Package: iceweasel Version: 3.5.3-2 Severity: important Since recently alway when I click: Bookmark this page and then the small triangle down to show all the curren bookmarks iceweasel is crashing with a segfault.
This is 100% repeatable for me. I traced it down to places.sqlite, when I remove it there are not problems anymore. Interestingly, when I epxort the bookmarks to bookmarks.html, then clean the places (and the bookmarksbackup) and restart, the bookmarks are completely empty. Then I import the *HTML* file and the same starts again, attempting to press the small down triangle, or to expand the tree of the "Bookmarks" ends with segfault. Of course this goes away with -safe-mode, becasue places.sqlite is not evaluated, same with removing the whole installation. I managed to catch a gdb bt (the problem is that the bookmarks window is modal so that you cannot switch to the xterm with gdb. I had to do it from the console ...) Attached is the gdb.txt output containing the backtrace, I hope that helps. If you need more information please let me know. I can send the maintainer the bookmarks.html if necessary (but not to the bug report). Thanks a lot and all the best Norbert -- System Information: Debian Release: squeeze/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-rc5 (SMP w/2 CPU cores; PREEMPT) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages iceweasel depends on: ii debianutils 3.2.1 Miscellaneous utilities specific t ii fontconfig 2.6.0-4 generic font configuration library ii libc6 2.10.1-1 GNU C Library: Shared libraries ii libglib2.0-0 2.22.2-2 The GLib library of C routines ii libgtk2.0-0 2.18.3-1 The GTK+ graphical user interface ii libnspr4-0d 4.8-1 NetScape Portable Runtime Library ii libstdc++6 4.4.2-1 The GNU Standard C++ Library v3 ii procps 1:3.2.8-2 /proc file system utilities ii psmisc 22.8-1 utilities that use the proc file s ii xulrunner-1.9.1 1.9.1.3-3 XUL + XPCOM application runner iceweasel recommends no packages. Versions of packages iceweasel suggests: ii latex-xft-fonts 1.6.4-1 TrueType versions of some TeX font pn libkrb53 <none> (no description available) pn mozplugger <none> (no description available) pn ttf-mathematica4.1 <none> (no description available) ii xfonts-mathml 3 Type1 Symbol font for MathML pn xprint <none> (no description available) ii xulrunner-1.9.1-gnome-support 1.9.1.3-3 Support for GNOME in xulrunner app -- no debconf information
#0 0x00007ffff5448b1a in ?? () from /usr/lib/libsqlite3.so.0 #1 0x00007ffff54863a7 in ?? () from /usr/lib/libsqlite3.so.0 #2 0x00007ffff548c228 in sqlite3_step () from /usr/lib/libsqlite3.so.0 #3 0x00007ffff621015d in mozStorageStatement::ExecuteStep (this=0x7fffdde5aba0, _retval=0x7fffffff6edc) at mozStorageStatement.cpp:568 #4 0x00007ffff623e164 in nsNavBookmarks::ResultNodeForContainer (this=0x7fffe156cec0, aID=99, aOptions=0x7fffd964d340, aNode=0x7fffffff6f50) at nsNavBookmarks.cpp:2410 #5 0x00007ffff623e480 in nsNavBookmarks::QueryFolderChildren (this=0x7fffe156cec0, aFolderId=<value optimized out>, aOptions=0x7fffd964d340, aChildren=0x7fffd97982a8) at nsNavBookmarks.cpp:2497 #6 0x00007ffff6234e2c in nsNavHistoryFolderResultNode::FillChildren (this=0x7fffd9798200) at nsNavHistoryResult.cpp:3239 #7 0x00007ffff6235239 in nsNavHistoryFolderResultNode::GetHasChildren (this=0x7fffe54de0b8, aHasChildren=0x7fffffff7300) at nsNavHistoryResult.cpp:3097 #8 0x00007ffff632b42e in NS_InvokeByIndex_P (that=0x7fffd9798290, methodIndex=22, paramCount=1, params=0x28) at xptcinvoke_x86_64_linux.cpp:208 #9 0x00007ffff5b68757 in XPCWrappedNative::CallMethod (ccx=..., mode=10) at xpcwrappednative.cpp:2454 #10 0x00007ffff5b703b2 in XPCWrappedNative::GetAttribute (cx=0x7fffe38b7000, obj=<value optimized out>, argc=0, argv=0x7fffe34d7090, vp=0x7fffffff78a0) at xpcprivate.h:2323 #11 XPC_WN_GetterSetter (cx=0x7fffe38b7000, obj=<value optimized out>, argc=0, argv=0x7fffe34d7090, vp=0x7fffffff78a0) at xpcwrappednativejsops.cpp:1622 #12 0x00007ffff4d82dd7 in js_Invoke () from /usr/lib/libmozjs.so.2d #13 0x00007ffff4d83136 in ?? () from /usr/lib/libmozjs.so.2d #14 0x00007ffff4d83273 in ?? () from /usr/lib/libmozjs.so.2d #15 0x00007ffff4d89eae in ?? () from /usr/lib/libmozjs.so.2d #16 0x00007ffff4d8ac5b in ?? () from /usr/lib/libmozjs.so.2d #17 0x00007ffff4d74415 in ?? () from /usr/lib/libmozjs.so.2d #18 0x00007ffff4d82de1 in js_Invoke () from /usr/lib/libmozjs.so.2d #19 0x00007ffff5b659f6 in nsXPCWrappedJSClass::CallMethod (this=0x7fffd964d500, wrapper=<value optimized out>, methodIndex=11, info=0x7fffe591b110, nativeParams=0x7fffffff8270) at xpcwrappedjsclass.cpp:1697 #20 0x00007ffff632c005 in PrepareAndDispatch (self=0x7fffd9641b00, methodIndex=<value optimized out>, args=0x7fffffff8370, gpregs=0x7fffffff8370, fpregs=0x7fffffff83a0) at xptcstubs_x86_64_linux.cpp:151 #21 0x00007ffff632b4b3 in SharedStub () from /usr/lib/iceweasel/xulrunner/libxul.so #22 0x00007ffff5fd780d in nsTreeBodyFrame::PaintTwisty (this=0x7fffd9783338, aRowIndex=5, aColumn=0x7fffd9652760, aTwistyRect=..., aPresContext=0x7fffe3285400, aRenderingContext=..., aDirtyRect=..., aremainingwid...@0x7fffffff85d8, acur...@0x7fffffff85dc) at nsTreeBodyFrame.cpp:3352 #23 0x00007ffff5fd8f3e in nsTreeBodyFrame::PaintCell (this=0x7fffd9783338, aRowIndex=5, aColumn=0x7fffd9652760, aCellRect=..., aPresContext=0x7fffe3285400, aRenderingContext=..., aDirtyRect=..., acur...@0x7fffffff8710, aPt=...) at nsTreeBodyFrame.cpp:3284 #24 0x00007ffff5fd961f in nsTreeBodyFrame::PaintRow (this=0x7fffd9783338, aRowIndex=5, aRowRect=<value optimized out>, aPresContext=0x7fffe3285400, aRenderingContext=..., aDirtyRect=..., aPt=...) at nsTreeBodyFrame.cpp:3096 #25 0x00007ffff5fd9d2f in nsTreeBodyFrame::PaintTreeBody (this=0x7fffd9783338, aRenderingContext=..., aDirtyRect=..., aPt=...) at nsTreeBodyFrame.cpp:2899 #26 0x00007ffff5fd9ed5 in PaintTreeBody (aFrame=0x7fffe54de0b8, aCtx=0x1, aDirtyRect=..., aPt=<value optimized out>) at nsTreeBodyFrame.cpp:2827 #27 0x00007ffff5ce8b90 in nsDisplayGeneric::Paint (this=0x7fffd968d890, aBuilder=<value optimized out>, aCtx=0x7fffd96a8a00, aDirtyRect=...) at ./../base/nsDisplayList.h:875 #28 0x00007ffff5cb5b00 in nsDisplayList::Paint (this=<value optimized out>, aBuilder=0x7fffffff8950, aCtx=0x7fffd96a8a00, aDirtyRect=...) at nsDisplayList.cpp:313 #29 0x00007ffff5cc6197 in nsLayoutUtils::PaintFrame (aRenderingContext=0x7fffd96a8a00, aFrame=<value optimized out>, aDirtyRegion=..., aBackground=4293585642) at nsLayoutUtils.cpp:1114 #30 0x00007ffff5ccdb2e in PresShell::Paint (this=0x7fffe3263000, aView=<value optimized out>, aRenderingContext=0x7fffd96a8a00, aDirtyRegion=...) at nsPresShell.cpp:5769 #31 0x00007ffff5f1df57 in nsViewManager::RenderViews (this=0x7fffe3256b30, aView=<value optimized out>, aRC=..., aRegion=...) at nsViewManager.cpp:648 #32 0x00007ffff5f1e570 in nsViewManager::Refresh (this=0x7fffe3256b30, aView=0x7fffd97ef780, aContext=0x7fffd96a8a00, aRegion=<value optimized out>, aUpdateFlags=1) at nsViewManager.cpp:512 #33 0x00007ffff5f1ef01 in nsViewManager::DispatchEvent (this=0x7fffe3256b30, aEvent=0x7fffffff91d0, aStatus=0x7fffffff918c) at nsViewManager.cpp:1153 #34 0x00007ffff5f19e84 in HandleEvent (aEvent=0x7fffffff91d0) at nsView.cpp:168 #35 0x00007ffff625c18d in nsWindow::DispatchEvent (this=0x7fffd97a9d00, aEvent=0x7fffffff91d0, astat...@0x7fffffff9348) at nsWindow.cpp:577 #36 0x00007ffff6264c28 in nsWindow::OnExposeEvent (this=0x7fffd97a9d00, aWidget=<value optimized out>, aEvent=0x7fffffff9880) at nsWindow.cpp:2471 #37 0x00007ffff6265150 in expose_event_cb (widget=0x7fffd98b9d80, event=0x7fffffff9880) at nsWindow.cpp:5404 #38 0x00007ffff1c21218 in ?? () from /usr/lib/libgtk-x11-2.0.so.0 #39 0x00007ffff28303ed in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0 #40 0x00007ffff2843cdb in ?? () from /usr/lib/libgobject-2.0.so.0 #41 0x00007ffff2844f18 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0 #42 0x00007ffff2845553 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0 #43 0x00007ffff1d2a2de in ?? () from /usr/lib/libgtk-x11-2.0.so.0 #44 0x00007ffff1c1a747 in gtk_main_do_event () from /usr/lib/libgtk-x11-2.0.so.0 #45 0x00007ffff1655d6e in ?? () from /usr/lib/libgdk-x11-2.0.so.0 #46 0x00007ffff16518d3 in ?? () from /usr/lib/libgdk-x11-2.0.so.0 #47 0x00007ffff1653841 in gdk_window_process_all_updates () from /usr/lib/libgdk-x11-2.0.so.0 #48 0x00007ffff1653889 in ?? () from /usr/lib/libgdk-x11-2.0.so.0 #49 0x00007ffff1630847 in ?? () from /usr/lib/libgdk-x11-2.0.so.0 #50 0x00007ffff259912a in g_main_context_dispatch () from /lib/libglib-2.0.so.0 #51 0x00007ffff259c988 in ?? () from /lib/libglib-2.0.so.0 #52 0x00007ffff259cb3c in g_main_context_iteration () from /lib/libglib-2.0.so.0 #53 0x00007ffff627a7e9 in nsBaseAppShell::DoProcessNextNativeEvent (this=0x7fffe54de0b8, mayWait=1) at nsBaseAppShell.cpp:151 #54 0x00007ffff627a99a in nsBaseAppShell::OnProcessNextEvent (this=0x7fffe81b1820, thr=0x7ffff6c094c0, mayWait=1, recursionDepth=<value optimized out>) at nsBaseAppShell.cpp:278 #55 0x00007ffff63206f5 in nsThread::ProcessNextEvent (this=0x7ffff6c094c0, mayWait=1, result=0x7fffffff9bfc) at nsThread.cpp:497 #56 0x00007ffff62f67da in NS_ProcessNextEvent_P (thread=0x7fffe54de0b8, mayWait=1) at nsThreadUtils.cpp:230 #57 0x00007ffff627aa55 in nsBaseAppShell::Run (this=0x7fffe81b1820) at nsBaseAppShell.cpp:170 #58 0x00007ffff6152855 in nsAppStartup::Run (this=0x7fffe7545fc0) at nsAppStartup.cpp:193 #59 0x00007ffff5b3edd1 in XRE_main (argc=<value optimized out>, argv=<value optimized out>, aAppData=<value optimized out>) at nsAppRunner.cpp:3331 #60 0x00000000004020ef in ?? () #61 0x00007ffff737ca8d in __libc_start_main () from /lib/libc.so.6 #62 0x0000000000401d89 in ?? () #63 0x00007fffffffe568 in ?? () #64 0x000000000000001c in ?? () #65 0x0000000000000003 in ?? () #66 0x00007fffffffe7d6 in ?? () #67 0x0000000000000000 in ?? () A debugging session is active. Inferior 1 [process 14010] will be killed. Quit anyway? (y or n)