Package: firefox
Version: 1.0.4-2sarge10
Severity: normal

As stated: "firefox http://maps.google.com/"; (or maps.google.co.uk)
yields a segfault.  Disabling javascript stops Google Maps working
properly; enabling it, but disabling every tickable thereunder,
yields the segfault again.

Running "firefox -g http://maps.google.co.uk/"; gives me (after a ton
of lack of debugging symbols):

[New Thread 1108134832 (LWP 1106)]
[New Thread 1116523440 (LWP 1107)]
(no debugging symbols found)
(no debugging symbols found)
[New Thread 1125813168 (LWP 1112)]
[New Thread 1134201776 (LWP 1113)]
(no debugging symbols found)
[Thread 1125813168 (LWP 1112) exited]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1086732320 (LWP 1095)]
0x40a72ac5 in memmove () from /lib/tls/libc.so.6
(gdb)

.... and the process is dead.  I'll attempt to attach a backtrace.  In
case bugreport doesn't do this for me: said libc.so.6 -> libc-2.3.2.so,
dated 2nd April, from libc6 2.3.2.ds1-22sarge3; desktop is GNOME.

Comment from the user that brought this to my attention:

>> * Is it only Google Maps that yields the segfault? One or more
>> offending URLs would be of interest.
>
>That's the only one I've come across so far (where "one" means both
>maps.google.com and maps.google.co.uk). The error occurs when it tries to
>load the actual map (at least, it displays "Loading..." for about a second
>in the map window). A brief spot of Googling tells me that Google Maps
>uses API, but I don't know off-hand of any other websites that use that
>technology. In case it's relevant, Google Mail works fine.

Please let me know what other info you need.

-- System Information: Debian Release: 3.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.8-3-k7
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
GNU gdb 6.3-debian
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-linux"...(no debugging symbols found)
Using host libthread_db library "/lib/tls/libthread_db.so.1".

(gdb) run
Starting program: /usr/lib/mozilla-firefox/firefox-bin -a firefox 
http://maps.google.co.uk/
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[Thread debugging using libthread_db enabled]
[New Thread 1086732320 (LWP 4159)]
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[New Thread 1095400368 (LWP 4165)]
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[New Thread 1108134832 (LWP 4166)]
[New Thread 1116523440 (LWP 4175)]
(no debugging symbols found)
(no debugging symbols found)
[New Thread 1125813168 (LWP 4179)]
[New Thread 1134201776 (LWP 4180)]
(no debugging symbols found)
[Thread 1125813168 (LWP 4179) exited]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1086732320 (LWP 4159)]
0x40a72ac5 in memmove () from /lib/tls/libc.so.6
(gdb) bt
#0  0x40a72ac5 in memmove () from /lib/tls/libc.so.6
#1  0x0884a961 in nsAttrAndChildArray::InsertChildAt ()
#2  0x0865b1b4 in nsGenericElement::InsertChildAt ()
#3  0x0865c06d in nsGenericElement::doInsertBefore ()
#4  0x0886ca75 in non-virtual thunk to 
nsHTMLDivElement::RemoveChild(nsIDOMNode*, nsIDOMNode**) ()
#5  0x09566a70 in ?? ()
#6  0x0956701c in ?? ()
#7  0x00000000 in ?? ()
#8  0xbfffd590 in ?? ()
#9  0x00000000 in ?? ()
#10 0x00000001 in ?? ()
#11 0xbfffd3d8 in ?? ()
#12 0x40135625 in XPTC_InvokeByIndex ()
   from /usr/lib/mozilla-firefox/libxpcom.so
#13 0x40135625 in XPTC_InvokeByIndex ()
   from /usr/lib/mozilla-firefox/libxpcom.so
#14 0x08372c5e in XPCWrappedNative::CallMethod ()
#15 0x0837a181 in XPC_WN_CallMethod ()
#16 0x40052dd6 in js_Invoke () from /usr/lib/mozilla-firefox/libmozjs.so
#17 0x4005ce8a in js_Interpret () from /usr/lib/mozilla-firefox/libmozjs.so
#18 0x40052ea7 in js_Invoke () from /usr/lib/mozilla-firefox/libmozjs.so
#19 0x4005ce8a in js_Interpret () from /usr/lib/mozilla-firefox/libmozjs.so
#20 0x400534cc in js_Execute () from /usr/lib/mozilla-firefox/libmozjs.so
#21 0x4002de34 in JS_EvaluateUCScriptForPrincipals ()
   from /usr/lib/mozilla-firefox/libmozjs.so
#22 0x088c3332 in nsJSContext::EvaluateString ()
#23 0x0869742a in nsScriptLoader::EvaluateScript ()
#24 0x086970a2 in nsScriptLoader::ProcessRequest ()
#25 0x08696c89 in nsScriptLoader::IsScriptEventHandler ()
#26 0x0888f4b3 in nsHTMLScriptElement::MaybeProcessScript ()
#27 0x0865b8be in nsGenericElement::AppendChildTo ()
#28 0x086cdc05 in HTMLContentSink::ProcessSCRIPTTag ()
#29 0x086cb5d0 in HTMLContentSink::Init ()
#30 0x0849c55e in CNavDTD::AddLeaf ()
#31 0x0849a6ee in CNavDTD::HandleScriptToken ()
#32 0x0849be99 in CNavDTD::OpenContainer ()
#33 0x08498bcf in CNavDTD::HandleDefaultStartToken ()
#34 0x08499846 in CNavDTD::HandleStartToken ()
#35 0x08497ecb in CNavDTD::BuildNeglectedTarget ()
#36 0x08497564 in CNavDTD::~CNavDTD ()
#37 0x084addad in nsParser::ResumeParse ()
#38 0x084adb00 in nsParser::ResumeParse ()
#39 0x084ace96 in nsParser::SetUnusedInput ()
#40 0x0884dea4 in nsContentSink::Init ()
#41 0x0884d6c0 in nsAttrValue::EnsureEmptyAtomArray ()
#42 0x0869726c in nsScriptLoader::FireScriptEvaluated ()
#43 0x086970b4 in nsScriptLoader::ProcessRequest ()
#44 0x086977b5 in nsScriptLoader::ProcessPendingReqests ()
#45 0x083db165 in nsStreamLoader::Create ()
#46 0x083ed94c in nsHTTPCompressConv::~nsHTTPCompressConv ()
#47 0x083daa92 in nsServerSocketEvent::EventCleanup ()
#48 0x0842ab6b in nsHttpChannel::GetCurrentPath ()
#49 0x083c8f4d in nsInputStreamPump::OnStateStop ()
#50 0x083c8cd5 in nsInputStreamPump::EnsureWaiting ()
#51 0x40103c31 in nsInputStreamReadyEvent::EventHandler ()
   from /usr/lib/mozilla-firefox/libxpcom.so
#52 0x4011a277 in PL_HandleEvent () from /usr/lib/mozilla-firefox/libxpcom.so
#53 0x4011a1a4 in PL_ProcessPendingEvents ()
   from /usr/lib/mozilla-firefox/libxpcom.so
#54 0x4011be39 in nsEventQueueImpl::NotifyObservers ()
   from /usr/lib/mozilla-firefox/libxpcom.so
#55 0x0856b155 in nsBaseWidget::FreeNativeData ()
#56 0x40617dbf in g_vasprintf () from /usr/lib/libglib-2.0.so.0
#57 0x405f2582 in g_main_depth () from /usr/lib/libglib-2.0.so.0
#58 0x405f35f8 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#59 0x405f3930 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#60 0x405f3ed3 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#61 0x402d8bb3 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#62 0x0856b498 in nsAppShell::ReleaseGlobals ()
#63 0x08a151a4 in nsAppShellService::AttemptingQuit ()
#64 0x08c1a830 in xre_main ()
#65 0x0834c004 in main ()
(gdb) c
Continuing.

Program received signal SIGSEGV, Segmentation fault.
0x08c1f8bc in nsProfileLock::Unlock ()
(gdb) q
The program is running.  Exit anyway? (y or n) 

Reply via email to