firefox segfault while using java
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenJDK |
Fix Released
|
Medium
|
|||
firefox (Ubuntu) |
Invalid
|
Undecided
|
Unassigned | ||
openjdk-6 (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
While running this test http://
the icedted java plugin (64bits) will segfault firefox 3.0 and 3.1
$ gdb /usr/lib/
GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-
(no debugging symbols found)
(no debugging symbols found)
(gdb) r
Starting program: /usr/lib/
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[Thread debugging using libthread_db enabled]
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[New Thread 0x7fbed2b66700 (LWP 15602)]
[New Thread 0x7fbec249c950 (LWP 15702)]
[New Thread 0x7fbec1a91950 (LWP 15703)]
[New Thread 0x7fbec017e950 (LWP 15704)]
[Thread 0x7fbec017e950 (LWP 15704) exited]
[New Thread 0x7fbec017e950 (LWP 15705)]
[New Thread 0x7fbebf696950 (LWP 15706)]
[New Thread 0x7fbebee95950 (LWP 15707)]
[New Thread 0x7fbebd8de950 (LWP 15723)]
[Thread 0x7fbec017e950 (LWP 15705) exited]
[New Thread 0x7fbec017e950 (LWP 15724)]
[Thread 0x7fbec017e950 (LWP 15724) exited]
[New Thread 0x7fbec017e950 (LWP 15725)]
[New Thread 0x7fbeb7df9950 (LWP 15726)]
[Thread 0x7fbeb7df9950 (LWP 15726) exited]
[New Thread 0x7fbeb7df9950 (LWP 15792)]
sh: acroread: not found
[New Thread 0x7fbeb47ed950 (LWP 15847)]
[New Thread 0x7fbeb3fec950 (LWP 15848)]
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fbeb47ed950 (LWP 15847)]
XPCJSContextSta
111 xpcthreadcontex
in xpcthreadcontex
Current language: auto; currently c++
(gdb) bt full
#0 XPCJSContextSta
e = (XPCJSContextInfo &) @0x180522fff8: <error reading variable>
idx = <value optimized out>
#1 0x00007fbed0212207 in ~XPCCallContext (this=0x7fbeb47
stack = (class XPCJSContextStack *) 0x5230018
#2 0x00007fbed0229d8b in nsXPCWrappedJSC
info=0xe64850, nativeParams=
stackbase = (jsval *) 0x526f088
sp = (jsval *) 0x526f0a0
i = 1 '\001'
argc = 1 '\001'
stack_size = <value optimized out>
result = -2147483647
paramCount = 1 '\001'
retval = 0
success = <value optimized out>
readyToDoTheCall = 1
param_iid = {m0 = 0, m1 = 0, m2 = 0, m3 = "\000\000\
outConversionF
name = 0xe648b0 "setJSStatus"
fval = 22929984
mark = (void *) 0x526f078
foundDependent
xpcc = (XPCContext *) 0x5278ab0
cx = (JSContext *) 0x525f640
thisObj = (JSObject *) 0x301d7c0
context = <value optimized out>
ccx = {<nsAXPCNativeC
mState = XPCCallContext:
---Type <return> to continue, or q <return> to quit---
mJSContext = 0x525f640, mContextPopRequired = 1, mDestroyJSConte
mCallerLanguage = XPCContext:
mOperandJSObject = 0x0, mCurrentJSObject = 0x0, mFlattenedJSObject = 0x0, mWrapper = 0x0, mTearOff = 0x0,
mScriptableInfo = 0x0, mSet = 0x0, mInterface = 0x0, mMember = 0x0, mName = 0, mStaticMemberIs
mArgv = 0x0, mRetVal = 0x0, mExceptionWasThrown = 0, mReturnValueWasSet = 0, mMethodIndex = 0, mCallee = 0x15de240,
mStringWrappe
scriptEval = {mJSContext = 0x525f640, mState = 0x0, mOldErrorReporter = 0, mEvaluated = 1,
mContextHasThread = 86457904}
kungFuDeathGrip = {<nsCOMPtr_base> = {mRawPtr = 0x2d7c020}, <No data fields>}
format = "%s \"%s\""
#3 0x00007fbed098f515 in PrepareAndDispatch (self=0x302f4c0, methodIndex=<value optimized out>, args=0x7fbeb47e
gpregs=
paramBuffer = {{val = {i8 = -16 '�', i16 = -13840, i32 = -1266759184, i64 = 140457048721904, u8 = 240 '�',
u16 = 51696, u32 = 3028208112, u64 = 140457048721904, f = -2.37290578e-07, d = 6.9395002489742
b = -1266759184, c = -16 '�', wc = 51696, p = 0x7fbeb47ec9f0}}, {val = {i8 = 0 '\0', i16 = 0, i32 = 0, i64 = 0,
u8 = 0 '\0', u16 = 0, u32 = 0, u64 = 0, f = 0, d = 0, b = 0, c = 0 '\0', wc = 0, p = 0x0}}, {val = {i8 = 0 '\0',
i16 = 0, i32 = 0, i64 = 0, u8 = 0 '\0', u16 = 0, u32 = 0, u64 = 0, f = 0, d = 0, b = 0, c = 0 '\0', wc = 0, p = 0x0}},
{val = {i8 = 0 '\0', i16 = 0, i32 = 0, i64 = 0, u8 = 0 '\0', u16 = 0, u32 = 0, u64 = 0, f = 0, d = 0, b = 0, c = 0 '\0',
wc = 0, p = 0x0}}, {val = {i8 = 0 '\0', i16 = 0, i32 = 0, i64 = 0, u8 = 0 '\0', u16 = 0, u32 = 0, u64 = 0, f = 0,
d = 0, b = 0, c = 0 '\0', wc = 0, p = 0x0}}, {val = {i8 = 127 '\177', i16 = -21633, i32 = -795235457,
i64 = 140457520245631, u8 = 127 '\177', u16 = 43903, u32 = 3499731839, u64 = 140457520245631, f = -2.06252257e+10,
d = 6.9395235453417
i16 = 0, i32 = 0, i64 = 0, u8 = 0 '\0', u16 = 0, u32 = 0, u64 = 0, f = 0, d = 0, b = 0, c = 0 '\0', wc = 0, p = 0x0}},
{val = {i8 = -48 '�', i16 = -13616, i32 = -1266758960, i64 = 140457048722128, u8 = 208 '�', u16 = 51920, u32 = 3028208336,
u64 = 140457048722128, f = -2.37293762e-07, d = 6.9395002489853
p = 0x7fbeb47ecad0}}, {val = {i8 = 18 '\022', i16 = 18, i32 = 18, i64 = 18, u8 = 18 '\022', u16 = 18, u32 = 18,
u64 = 18, f = 2.52233724e-44, d = 8.8931816251424
i8 = 18 '\022', i16 = 18, i32 = 18, i64 = 18, u8 = 18 '\022', u16 = 18, u32 = 18, u64 = 18, f = 2.52233724e-44,
d = 8.8931816251424
---Type <return> to continue, or q <return> to quit---
i64 = 0, u8 = 0 '\0', u16 = 0, u32 = 0, u64 = 0, f = 0, d = 0, b = 0, c = 0 '\0', wc = 0, p = 0x0}}, {val = {
i8 = 40 '(', i16 = -20696, i32 = -795234520, i64 = 140457520246568, u8 = 40 '(', u16 = 44840, u32 = 3499732776,
u64 = 140457520246568, f = -2.06271447e+10, d = 6.9395235453880
p = 0x7fbed099af28}}, {val = {i8 = 11 '\v', i16 = 11, i32 = 11, i64 = 77309411339, u8 = 11 '\v', u16 = 11, u32 = 11,
u64 = 77309411339, f = 1.54142831e-44, d = 3.8195924242809
val = {i8 = 0 '\0', i16 = 0, i32 = 0, i64 = 0, u8 = 0 '\0', u16 = 0, u32 = 0, u64 = 0, f = 0, d = 0, b = 0, c = 0 '\0',
wc = 0, p = 0x0}}, {val = {i8 = -92 '�', i16 = -12892, i32 = -1416835676, i64 = 2878131620, u8 = 164 '�', u16 = 52644,
u32 = 2878131620, u64 = 2878131620, f = -1.0004675e-12, d = 1.4219859576514
wc = 52644, p = 0xab8ccda4}}, {val = {i8 = -48 '�', i16 = -13616, i32 = -1266758960, i64 = 140457048722128,
u8 = 208 '�', u16 = 51920, u32 = 3028208336, u64 = 140457048722128, f = -2.37293762e-07, d = 6.9395002489853
b = -1266758960, c = -48 '�', wc = 51920, p = 0x7fbeb47ecad0}}}
dispatchParams = (nsXPTCMiniVariant *) 0x7fbeb47ec820
info = (const nsXPTMethodInfo *) 0xe64850
paramCount = 1
i = 4294967295
result = <value optimized out>
ap = <value optimized out>
nr_gpr = 24
nr_fpr = 1
value = <value optimized out>
#4 0x00007fbed098e9c3 in SharedStub () from /usr/lib/
No locals.
#5 0x00007fbed0765d42 in nsContentTreeOw
aStatusText
xulBrowserWindow = {<nsCOMPtr_base> = {mRawPtr = 0x302f4c0}, <No data fields>}
#6 0x00007fbed0766e5e in nsContentTreeOw
at nsContentTreeOw
No locals.
#7 0x00007fbed03adb5d in nsPluginInstanc
---Type <return> to continue, or q <return> to quit---
at nsObjectFrame.
rv = 0
cont = {<nsCOMPtr_base> = {mRawPtr = 0x289dd08}, <No data fields>}
docShellItem = {<nsCOMPtr_base> = {mRawPtr = 0x289ddf8}, <No data fields>}
treeOwner = {<nsCOMPtr_base> = {mRawPtr = 0x289e820}, <No data fields>}
browserChrome = {<nsCOMPtr_base> = {mRawPtr = 0x289e838}, <No data fields>}
#8 0x00007fbed03adbf5 in nsPluginInstanc
at nsObjectFrame.
rv = <value optimized out>
#9 0x00007fbeb7053f2f in IcedTeaPluginFa
from /usr/lib/
No symbol table info available.
#10 0x00007fbeb7056c5e in IcedTeaPluginFa
from /usr/lib/
No symbol table info available.
#11 0x00007fbeb7056df3 in IcedTeaPluginFa
from /usr/lib/
No symbol table info available.
#12 0x00007fbeb706516a in IcedTeaRunnable
from /usr/lib/
No symbol table info available.
#13 0x00007fbed098463e in nsThread:
notifyGlobalOb
obs = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
event = {<nsCOMPtr_base> = {mRawPtr = 0x523a660}, <No data fields>}
rv = 0
#14 0x00007fbed09598fe in NS_ProcessNextE
val = <value optimized out>
#15 0x00007fbed0984cba in nsThread:
---Type <return> to continue, or q <return> to quit---
self = (nsThread *) 0x523a690
event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
#16 0x00007fbed1169cb3 in _pt_root (arg=<value optimized out>) at ptthread.c:221
thred = (PRThread *) 0x5273e30
detached = 0
#17 0x00007fbed275d3ba in start_thread () from /lib/libpthread
No symbol table info available.
#18 0x00007fbed1b1c0ad in clone () from /lib/libc.so.6
No symbol table info available.
#19 0x0000000000000000 in ?? ()
No symbol table info available.
(gdb)
ProblemType: Bug
Architecture: amd64
DistroRelease: Ubuntu 9.04
NonfreeKernelMo
Package: icedtea6-plugin 6b14-0ubuntu10
ProcEnviron:
SHELL=/bin/bash
PATH=(custom, no user)
LANG=en_US.UTF-8
SourcePackage: openjdk-6
Uname: Linux 2.6.28-6-generic x86_64
Changed in openjdk: | |
status: | Unknown → Confirmed |
Changed in openjdk: | |
status: | Confirmed → Fix Released |
Changed in openjdk: | |
importance: | Unknown → Medium |
if firefox crashes, it's certainly a bug in firefox. How do you reproduce the behaviour? please re-run from the command line with ICEDTEAPLUGIN_DEBUG set.