Package: mozilla-firefox Version: 1.0.4-2sarge2 Severity: grave Since the last security upgrade, Firefox crashes with a segfault when you close a tab with ctrl-w, or when you press the [X] button to close a tab.
I'm using Debian stable (sarge), kernel 2.6.13-rc6-git9, libc6 2.3.2.ds1-22. Erik FWIW, here's a backtrace from the core file: (gdb) bt #0 0xb7d87852 in raise () from /lib/tls/libpthread.so.0 #1 0x08c1abfa in nsProfileLock::FatalSignalHandler () #2 <signal handler called> #3 0xb7ea7022 in JS_GetClass () from /usr/lib/mozilla-firefox/libmozjs.so #4 0x08463a54 in nsScriptSecurityManager::CheckObjectAccess () #5 0xb7ec78a8 in js_ErrorFromException () from /usr/lib/mozilla-firefox/libmozjs.so #6 0xb7ec87a1 in js_ErrorToException () from /usr/lib/mozilla-firefox/libmozjs.so #7 0xb7eb19a0 in js_ContextIterator () from /usr/lib/mozilla-firefox/libmozjs.so #8 0xb7eb2109 in js_ReportErrorNumberVA () from /usr/lib/mozilla-firefox/libmozjs.so #9 0xb7eab66a in JS_ReportErrorNumber () from /usr/lib/mozilla-firefox/libmozjs.so #10 0xb7ee851d in js_ValueToNonNullObject () from /usr/lib/mozilla-firefox/libmozjs.so #11 0xb7ed53a6 in js_Interpret () from /usr/lib/mozilla-firefox/libmozjs.so #12 0xb7ecf617 in js_Invoke () from /usr/lib/mozilla-firefox/libmozjs.so #13 0xb7ecf8f3 in js_InternalInvoke () from /usr/lib/mozilla-firefox/libmozjs.so #14 0xb7ecfa4e in js_InternalGetOrSet () from /usr/lib/mozilla-firefox/libmozjs.so #15 0xb7ee6365 in js_GetProperty () from /usr/lib/mozilla-firefox/libmozjs.so #16 0x08378497 in XPC_WN_JSOps_Shutdown () #17 0xb7ed536e in js_Interpret () from /usr/lib/mozilla-firefox/libmozjs.so #18 0xb7ecf617 in js_Invoke () from /usr/lib/mozilla-firefox/libmozjs.so #19 0xb7ecf8f3 in js_InternalInvoke () from /usr/lib/mozilla-firefox/libmozjs.so #20 0xb7ecfa4e in js_InternalGetOrSet () from /usr/lib/mozilla-firefox/libmozjs.so #21 0xb7ee6365 in js_GetProperty () from /usr/lib/mozilla-firefox/libmozjs.so #22 0x08378497 in XPC_WN_JSOps_Shutdown () #23 0xb7ed536e in js_Interpret () from /usr/lib/mozilla-firefox/libmozjs.so #24 0xb7ecf617 in js_Invoke () from /usr/lib/mozilla-firefox/libmozjs.so #25 0xb7ecf8f3 in js_InternalInvoke () from /usr/lib/mozilla-firefox/libmozjs.so #26 0xb7ecfa4e in js_InternalGetOrSet () from /usr/lib/mozilla-firefox/libmozjs.so #27 0xb7ee6365 in js_GetProperty () from /usr/lib/mozilla-firefox/libmozjs.so #28 0x08378497 in XPC_WN_JSOps_Shutdown () #29 0xb7ed536e in js_Interpret () from /usr/lib/mozilla-firefox/libmozjs.so #30 0xb7ecf617 in js_Invoke () from /usr/lib/mozilla-firefox/libmozjs.so #31 0x0836d5be in nsXPCWrappedJSClass::CheckForException () #32 0x0836af8b in nsXPCWrappedJS::FindInherited () #33 0xb7e74743 in XPTC_InvokeByIndex () from /usr/lib/mozilla-firefox/libxpcom.so #34 0x0869fb07 in nsEventListenerManager::HandleEventSubType () #35 0x0869ffaa in nsEventListenerManager::HandleEventSubType () #36 0x0875a656 in GlobalWindowImpl::HandleDOMEvent () #37 0x08737ea8 in nsXULDocument::HandleDOMEvent () #38 0x087a7ad3 in nsXULElement::HandleDOMEvent () #39 0x087a777e in nsXULElement::HandleDOMEvent () #40 0x087a777e in nsXULElement::HandleDOMEvent () #41 0x087a777e in nsXULElement::HandleDOMEvent () #42 0x087a777e in nsXULElement::HandleDOMEvent () #43 0x087a777e in nsXULElement::HandleDOMEvent () #44 0x087a777e in nsXULElement::HandleDOMEvent () #45 0x087a777e in nsXULElement::HandleDOMEvent () #46 0x087ab39f in nsXULElement::AddPopupListener () #47 0x0875a5c3 in GlobalWindowImpl::HandleDOMEvent () #48 0x086472e8 in DocumentViewerImpl::InitInternal () #49 0x08926ca4 in nsDocShell::ConvertLoadTypeToDocShellLoadInfo () #50 0x0892d0cf in nsDocShell::IsPrintingOrPP () #51 0x08907364 in nsWebShell::DoCommand () #52 0x0869c585 in nsFrameLoader::~nsFrameLoader () #53 0x08820168 in NS_NewSubDocumentFrame () #54 0x08622e3f in nsFrameList::DestroyFrames () #55 0x087f15b3 in nsContainerFrame::~nsContainerFrame () #56 0x085ea931 in nsBoxFrame::PropagateDebug () #57 0x08622faf in nsFrameList::DestroyFrame () #58 0x085eaad4 in nsBoxFrame::PropagateDebug () #59 0x0857a504 in nsIFrame::SupportsVisibilityHidden () #60 0x085adbb0 in nsCSSFrameConstructor::ContentRemoved () #61 0x0858df9f in PresShell::ContentRemoved () #62 0x0863a171 in nsDocument::ContentRemoved () #63 0x087a560e in nsXULElement::RemoveChildAt () #64 0x0865a5ed in nsGenericElement::doRemoveChild () #65 0xb7e745e5 in XPTC_InvokeByIndex () from /usr/lib/mozilla-firefox/libxpcom.so #66 0x083721de in XPCWrappedNative::CallMethod () #67 0x08379701 in XPC_WN_CallMethod () #68 0xb7ecf546 in js_Invoke () from /usr/lib/mozilla-firefox/libmozjs.so #69 0xb7ed95c9 in js_Interpret () from /usr/lib/mozilla-firefox/libmozjs.so #70 0xb7ecf617 in js_Invoke () from /usr/lib/mozilla-firefox/libmozjs.so #71 0xb7ecf8f3 in js_InternalInvoke () from /usr/lib/mozilla-firefox/libmozjs.so #72 0xb7eaaebb in JS_CallFunctionValue () from /usr/lib/mozilla-firefox/libmozjs.so #73 0x088c03cf in nsJSContext::CallEventHandler () #74 0x087863e6 in nsJSEventListener::SetEventName () #75 0x0872b760 in nsXBLPrototypeHandler::ExecuteHandler () #76 0x088b6871 in nsXBLWindowHandler::WalkHandlersInternal () #77 0x0872a609 in nsXBLWindowKeyHandler::EnsureHandlers () #78 0x0872a901 in nsXBLWindowKeyHandler::EnsureHandlers () #79 0x0869d379 in nsScriptEventManager::~nsScriptEventManager () #80 0x0869ff59 in nsEventListenerManager::HandleEventSubType () #81 0x08737ef4 in nsXULDocument::HandleDOMEvent () #82 0x087a790a in nsXULElement::HandleDOMEvent () #83 0x087a7941 in nsXULElement::HandleDOMEvent () #84 0x087a7941 in nsXULElement::HandleDOMEvent () #85 0x087a7941 in nsXULElement::HandleDOMEvent () #86 0x087a7941 in nsXULElement::HandleDOMEvent () #87 0x087a7941 in nsXULElement::HandleDOMEvent () #88 0x087a7941 in nsXULElement::HandleDOMEvent () #89 0x087a7941 in nsXULElement::HandleDOMEvent () #90 0x087ab39f in nsXULElement::AddPopupListener () #91 0x0875a6e0 in GlobalWindowImpl::HandleDOMEvent () #92 0x0863dd01 in nsDocument::HandleDOMEvent () #93 0x08657fca in nsGenericElement::HandleDOMEvent () #94 0x0858f529 in PresShell::HandleEventInternal () #95 0x0858ed91 in PresShell::RetargetEventToParent () #96 0x08754071 in nsViewManager::HandleEvent () #97 0x08753496 in nsViewManager::UpdateViews () #98 0x0874c1c8 in HandleNumbers () #99 0x0856adc9 in nsCommonWidget::DispatchResizeEvent () #100 0x0856432d in nsWindow::OnKeyPressEvent () #101 0x08568242 in nsWindow::DragInProgress () #102 0x0905ee40 in ?? () #103 0x08f89400 in ?? () #104 0xb78709d8 in _X11TransBytesReadable () from /usr/X11R6/lib/libX11.so.6 Previous frame inner to this frame (corrupt stack?) -- +-- Erik Mouw -- www.harddisk-recovery.nl -- 0800 220 20 20 -- | Eigen lab: Delftechpark 26, 2628 XH, Delft, Nederland | Files foetsie, bestanden kwijt, alle data weg?! | Blijf kalm en neem contact op met Harddisk-recovery.nl! -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
