Status: Unconfirmed Owner: ---- Labels: OS-Linux Area-Misc Size-Medium Type-Bug
New issue 23635 by spotrh: msnbc.com doesn't load, causes glibc malloc error instead http://code.google.com/p/chromium/issues/detail?id=23635 Chrome Version : chromium-4.0.220.0-0.1.20090930svn27599 OS + version : Fedora 12 (rawhide) CPU architecture (32-bit / 64-bit): x86_64 window manager : metacity (GNOME) URLs (if applicable) : www.msnbc.com Behavior in Firefox 3.x (if applicable): Works fine Behavior in Chrome for Windows (optional): Unknown What steps will reproduce the problem? 1. Go to www.msnbc.com What is the expected result? MSNBC loads. What happens instead? Oh Snap! Actually, what happens is that glibc's malloc checker throws a "double free or corruption" error: *** glibc detected *** /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018: double free or corruption (!prev): 0x00000000038b4950 *** ======= Backtrace: ========= /lib64/libc.so.6(+0x758d6)[0x7fda2827b8d6] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x10ac86f] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x10e4570] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x1281433] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0xcdd301] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0xcdda97] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0xd203ed] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x118cbcf] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x1314eca] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x1416549] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x141b251] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x141baa1] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x13fb2d0] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x9341b3] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x9343cb] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x9346ad] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x934959] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x932c72] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x932e5c] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x8c0cec] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x4306e9] /lib64/libc.so.6(__libc_start_main+0xfd)[0x7fda28224b4d] /usr/lib64/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_disable_sdch/SocketLateBinding/_disable_late_binding/ --channel=20653.3d55650.1346823018[0x42f3d9] ======= Memory map: ======== [20653:20660:299165112760:ERROR:/mnt/chromium/rpmbuild/BUILD/chromium-20090930svn27599/src/ipc/ipc_channel_posix.cc(814)] pipe error on 70: Broken pipe [20653:20660:299165113336:ERROR:/mnt/chromium/rpmbuild/BUILD/chromium-20090930svn27599/src/ipc/ipc_channel_posix.cc(814)] pipe error on 70: Broken pipe [20653:20660:299165113688:ERROR:/mnt/chromium/rpmbuild/BUILD/chromium-20090930svn27599/src/ipc/ipc_channel_posix.cc(814)] pipe error on 70: Broken pipe [20653:20660:299165113889:ERROR:/mnt/chromium/rpmbuild/BUILD/chromium-20090930svn27599/src/ipc/ipc_channel_posix.cc(451)] pipe error (55): Connection reset by peer [20653:20653:299165114526:ERROR:/mnt/chromium/rpmbuild/BUILD/chromium-20090930svn27599/src/chrome/common/temp_scaffolding_stubs.h(61)] Not implemented reached in bool printing::PrintViewManager::OnRenderViewGone(RenderViewHost*) Please provide any additional information below. Attach a screenshot and backtrace if possible. Attached is a gdb-backtrace.txt (I had to run it in single process, since it looks like the WebKit renderer is to blame here) Attachments: gdb-chromium.txt 37.4 KB -- You received this message because you are listed in the owner or CC fields of this issue, or because you starred this issue. You may adjust your issue notification preferences at: http://code.google.com/hosting/settings --~--~---------~--~----~------------~-------~--~----~ Automated mail from issue updates at http://crbug.com/ Subscription options: http://groups.google.com/group/chromium-bugs -~----------~----~----~----~------~----~------~--~---
