRawPtr = 0x111994d8}, <No data 
fields>}
        dstItem = {<nsCOMPtr_base> = {mRawPtr = 0x113ae310}, <No data fields>}
        wasCached = 0
#14 0x102e6ba0 in DocumentViewerImpl::ExitPrintPreview (this=0x32318b28) at 
nsDocumentViewer.cpp:3650
No locals.
#15 0x0fec11c8 in XPTC_InvokeByIndex () from /usr/lib/firefox/libxpcom_core.so
No symbol table info available.
#16 0x1006a178 in XPCWrappedNative::CallMethod ([EMAIL PROTECTED], mode=<value 
optimized out>) at xpcwrappednative.cpp:2156
        paramBuffer = {{<nsXPTCMiniVariant> = {val = {i8 = 127 '\177', i16 = 
32762, i32 = 2147123664, i64 = 9221825917675122586, u8 = 127 '\177', u16 = 
32762, u32 = 2147123664, u64 = 9221825917675122586, f = nan(0x7a81d0), d = 
nan(0xa81d013842f9a), b = 2147123664, c = 127 '\177', wc = 32762, p = 
0x7ffa81d0}}, ptr = 0x1140cb38, type = {<XPTTypeDescriptorPrefix> = {flags = 16 
'\020'}, <No data fields>}, flags = 221 'Ý'}, {<nsXPTCMiniVariant> = {val = {i8 
= 17 '\021', i16 = 4352, i32 = 285224960, i64 = 1225031875485848408, u8 = 17 
'\021', u16 = 4352, u32 = 285224960, u64 = 1225031875485848408, f = 
1.01122107e-28, d = 8.5414790907931021e-227, b = 285224960, c = 17 '\021', wc = 
4352, p = 0x11003000}}, ptr = 0x7ffa83f8, type = {<XPTTypeDescriptorPrefix> = 
{flags = 0 '\0'}, <No data fields>}, flags = 0 '\0'}, {<nsXPTCMiniVariant> = 
{val = {i8 = 16 '\020', i16 = 4310, i32 = 282466032, i64 = 1213182371818013380, 
u8 = 16 '\020', u16 = 4310, u32 = 282466032, u64 = 1213182371818013380, f = 
8.44434577e-29, d = 1.4569722519413982e-227, b = 282466032, c = 16 '\020', wc = 
4310, p = 0x10d616f0}}, ptr = 0x113ba878, type = {<XPTTypeDescriptorPrefix> = 
{flags = 17 '\021'}, <No data fields>}, flags = 59 ';'}, {<nsXPTCMiniVariant> = 
{val = {i8 = 127 '\177', i16 = 32762, i32 = 2147123904, i64 = 
9221826948428863064, u8 = 127 '\177', u16 = 32762, u32 = 2147123904, u64 = 
9221826948428863064, f = nan(0x7a82c0), d = nan(0xa82c0113a1658), b = 
2147123904, c = 127 '\177', wc = 32762, p = 0x7ffa82c0}}, ptr = 0x11003000, 
type = {<XPTTypeDescriptorPrefix> = {flags = 17 '\021'}, <No data fields>}, 
flags = 94 '^'}, {<nsXPTCMiniVariant> = {val = {i8 = 127 '\177', i16 = 32762, 
i32 = 2147123916, i64 = 9221826999968561408, u8 = 127 '\177', u16 = 32762, u32 
= 2147123916, u64 = 9221826999968561408, f = nan(0x7a82cc), d = 
nan(0xa82cc113b7900), b = 2147123916, c = 127 '\177', wc = 32762, p = 
0x7ffa82cc}}, ptr = 0x10, type = {<XPTTypeDescriptorPrefix> = {flags = 16 
'\020'}, <No data fields>}, flags = 221 'Ý'}, {<nsXPTCMiniVariant> = {val = {i8 
= 127 '\177', i16 = 32762, i32 = 2147123728, i64 = 9221826192515058488, u8 = 
127 '\177', u16 = 32762, u32 = 2147123728, u64 = 9221826192515058488, f = 
nan(0x7a8210), d = nan(0xa82101140cb38), b = 2147123728, c = 127 '\177', wc = 
32762, p = 0x7ffa8210}}, ptr = 0x113b07e0, type = {<XPTTypeDescriptorPrefix> = 
{flags = 16 '\020'}, <No data fields>}, flags = 221 'Ý'}, {<nsXPTCMiniVariant> 
= {val = {i8 = 127 '\177', i16 = 32762, i32 = 2147123872, i64 = 
9221826810975528852, u8 = 127 '\177', u16 = 32762, u32 = 2147123872, u64 = 
9221826810975528852, f = nan(0x7a82a0), d = nan(0xa82a0105ea794), b = 
2147123872, c = 127 '\177', wc = 32762, p = 0x7ffa82a0}}, ptr = 0x10dde180, 
type = {<XPTTypeDescriptorPrefix> = {flags = 17 '\021'}, <No data fields>}, 
flags = 64 '@'}, {<nsXPTCMiniVariant> = {val = {i8 = 16 '\020', i16 = 4310, i32 
= 282466032, i64 = 1213182369953853824, u8 = 16 '\020', u16 = 4310, u32 = 
282466032, u64 = 1213182369953853824, f = 8.44434577e-29, d = 
1.4569718151173127e-227, b = 282466032, c = 16 '\020', wc = 4310, p = 
0x10d616f0}}, ptr = 0x10d616f0, type = {<XPTTypeDescriptorPrefix> = {flags = 16 
'\020'}, <No data fields>}, flags = 250 'ú'}}
        autoStrings = {{<nsFixedString> = {<nsString> = {<nsSubstring> = 
{<nsAString_internal> = {mVTable = 0xfef2098, mData = 0x7ffa8248, mLength = 0, 
mFlags = 65553}, <No data fields>}, <No data fields>}, mFixedCapacity = 63, 
mFixedBuf = 0x7ffa8248}, mStorage = {0, 0, 0, 1, 32762, 33376, 0, 1, 4061, 
62824, 4317, 51768, 32762, 33408, 4058, 23696, 4410, 5720, 4317, 35980, 0, 16, 
0, 1, 4411, 30976, 4446, 31712, 32762, 33424, 4100, 17388, 4410, 5720, 32762, 
33484, 32762, 33440, 4100, 32804, 4352, 12288, 4352, 12288, 32762, 33520, 4102, 
36028, 0, 0, 18436, 18564, 0, 0, 32762, 33760, 4362, 38880, 0, 0, 32762, 33504, 
4103, 6304}}}
        autoStringIndex = 294463596
        retval = 0
        dispatchParams = (nsXPTCVariant *) 0x7ffa81b0
        i = <value optimized out>
        methodInfo = (const nsXPTMethodInfo *) 0x11473c60
        paramCount = 0 '\0'
        src = 268386972
        invokeResult = <value optimized out>
        param_iid = {m0 = 282964328, m1 = 4352, m2 = 12288, m3 = "[EMAIL 
PROTECTED]"}
        err = <value optimized out>
        sm = <value optimized out>
        foundDependentParam = 2147124192
        rt = (XPCJSRuntime *) 0x10ddca68
        callee = (nsISupports *) 0x115e4b20
        tls = (XPCPerThreadData *) 0x10ddc9c0
        vtblIndex = 18
        ifaceInfo = (class nsIInterfaceInfo *) 0x1185c148
        name = 287027764
        argv = (jsval *) 0x118d2870
        secAction = <value optimized out>
#17 0x100719a8 in XPC_WN_CallMethod (cx=0x11003000, obj=<value optimized out>, 
argc=<value optimized out>, argv=<value optimized out>, vp=<value optimized 
out>) at xpcwrappednativejsops.cpp:1445
        funobj = (JSObject *) 0x10fedc90
        ccx = {<nsIXPCNativeCallContext> = {<nsISupports> = {_vptr.nsISupports 
= 0x10b55ad0}, <No data fields>}, mRefCnt = {mValue = 0}, mState = 
XPCCallContext::READY_TO_CALL, mXPC = 0x10ddca38, mThreadData = 0x10ddc9c0, 
mXPCContext = 0x10e17680, mJSContext = 0x11003000, mContextPopRequired = 0, 
mDestroyJSContextInDestructor = 0, mCallerLanguage = XPCContext::LANG_JS, 
mPrevCallerLanguage = XPCContext::LANG_UNKNOWN, mPrevCallContext = 0x0, 
mOperandJSObject = 0x10fedc60, mCurrentJSObject = 0x10fedc60, 
mFlattenedJSObject = 0x10fedc60, mWrapper = 0x118365c8, mTearOff = 0x118365e4, 
mScriptableInfo = 0x0, mSet = 0x11478b30, mInterface = 0x118bc328, mMember = 
0x118bc3f4, mName = 287027764, mStaticMemberIsLocal = 2147124176, mArgc = 0, 
mArgv = 0x118d2870, mRetVal = 0x7ffa8400, mExceptionWasThrown = 0, 
mReturnValueWasSet = 0, mMethodIndex = 18, mCallee = 0x0}
        wrapper = <value optimized out>
        iface = (XPCNativeInterface *) 0x118bc328
        member = (XPCNativeMember *) 0x118bc3f4
#18 0x0ff7f298 in js_Invoke (cx=0x11003000, argc=0, flags=2) at jsinterp.c:1187
        a = <value optimized out>
        id = <value optimized out>
        pc = <value optimized out>
        atom = (JSAtom *) 0x7ffa8630
        argsobj = <value optimized out>
        mark = (void *) 0x118d2870
        fp = (JSStackFrame *) 0x7ffa8630
        frame = {callobj = 0x0, argsobj = 0x0, varobj = 0x0, script = 0x0, fun 
= 0x110a97e0, thisp = 0x10fedc60, argc = 0, argv = 0x118d2870, rval = 
-2147483647, nvars = 0, vars = 0x118d2870, down = 0x7ffa8630, annotation = 0x0, 
scopeChain = 0x10fb2b60, pc = 0x0, sp = 0x118d2870, spbase = 0x0, sharpDepth = 
0, sharpArray = 0x0, flags = 2, dormantNext = 0x0, xmlNamespace = 0x0}
        sp = <value optimized out>
        newsp = <value optimized out>
        vp = (jsval *) 0x118d2868
        v = 285138064
        funobj = <value optimized out>
        parent = (JSObject *) 0x10fedc60
        thisp = (JSObject *) 0x10fedc60
        ok = 1
        clasp = <value optimized out>
        ops = (JSObjectOps *) 0x7ffa8630
        native = (JSNative) 0x100718a0 <XPC_WN_CallMethod(JSContext*, 
JSObject*, unsigned int, long*, long*)>
        fun = (JSFunction *) 0x110a97e0
        script = (JSScript *) 0x0
        nslots = 0
        nvars = <value optimized out>
        nalloc = <value optimized out>
        hook = (JSInterpreterHook) 0
        hookData = (void *) 0x0
#19 0x0ff70e70 in js_InternalInvoke (cx=0x11003000, obj=0x10fedc60, 
fval=285138064, flags=0, argc=0, argv=0x118d2854, rval=0x7ffa8560) at 
jsinterp.c:1284
        fp = (JSStackFrame *) 0x7ffa8630
        oldfp = (JSStackFrame *) 0x7ffa8630
        frame = {callobj = 0x10fedc98, argsobj = 0x10fedc70, varobj = 
0x11003000, script = 0xfff37bc, fun = 0x112381b8, thisp = 0x7ffa84d0, argc = 
267960832, argv = 0x0, rval = 0, nvars = 16, vars = 0x112381b8, down = 0x0, 
annotation = 0x0, scopeChain = 0x7ffa84f0, pc = 0xff3ff9c 
"|`\033x|\003\003x\200\001", sp = 0x7ffa8540, spbase = 0x10b59d9c, sharpDepth = 
2147124464, sharpArray = 0x1, flags = 266204520, dormantNext = 0x10ddca38, 
xmlNamespace = 0x7ffa8510}
        oldsp = (jsval *) 0x118d2854
        sp = <value optimized out>
        mark = <value optimized out>
        ok = 0
#20 0x0ff3c4e4 in JS_CallFunctionValue (cx=0x32318b28, obj=0x20, fval=2, 
argc=294985384, argv=0x1020f888, rval=0x11951ee0) at jsapi.c:4186
        ok = <value optimized out>
#21 0x100780f4 in XPC_NW_FunctionWrapper (cx=0x11003000, obj=0x10fedc70, 
argc=0, argv=0x118d2854, rval=0x7ffa8650) at XPCNativeWrapper.cpp:385
        funObj = <value optimized out>
        methodToCallObj = (JSObject *) 0x10fedc90
        v = <value optimized out>
        ccx = {<nsIXPCNativeCallContext> = {<nsISupports> = {_vptr.nsISupports 
= 0x7ffa85ec}, <No data fields>}, mRefCnt = {mValue = 2147124624}, mState = 
268714988, mXPC = 0x7ffa8704, mThreadData = 0x7ffa85ec, mXPCContext = 
0x7ffa85a0, mJSContext = 0x10048024, mContextPopRequired = 285138032, 
mDestroyJSContextInDestructor = 1, mCallerLanguage = 2147124896, 
mPrevCallerLanguage = 268925684, mPrevCallContext = 0x0, mOperandJSObject = 
0x0, mCurrentJSObject = 0x10fedc60, mFlattenedJSObject = 0x10fedc60, mWrapper = 
0x10fedc60, mTearOff = 0x118365c8, mScriptableInfo = 0x0, mSet = 0x0, 
mInterface = 0x11478b30, mMember = 0x118bc328, mName = 294372340, 
mStaticMemberIsLocal = 287027764, mArgc = 1, mArgv = 0x7ffa8640, mRetVal = 
0x7ffa8620, mExceptionWasThrown = 283841616, mReturnValueWasSet = 268384784, 
mMethodIndex = 4277, mCallee = 0x0}
        _val_394 = {mVal = 265968784, mValPtr = 0x7ffa8704}
        _automarker_394 = {<AutoMarkingPtr> = {_vptr.AutoMarkingPtr = 
0x10fedc60, mNext = 0x118365c8, mTLS = 0x11003000}, mPtr = 0x10fedc70}
#22 0x0ff7f298 in js_Invoke (cx=0x11003000, argc=0, flags=0) at jsinterp.c:1187
        a = <value optimized out>
        id = <value optimized out>
        pc = <value optimized out>
        atom = (JSAtom *) 0x112134a5
        argsobj = <value optimized out>
        mark = (void *) 0x118d2860
        fp = (JSStackFrame *) 0x118d27cc
        frame = {callobj = 0x0, argsobj = 0x0, varobj = 0x0, script = 0x0, fun 
= 0x111b15e0, thisp = 0x10fedc70, argc = 0, argv = 0x118d2854, rval = 
-2147483647, nvars = 0, vars = 0x118d2854, down = 0x118d27cc, annotation = 0x0, 
scopeChain = 0x10fb2b60, pc = 0x0, sp = 0x118d2870, spbase = 0x0, sharpDepth = 
0, sharpArray = 0x0, flags = 0, dormantNext = 0x0, xmlNamespace = 0x0}
        sp = <value optimized out>
        newsp = <value optimized out>
        vp = (jsval *) 0x118d284c
        v = 285138072
        funobj = <value optimized out>
        parent = (JSObject *) 0x10fedc90
        thisp = (JSObject *) 0x10fedc70
        ok = 1
        clasp = <value optimized out>
        ops = (JSObjectOps *) 0x112134a5
        native = (JSNative) 0x10078000 <XPC_NW_FunctionWrapper>
        fun = (JSFunction *) 0x111b15e0
        script = (JSScript *) 0x0
        nslots = 0
        nvars = <value optimized out>
        nalloc = <value optimized out>
        hook = (JSInterpreterHook) 0
        hookData = (void *) 0x0
#23 0x0ff77808 in js_Interpret (cx=0x11003000, pc=0x112134a5 ":", 
result=0x7ffa8808) at jsinterp.c:3583
        idval_ = <value optimized out>
        rt = (JSRuntime *) 0x10dd51b8
        fp = <value optimized out>
        script = (JSScript *) 0x11213410
        inlineCallCount = 1
        obj = (JSObject *) 0x10fedc98
        obj2 = (JSObject *) 0x10fb2b60
        proto = (JSObject *) 0x10d48890
        parent = (JSObject *) 0x111b15e0
        currentVersion = <value optimized out>
        originalVersion = JSVERSION_DEFAULT
        onbranch = (JSBranchCallback) 0x105aaae0 
<nsJSContext::DOMBranchCallback(JSContext*, JSScript*)>
        ok = 1
        cond = 0
        interruptHandler = (JSTrapHandler) 0
        depth = 5
        len = <value optimized out>
        sp = <value optimized out>
        newsp = (jsval *) 0x111b15e0
        mark = (void *) 0x118d27bc
        endpc = (jsbytecode *) 0x112134f0 "°c\003È`\001d\017¼\200"
        pc2 = dwarf2_read_address: Corrupted DWARF expression.
(gdb) quit
The program is running.  Exit anyway? (y or n) y

Attachment: pgpqkGn2Vkixz.pgp
Description: PGP signature

Reply via email to