Package: iceweasel
Version: 3.5.3-2
Severity: important

Since recently alway when I click:
        Bookmark this page
and then the small triangle down to show all the curren bookmarks 
iceweasel is crashing with a segfault.

This is 100% repeatable for me.

I traced it down to places.sqlite, when I remove it there are not problems
anymore.

Interestingly, when I epxort the bookmarks to bookmarks.html, then
clean the places (and the bookmarksbackup) and restart, the bookmarks
are completely empty. Then I import the *HTML* file and the same
starts again, attempting to press the small down triangle, or to expand
the tree of the "Bookmarks" ends with segfault.

Of course this goes away with -safe-mode, becasue places.sqlite is
not evaluated, same with removing the whole installation.

I managed to catch a gdb bt (the problem is that the bookmarks window
is modal so that you cannot switch to the xterm with gdb. I had to
do it from the console ...)

Attached is the gdb.txt output containing the backtrace, I hope that
helps. If you need more information please let me know. I can send 
the maintainer the bookmarks.html if necessary (but not to the bug report).

Thanks a lot and all the best

Norbert

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-rc5 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages iceweasel depends on:
ii  debianutils                   3.2.1      Miscellaneous utilities specific t
ii  fontconfig                    2.6.0-4    generic font configuration library
ii  libc6                         2.10.1-1   GNU C Library: Shared libraries
ii  libglib2.0-0                  2.22.2-2   The GLib library of C routines
ii  libgtk2.0-0                   2.18.3-1   The GTK+ graphical user interface 
ii  libnspr4-0d                   4.8-1      NetScape Portable Runtime Library
ii  libstdc++6                    4.4.2-1    The GNU Standard C++ Library v3
ii  procps                        1:3.2.8-2  /proc file system utilities
ii  psmisc                        22.8-1     utilities that use the proc file s
ii  xulrunner-1.9.1               1.9.1.3-3  XUL + XPCOM application runner

iceweasel recommends no packages.

Versions of packages iceweasel suggests:
ii  latex-xft-fonts               1.6.4-1    TrueType versions of some TeX font
pn  libkrb53                      <none>     (no description available)
pn  mozplugger                    <none>     (no description available)
pn  ttf-mathematica4.1            <none>     (no description available)
ii  xfonts-mathml                 3          Type1 Symbol font for MathML
pn  xprint                        <none>     (no description available)
ii  xulrunner-1.9.1-gnome-support 1.9.1.3-3  Support for GNOME in xulrunner app

-- no debconf information
#0  0x00007ffff5448b1a in ?? () from /usr/lib/libsqlite3.so.0
#1  0x00007ffff54863a7 in ?? () from /usr/lib/libsqlite3.so.0
#2  0x00007ffff548c228 in sqlite3_step () from /usr/lib/libsqlite3.so.0
#3  0x00007ffff621015d in mozStorageStatement::ExecuteStep 
(this=0x7fffdde5aba0, _retval=0x7fffffff6edc) at mozStorageStatement.cpp:568
#4  0x00007ffff623e164 in nsNavBookmarks::ResultNodeForContainer 
(this=0x7fffe156cec0, aID=99, aOptions=0x7fffd964d340, aNode=0x7fffffff6f50) at 
nsNavBookmarks.cpp:2410
#5  0x00007ffff623e480 in nsNavBookmarks::QueryFolderChildren 
(this=0x7fffe156cec0, aFolderId=<value optimized out>, aOptions=0x7fffd964d340, 
aChildren=0x7fffd97982a8) at nsNavBookmarks.cpp:2497
#6  0x00007ffff6234e2c in nsNavHistoryFolderResultNode::FillChildren 
(this=0x7fffd9798200) at nsNavHistoryResult.cpp:3239
#7  0x00007ffff6235239 in nsNavHistoryFolderResultNode::GetHasChildren 
(this=0x7fffe54de0b8, aHasChildren=0x7fffffff7300) at 
nsNavHistoryResult.cpp:3097
#8  0x00007ffff632b42e in NS_InvokeByIndex_P (that=0x7fffd9798290, 
methodIndex=22, paramCount=1, params=0x28) at xptcinvoke_x86_64_linux.cpp:208
#9  0x00007ffff5b68757 in XPCWrappedNative::CallMethod (ccx=..., mode=10) at 
xpcwrappednative.cpp:2454
#10 0x00007ffff5b703b2 in XPCWrappedNative::GetAttribute (cx=0x7fffe38b7000, 
obj=<value optimized out>, argc=0, argv=0x7fffe34d7090, vp=0x7fffffff78a0) at 
xpcprivate.h:2323
#11 XPC_WN_GetterSetter (cx=0x7fffe38b7000, obj=<value optimized out>, argc=0, 
argv=0x7fffe34d7090, vp=0x7fffffff78a0) at xpcwrappednativejsops.cpp:1622
#12 0x00007ffff4d82dd7 in js_Invoke () from /usr/lib/libmozjs.so.2d
#13 0x00007ffff4d83136 in ?? () from /usr/lib/libmozjs.so.2d
#14 0x00007ffff4d83273 in ?? () from /usr/lib/libmozjs.so.2d
#15 0x00007ffff4d89eae in ?? () from /usr/lib/libmozjs.so.2d
#16 0x00007ffff4d8ac5b in ?? () from /usr/lib/libmozjs.so.2d
#17 0x00007ffff4d74415 in ?? () from /usr/lib/libmozjs.so.2d
#18 0x00007ffff4d82de1 in js_Invoke () from /usr/lib/libmozjs.so.2d
#19 0x00007ffff5b659f6 in nsXPCWrappedJSClass::CallMethod (this=0x7fffd964d500, 
wrapper=<value optimized out>, methodIndex=11, info=0x7fffe591b110, 
nativeParams=0x7fffffff8270) at xpcwrappedjsclass.cpp:1697
#20 0x00007ffff632c005 in PrepareAndDispatch (self=0x7fffd9641b00, 
methodIndex=<value optimized out>, args=0x7fffffff8370, gpregs=0x7fffffff8370, 
fpregs=0x7fffffff83a0) at xptcstubs_x86_64_linux.cpp:151
#21 0x00007ffff632b4b3 in SharedStub () from 
/usr/lib/iceweasel/xulrunner/libxul.so
#22 0x00007ffff5fd780d in nsTreeBodyFrame::PaintTwisty (this=0x7fffd9783338, 
aRowIndex=5, aColumn=0x7fffd9652760, aTwistyRect=..., 
aPresContext=0x7fffe3285400, aRenderingContext=..., aDirtyRect=..., 
aremainingwid...@0x7fffffff85d8, acur...@0x7fffffff85dc) at 
nsTreeBodyFrame.cpp:3352
#23 0x00007ffff5fd8f3e in nsTreeBodyFrame::PaintCell (this=0x7fffd9783338, 
aRowIndex=5, aColumn=0x7fffd9652760, aCellRect=..., 
aPresContext=0x7fffe3285400, aRenderingContext=..., aDirtyRect=..., 
acur...@0x7fffffff8710, aPt=...) at nsTreeBodyFrame.cpp:3284
#24 0x00007ffff5fd961f in nsTreeBodyFrame::PaintRow (this=0x7fffd9783338, 
aRowIndex=5, aRowRect=<value optimized out>, aPresContext=0x7fffe3285400, 
aRenderingContext=..., aDirtyRect=..., aPt=...) at nsTreeBodyFrame.cpp:3096
#25 0x00007ffff5fd9d2f in nsTreeBodyFrame::PaintTreeBody (this=0x7fffd9783338, 
aRenderingContext=..., aDirtyRect=..., aPt=...) at nsTreeBodyFrame.cpp:2899
#26 0x00007ffff5fd9ed5 in PaintTreeBody (aFrame=0x7fffe54de0b8, aCtx=0x1, 
aDirtyRect=..., aPt=<value optimized out>) at nsTreeBodyFrame.cpp:2827
#27 0x00007ffff5ce8b90 in nsDisplayGeneric::Paint (this=0x7fffd968d890, 
aBuilder=<value optimized out>, aCtx=0x7fffd96a8a00, aDirtyRect=...) at 
./../base/nsDisplayList.h:875
#28 0x00007ffff5cb5b00 in nsDisplayList::Paint (this=<value optimized out>, 
aBuilder=0x7fffffff8950, aCtx=0x7fffd96a8a00, aDirtyRect=...) at 
nsDisplayList.cpp:313
#29 0x00007ffff5cc6197 in nsLayoutUtils::PaintFrame 
(aRenderingContext=0x7fffd96a8a00, aFrame=<value optimized out>, 
aDirtyRegion=..., aBackground=4293585642) at nsLayoutUtils.cpp:1114
#30 0x00007ffff5ccdb2e in PresShell::Paint (this=0x7fffe3263000, aView=<value 
optimized out>, aRenderingContext=0x7fffd96a8a00, aDirtyRegion=...) at 
nsPresShell.cpp:5769
#31 0x00007ffff5f1df57 in nsViewManager::RenderViews (this=0x7fffe3256b30, 
aView=<value optimized out>, aRC=..., aRegion=...) at nsViewManager.cpp:648
#32 0x00007ffff5f1e570 in nsViewManager::Refresh (this=0x7fffe3256b30, 
aView=0x7fffd97ef780, aContext=0x7fffd96a8a00, aRegion=<value optimized out>, 
aUpdateFlags=1) at nsViewManager.cpp:512
#33 0x00007ffff5f1ef01 in nsViewManager::DispatchEvent (this=0x7fffe3256b30, 
aEvent=0x7fffffff91d0, aStatus=0x7fffffff918c) at nsViewManager.cpp:1153
#34 0x00007ffff5f19e84 in HandleEvent (aEvent=0x7fffffff91d0) at nsView.cpp:168
#35 0x00007ffff625c18d in nsWindow::DispatchEvent (this=0x7fffd97a9d00, 
aEvent=0x7fffffff91d0, astat...@0x7fffffff9348) at nsWindow.cpp:577
#36 0x00007ffff6264c28 in nsWindow::OnExposeEvent (this=0x7fffd97a9d00, 
aWidget=<value optimized out>, aEvent=0x7fffffff9880) at nsWindow.cpp:2471
#37 0x00007ffff6265150 in expose_event_cb (widget=0x7fffd98b9d80, 
event=0x7fffffff9880) at nsWindow.cpp:5404
#38 0x00007ffff1c21218 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#39 0x00007ffff28303ed in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#40 0x00007ffff2843cdb in ?? () from /usr/lib/libgobject-2.0.so.0
#41 0x00007ffff2844f18 in g_signal_emit_valist () from 
/usr/lib/libgobject-2.0.so.0
#42 0x00007ffff2845553 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#43 0x00007ffff1d2a2de in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#44 0x00007ffff1c1a747 in gtk_main_do_event () from /usr/lib/libgtk-x11-2.0.so.0
#45 0x00007ffff1655d6e in ?? () from /usr/lib/libgdk-x11-2.0.so.0
#46 0x00007ffff16518d3 in ?? () from /usr/lib/libgdk-x11-2.0.so.0
#47 0x00007ffff1653841 in gdk_window_process_all_updates () from 
/usr/lib/libgdk-x11-2.0.so.0
#48 0x00007ffff1653889 in ?? () from /usr/lib/libgdk-x11-2.0.so.0
#49 0x00007ffff1630847 in ?? () from /usr/lib/libgdk-x11-2.0.so.0
#50 0x00007ffff259912a in g_main_context_dispatch () from /lib/libglib-2.0.so.0
#51 0x00007ffff259c988 in ?? () from /lib/libglib-2.0.so.0
#52 0x00007ffff259cb3c in g_main_context_iteration () from /lib/libglib-2.0.so.0
#53 0x00007ffff627a7e9 in nsBaseAppShell::DoProcessNextNativeEvent 
(this=0x7fffe54de0b8, mayWait=1) at nsBaseAppShell.cpp:151
#54 0x00007ffff627a99a in nsBaseAppShell::OnProcessNextEvent 
(this=0x7fffe81b1820, thr=0x7ffff6c094c0, mayWait=1, recursionDepth=<value 
optimized out>) at nsBaseAppShell.cpp:278
#55 0x00007ffff63206f5 in nsThread::ProcessNextEvent (this=0x7ffff6c094c0, 
mayWait=1, result=0x7fffffff9bfc) at nsThread.cpp:497
#56 0x00007ffff62f67da in NS_ProcessNextEvent_P (thread=0x7fffe54de0b8, 
mayWait=1) at nsThreadUtils.cpp:230
#57 0x00007ffff627aa55 in nsBaseAppShell::Run (this=0x7fffe81b1820) at 
nsBaseAppShell.cpp:170
#58 0x00007ffff6152855 in nsAppStartup::Run (this=0x7fffe7545fc0) at 
nsAppStartup.cpp:193
#59 0x00007ffff5b3edd1 in XRE_main (argc=<value optimized out>, argv=<value 
optimized out>, aAppData=<value optimized out>) at nsAppRunner.cpp:3331
#60 0x00000000004020ef in ?? ()
#61 0x00007ffff737ca8d in __libc_start_main () from /lib/libc.so.6
#62 0x0000000000401d89 in ?? ()
#63 0x00007fffffffe568 in ?? ()
#64 0x000000000000001c in ?? ()
#65 0x0000000000000003 in ?? ()
#66 0x00007fffffffe7d6 in ?? ()
#67 0x0000000000000000 in ?? ()
A debugging session is active.

        Inferior 1 [process 14010] will be killed.

Quit anyway? (y or n) 

Reply via email to