#724233 iceweasel crashes with illegal instruction when accessing javascript gmail web page. #724233
- Package:
- iceweasel
- Source:
- firefox-esr
- Submitter:
- Javier Vasquez
- Date:
- 2013-09-22 21:36:25 UTC
- Severity:
- important
When entering the gmail web page, which uses javascript, iceweasel
crashes. When looking at the strace output, it looks it dies given
an illegal instruction:
**
writev(4, [{"(\30\4\0\335\0\200\1\342\0\0\0\0\0\0\0", 16}, {NULL, 0},
{"", 0}], 3) = 16
poll([{fd=4, events=POLLIN}], 1, -1) = 1 ([{fd=4, revents=POLLIN}])
recv(4, "\1\1\375\247\0\0\0\0CG\0\1\0\0\34\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
4096, 0) = 32
recv(4, 0x76bb005c, 4096, 0) = -1 EAGAIN (Resource
temporarily unavailable)
recv(4, 0x76bb005c, 4096, 0) = -1 EAGAIN (Resource
temporarily unavailable)
gettimeofday({1379873119, 320697}, NULL) = 0
--- SIGILL (Illegal instruction) @ 0 (0) ---
unlink("/home/general/.mozilla/firefox/rr46xi3r.default/lock") = 0
rt_sigaction(SIGILL, {SIG_DFL, [RT_65 RT_67 RT_70 RT_71], 0}, NULL, 16) = 0
rt_sigprocmask(SIG_UNBLOCK, [ILL], NULL, 16) = 0
tgkill(28150, 28150, SIGILL) = 0
--- SIGILL (Illegal instruction) @ 0 (0) ---
+++ killed by SIGILL +++
**
This is on a loongson-2f mini-pc, using mipsel.
Attached goes the strace log.
Javier.
I also got gdb log, and it shows the same failure:
[Thread 0x655ff490 (LWP 23275) exited]
[New Thread 0x655ff490 (LWP 23336)]
[New Thread 0x5bcff490 (LWP 23337)]
[New Thread 0x5b1ff490 (LWP 23358)]
[New Thread 0x572ff490 (LWP 23381)]
[New Thread 0x569ff490 (LWP 23398)]
[New Thread 0x530ff490 (LWP 23444)]
[Thread 0x5e5ff490 (LWP 23311) exited]
[New Thread 0x526ff490 (LWP 23447)]
Program received signal SIGILL, Illegal instruction.
0x77ded48c in __sqrt_finite () from /lib/mipsel-linux-gnu/loongson2f/libm.so.6
The back trace couldn't find the culprit:
(gdb) bt
#0 0x77ded48c in __sqrt_finite () from
/lib/mipsel-linux-gnu/loongson2f/libm.so.6
#1 0x778b3868 in lookup (x=<optimized out>, f=<optimized out>,
this=<optimized out>) at
/build/iceweasel-AksY7a/iceweasel-24.0/js/src/jsmath.h:44
#2 js_math_sqrt (cx=0x6616c220, argc=<optimized out>, vp=0x718a71f8)
at /build/iceweasel-AksY7a/iceweasel-24.0/js/src/jsmath.cpp:766
#3 0x77757d24 in CallJSNative (args=..., native=<optimized out>,
cx=<optimized out>) at ../../../js/src/jscntxtinlines.h:321
...
#38 0x76935544 in nsWindow::OnMotionNotifyEvent (this=0x6ebdbb50,
aEvent=0x718d28c0) at
/build/iceweasel-AksY7a/iceweasel-24.0/widget/gtk2/nsWindow.cpp:2558
#39 0x76935610 in motion_notify_event_cb (widget=<optimized out>,
event=0x718d28c0) at
/build/iceweasel-AksY7a/iceweasel-24.0/widget/gtk2/nsWindow.cpp:5208
#40 0x7488646c in ?? () from /usr/lib/mipsel-linux-gnu/libgtk-x11-2.0.so.0
warning: GDB can't find the start of the function at 0x7488646a.
GDB is unable to find the start of the function at 0x7488646a
and thus can't determine the size of that function's stack frame.
This means that GDB may be unable to access that stack frame, or
the frames below it.
This problem is most likely caused by an invalid program counter or
stack pointer.
However, if you think GDB should simply search farther back
from 0x7488646a for code which looks like the beginning of a
function, you can increase the range of the search using the `set
heuristic-fence-post' command.
Attached goes the full gdb output.