[Bug 96894] Re: [apport] firefox-bin crashed with SIGSEGV in __kernel_vsyscall()

Hilario J. Montoliu (hjmf) hjmf at telefonica.net
Tue Mar 27 10:25:08 UTC 2007


Retrace done: 
...
#4  nsMimeTypeArray::GetMimeTypes (this=0x971af18) at nsMimeTypeArray.cpp:231
	mimeTypeCount = 0
	plugin = (class nsIDOMPlugin *) 0x0
	i = 416
	mimeTypeIndex = 104
	k = 9
	pluginCount = 11
	pluginArray = (class nsIDOMPluginArray *) 0x9496288
	rv = 0
#5  0xb5b9fb79 in nsMimeTypeArray::GetLength (this=0x971af18, 
    aLength=0xbfbd0c78) at nsMimeTypeArray.cpp:80
	rv = <value optimized out>
#6  0xb7eb4579 in XPTC_InvokeByIndex () at xptcinvoke_gcc_x86_unix.cpp:50
No locals.
#7  0xb6816dc4 in XPCWrappedNative::CallMethod (ccx=@0xbfbd0da8, 
    mode=XPCWrappedNative::CALL_GETTER) at xpcwrappednative.cpp:2169
	dp = <value optimized out>
	_automarker_2197 = {<AutoMarkingPtr> = {
    _vptr.AutoMarkingPtr = 0xb7f2f09a, mNext = 0xaf117300, mTLS = 0x80e5930}, 
  mPtr = 0x9a089f1}
	array_count = <value optimized out>
#40 0xb5b9313a in nsGlobalWindow::OpenInternal (this=0x837a2c8, 
    aUrl=@0xbfbd2120, aName=@0xbfbd2088, aOptions=@0xbfbd1ff0, aDialog=1, 
    aCalledNoScript=0, aDoJSFixups=0, argv=0x9887b44, argc=4, 
    aExtraArgument=0x0, aCalleePrincipal=0x815c6f0, aReturn=0xbfbd234c)
    at nsGlobalWindow.cpp:6155
	pwwatch = {<nsCOMPtr_base> = {mRawPtr = 0x8148224}, <No data fields>}
	extraArgc = 1
	chrome = {<nsCOMPtr_base> = {mRawPtr = 0x8382004}, <No data fields>}
	currentCodebase = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
	url = {<nsCString> = {<nsCSubstring> = {<nsACString_internal> = {
        mVTable = 0xb7ed2128, 
        mData = 0x8bf31f8 "chrome://mozapps/content/plugins/pluginInstallerWizard.xul", mLength = 58, 
        mFlags = 5}, <No data fields>}, <No data fields>}, <No data fields>}
	rv = 0
	abuseLevel = 137459512
	allowReason = <value optimized out>
	domReturn = {<nsCOMPtr_base> = {mRawPtr = 0xa568c58}, <No data fields>}
	wwatch = {<nsCOMPtr_base> = {mRawPtr = 0x8148220}, <No data fields>}
	options = {<nsCAutoString> = {<nsFixedCString> = {<nsCString> = {<nsCSubstring> = {<nsACString_internal> = {mVTable = 0xb7ed2128, 
            mData = 0xbfbd1f54 "modal,chrome,resizable=yes", mLength = 26, 
            mFlags = 65553}, <No data fields>}, <No data fields>}, 
#41 0xb5b93b7a in nsGlobalWindow::OpenDialog (this=0x837a2c8, 
    _retval=0xbfbd234c) at nsGlobalWindow.cpp:4473
	ncc = {<nsCOMPtr_base> = {mRawPtr = 0xbfbd247c}, <No data fields>}
	rv = 0
	cx = (JSContext *) 0x837a520
	url = {<nsFixedString> = {<nsString> = {<nsSubstring> = {<nsAString_internal> = {mVTable = 0xb7ed2028, mData = 0xbfbd2138, mLength = 58, 
          mFlags = 65553}, <No data fields>}, <No data fields>}, 
    mFixedCapacity = 63, mFixedBuf = 0xbfbd2138}, mStorage = {99, 104, 114, 
    111, 109, 101, 58, 47, 47, 109, 111, 122, 97, 112, 112, 115, 47, 99, 111, 
    110, 116, 101, 110, 116, 47, 112, 108, 117, 103, 105, 110, 115, 47, 112, 
    108, 117, 103, 105, 110, 73, 110, 115, 116, 97, 108, 108, 101, 114, 87, 
    105, 122, 97, 114, 100, 46, 120, 117, 108, 0, 46697, 53896, 2068, 0, 0}}
	name = {<nsFixedString> = {<nsString> = {<nsSubstring> = {<nsAString_internal> = {mVTable = 0xb7ed2028, mData = 0xbfbd20a0, mLength = 9, 
          mFlags = 65553}, <No data fields>}, <No data fields>}, 
    mFixedCapacity = 63, mFixedBuf = 0xbfbd20a0}, mStorage = {80, 70, 83, 87, 
    105, 110, 100, 111, 119, 0, 1, 0, 8392, 49085, 24753, 46562, 39464, 2103, 
    1, 0, 0, 0, 15596, 46547, 0, 0, 24952, 2104, 8600, 49085, 25718, 46523, 
    33080, 2090, 28240, 2104, 42272, 2103, 30520, 2097, 5636, 2085, 1, 0, 
    8868, 49085, 8872, 49085, 21844, 47073, 8580, 49085, 8572, 49085, 50344, 
    47072, 1, 0, 8556, 49085, 44576, 2064, 0, 0}}
	options = {<nsFixedString> = {<nsString> = {<nsSubstring> = {<nsAString_internal> = {mVTable = 0xb7ed2028, mData = 0xbfbd2008, mLength = 26, 
#42 0xb7eb4579 in XPTC_InvokeByIndex () at xptcinvoke_gcc_x86_unix.cpp:50
No locals.
#43 0xb6816dc4 in XPCWrappedNative::CallMethod (ccx=@0xbfbd247c, 
    mode=XPCWrappedNative::CALL_METHOD) at xpcwrappednative.cpp:2169
	dp = <value optimized out>
	_automarker_2197 = {<AutoMarkingPtr> = {
    _vptr.AutoMarkingPtr = 0xb7f2f09a, mNext = 0x83171c0, mTLS = 0x80e5930}, 
  mPtr = 0x82c1085}
	array_count = <value optimized out>
	datum_type = {<XPTTypeDescriptorPrefix> = {
    flags = 47 '/'}, <No data fields>}
	isArray = <value optimized out>
	v = <value optimized out>
	_val_2197 = {mVal = -1208481468, mValPtr = 0x1}
	isSizedString = <value optimized out>
	rv = <value optimized out>
	paramBuffer = {{<nsXPTCMiniVariant> = {val = {i8 = 0 '\0', i16 = 0, 
        i32 = 0, i64 = -4630505396887355392, u8 = 0 '\0', u16 = 0, u32 = 0, 
        u64 = 13816238676822196224, f = 0, d = -0.11382865905761719, b = 0, 
        c = 0 '\0', wc = 0, p = 0x0}}, ptr = 0xbfbd234c, 
    type = {<XPTTypeDescriptorPrefix> = {
#44 0xb681d6cf in XPC_WN_CallMethod (cx=0x837a520, obj=0x83171c0, argc=4, 
    argv=0x9887b44, vp=0xbfbd2598) at xpcwrappednativejsops.cpp:1455
	funobj = (JSObject *) 0x99009b0
	ccx = {<nsIXPCNativeCallContext> = {<nsISupports> = {
      _vptr.nsISupports = 0xb682d3e8}, <No data fields>}, mRefCnt = {
    mValue = 1}, mState = XPCCallContext::READY_TO_CALL, mXPC = 0x80e4158, 
  mThreadData = 0x80e58f8, mXPCContext = 0x837a6b8, mJSContext = 0x837a520, 
  mContextPopRequired = 0, mDestroyJSContextInDestructor = 0, 
  mCallerLanguage = XPCContext::LANG_JS, 
  mPrevCallerLanguage = XPCContext::LANG_UNKNOWN, mPrevCallContext = 0x0, 
  mOperandJSObject = 0x83171c0, mCurrentJSObject = 0x83171c0, 
  mFlattenedJSObject = 0x83171c0, mWrapper = 0x8380e70, mTearOff = 0x8380e8c, 
  mScriptableInfo = 0x8389938, mSet = 0x8674918, mInterface = 0x82c0fd0, 
  mMember = 0x82c1084, mName = 136648196, mStaticMemberIsLocal = 168533056, 
  mArgc = 4, mArgv = 0x9887b44, mRetVal = 0xbfbd2598, mExceptionWasThrown = 0, 
  mReturnValueWasSet = 0, mMethodIndex = 16, mCallee = 0x0}
	wrapper = <value optimized out>
	iface = (XPCNativeInterface *) 0x82c0fd0
	member = (XPCNativeMember *) 0x82c1084
#45 0xb7f27a29 in js_Invoke (cx=0x837a520, argc=4, flags=0) at jsinterp.c:1396
	mark = (void *) 0x9887b58
#46 0xb7f1958d in js_Interpret (cx=0x837a520, pc=0x84397db "=", 
    result=0xbfbd28b8) at jsinterp.c:3973
	idval_ = <value optimized out>
	rt = (JSRuntime *) 0x810ae20
	fp = (JSStackFrame *) 0x9887aac
	script = (JSScript *) 0x8439780
	inlineCallCount = 2
	obj = (JSObject *) 0x99009b0
	obj2 = (JSObject *) 0x8317738
	parent = <value optimized out>
	currentVersion = <value optimized out>
	originalVersion = JSVERSION_DEFAULT
	onbranch = (
    JSBranchCallback) 0xb5b7fa90 <nsJSContext::DOMBranchCallback(JSContext*, JSScript*)>
	ok = 1
	cond = 1
	interruptHandler = (JSTrapHandler) 0
	depth = 7
	len = <value optimized out>
	sp = <value optimized out>
	newsp = <value optimized out>
#47 0xb7f27edf in js_Invoke (cx=0x837a520, argc=1, flags=2) at jsinterp.c:1415
	thispflags = 8211
	mark = (void *) 0x98879dc
	fp = (JSStackFrame *) 0xbfbd28ec
	frame = {callobj = 0x0, argsobj = 0x0, varobj = 0x0, 
  script = 0x9280f90, fun = 0x8b01190, thisp = 0x8ee5fe8, argc = 1, 
  argv = 0x98879d8, rval = -2147483647, nvars = 0, vars = 0x98879dc, 
  down = 0xbfbd28ec, annotation = 0x0, scopeChain = 0x8ee5fe8, 
  pc = 0x9280fce ":", sp = 0x98879f4, spbase = 0x98879e8, sharpDepth = 0, 
  sharpArray = 0x0, flags = 2, dormantNext = 0x0, xmlNamespace = 0x0, 
  blockChain = 0x0}
	sp = <value optimized out>
	newsp = <value optimized out>
	vp = (jsval *) 0x98879d0
	v = -2147483647
	thisv = 149839848
	funobj = <value optimized out>
	parent = (JSObject *) 0x8ee5fe8
	thisp = <value optimized out>
	ok = -1234622632
	clasp = <value optimized out>
#48 0xb7f28a5d in js_InternalInvoke (cx=0x837a520, obj=0x8ee5fe8, 
    fval=151450304, flags=2, argc=1, argv=0xbfbd2b14, rval=0xbfbd2b04)
    at jsinterp.c:1490
	fp = (JSStackFrame *) 0xbfbd28ec
	oldfp = (JSStackFrame *) 0x0
	frame = {callobj = 0x0, argsobj = 0x0, varobj = 0x0, script = 0x0, 
  fun = 0x0, thisp = 0x0, argc = 0, argv = 0x0, rval = 0, nvars = 0, 
  vars = 0x0, down = 0x0, annotation = 0x0, scopeChain = 0x0, pc = 0x0, 
  sp = 0x98879dc, spbase = 0x0, sharpDepth = 0, sharpArray = 0x0, flags = 0, 
  dormantNext = 0x0, xmlNamespace = 0x0, blockChain = 0x0}
	oldsp = (jsval *) 0x0
	sp = <value optimized out>
	mark = <value optimized out>
	i = <value optimized out>
	ok = <value optimized out>
#49 0xb7ee6cf0 in JS_CallFunctionValue (cx=0x837a520, obj=0x8ee5fe8, 
    fval=151450304, argc=1, argv=0xbfbd2b14, rval=0xbfbd2b04) at jsapi.c:4356
	ok = <value optimized out>
#50 0xb5b7f75a in nsJSContext::CallEventHandler (this=0x837a4e0, 
    aTarget=0x8ee5fe8, aHandler=0x906f2c0, argc=1, argv=0xbfbd2b14, 
    rval=0xbfbd2b04) at nsJSEnvironment.cpp:1493
...

Tagging as mt-confirm for further processing

** Changed in: firefox (Ubuntu)
     Assignee: (unassigned) => Mozilla Bugs
       Status: Unconfirmed => Needs Info

** Summary changed:

- [apport] firefox-bin crashed with SIGSEGV in __kernel_vsyscall()
+ [feisty] Firefox Crashed

** Tags added: mt-needretrace

** Attachment added: "Retraced Stacktrace"
   http://librarian.launchpad.net/6992566/%3Cfdopen%3E

-- 
[feisty] Firefox Crashed [@nsMimeTypeArray::GetMimeTypes]
https://launchpad.net/bugs/96894




More information about the Ubuntu-mozillateam-bugs mailing list