#807618 iceweasel: SIGSEGV when accessing Google+

#807618#5
Date:
2015-12-10 22:58:50 UTC
From:
To:
I did the following:

1. Start iceweasel
2. Visit https://plus.google.com/

After that, Iceweasel gave a SIGSEGV with the backtrace below.

Right now, the problem is very reproducible (until Google+ changes its
content, maybe), but it does *not* occur when running with --safe-mode.


#0  0x00007ffff1aba7bc in nsPrefetchNode::OnStopRequest
(this=0x7fffd263cda0,
aRequest=<optimized out>, aContext=<optimized out>, aStatus=NS_OK) at
/tmp/buildd/iceweasel-38.4.0esr/uriloader/prefetch/nsPrefetchService.cpp:312
No locals.
#1  0x00007ffff17903b2 in mozilla::net::HttpBaseChannel::DoNotifyListener
(this=this@entry=0x7fffd26f2000) at
/tmp/buildd/iceweasel-38.4.0esr/netwerk/protocol/http/HttpBaseChannel.cpp:2024
         listener = {<nsCOMPtr_base> = {mRawPtr = 0x7fffbcff1a40}, <No data
fields>}
#2  0x00007ffff17b4ae1 in
mozilla::net::nsHttpChannel::HandleAsyncNotModified
(this=0x7fffd26f2000) at
/tmp/buildd/iceweasel-38.4.0esr/netwerk/protocol/http/nsHttpChannel.cpp:547
         this = 0x7fffd26f2000
#3  0x00007ffff177b597 in nsRunnableMethodImpl<void
(mozilla::net::nsHttpChannel::*)(), void, true>::Run (this=<optimized
out>) at
../../../dist/include/nsThreadUtils.h:386
No locals.
#4  0x00007ffff167a783 in nsThread::ProcessNextEvent (this=0x7ffff6bfe690,
aMayWait=<optimized out>, aResult=0x7fffffffcbc7) at
/tmp/buildd/iceweasel-38.4.0esr/xpcom/threads/nsThread.cpp:855
         event = {<nsCOMPtr_base> = {mRawPtr = 0x7fffba61f8e0}, <No data
fields>}
         reallyWait = <optimized out>
         notifyMainThreadObserver = <optimized out>
         obs = {<nsCOMPtr_base> = {mRawPtr = 0x7fffdcc24668}, <No data
fields>}
         rv = NS_OK
#5  0x00007ffff168fb71 in NS_ProcessNextEvent (aThread=<optimized out>,
aMayWait=aMayWait@entry=false) at
/tmp/buildd/iceweasel-38.4.0esr/xpcom/glue/nsThreadUtils.cpp:265
         val = true
#6  0x00007ffff18474ed in mozilla::ipc::MessagePump::Run
(this=0x7fffe6141c80,
aDelegate=0x7fffe612f6a0) at
/tmp/buildd/iceweasel-38.4.0esr/ipc/glue/MessagePump.cpp:99
         did_work = <optimized out>
#7  0x00007ffff183c251 in RunHandler (this=0x7fffe612f6a0) at
/tmp/buildd/iceweasel-38.4.0esr/ipc/chromium/src/base/message_loop.cc:226
No locals.
#8  MessageLoop::Run (this=0x7fffe612f6a0) at
/tmp/buildd/iceweasel-38.4.0esr/ipc/chromium/src/base/message_loop.cc:200
         save_state = {<MessageLoop::RunState> = {run_depth = 1,
quit_received =
false}, loop_ = 0x7fffe612f6a0, previous_state_ = 0x0}
#9  0x00007ffff25dd4d2 in nsBaseAppShell::Run (this=0x0) at
/tmp/buildd/iceweasel-38.4.0esr/widget/nsBaseAppShell.cpp:164
         thread = 0x7ffff6bfe690
#10 0x00007ffff2b09c05 in nsAppStartup::Run (this=0x7fffdcc3e060) at
/tmp/buildd/iceweasel-38.4.0esr/toolkit/components/startup/nsAppStartup.cpp:281
         rv = <optimized out>
         retval = <optimized out>
#11 0x00007ffff2b3ce09 in XREMain::XRE_mainRun
(this=this@entry=0x7fffffffce58)
at /tmp/buildd/iceweasel-38.4.0esr/toolkit/xre/nsAppRunner.cpp:4239
         rv = NS_OK
         appStartup = {<nsCOMPtr_base> = {mRawPtr = 0x7fffdcc3e060}, <No
data
fields>}
         cmdLine = {<nsCOMPtr_base> = {mRawPtr = 0x7fffd9b9dcc0}, <No data
fields>}
         workingDir = {<nsCOMPtr_base> = {mRawPtr = 0x7fffdc7b9440}, <No
data
fields>}
#12 0x00007ffff2b3d0c1 in XREMain::XRE_main (this=this@entry=0x7fffffffce58,
argc=argc@entry=1, argv=argv@entry=0x7fffffffe378,
aAppData=aAppData@entry=0x7fffffffd068) at
/tmp/buildd/iceweasel-38.4.0esr/toolkit/xre/nsAppRunner.cpp:4315
         aLocal = 0 '\000'
         rv = <optimized out>
         exit = false
         appInitiatedRestart = false
         sampler_raii4261 = {mHandle = 0x7ffff6bcd000}
         result = 0
#13 0x00007ffff2b3d391 in XRE_main (argc=1, argv=0x7fffffffe378,
aAppData=0x7fffffffd068, aFlags=<optimized out>) at
/tmp/buildd/iceweasel-38.4.0esr/toolkit/xre/nsAppRunner.cpp:4547
         main = {mNativeApp = {<nsCOMPtr_base> = {mRawPtr =
0x7ffff6bdc6b0}, <No
data fields>}, mProfileSvc = {<nsCOMPtr_base> = {mRawPtr =
0x7fffe613a880}, <No
data fields>}, mProfD = {<nsCOMPtr_base> = {mRawPtr = 0x7ffff6b54040},
<No data
fields>}, mProfLD = {<nsCOMPtr_base> = {mRawPtr = 0x7ffff6b54100}, <No data
fields>}, mProfileLock = {<nsCOMPtr_base> = {mRawPtr = 0x7fffe6142380}, <No
data fields>}, mRemoteService = {<nsCOMPtr_base> = {mRawPtr =
0x7fffd806fa20},
<No data fields>}, mScopedXPCOM = {mTuple =
{<mozilla::detail::PairHelper<ScopedXPCOMStartup*,
mozilla::DefaultDelete<ScopedXPCOMStartup>, (mozilla::detail::StorageType)1,
(mozilla::detail::StorageType)0>> =
{<mozilla::DefaultDelete<ScopedXPCOMStartup>> = {<No data fields>},
mFirstA =
0x7ffff6ba1a50}, <No data fields>}}, mAppData = {mRawPtr = 0x7ffff6b45c00},
mDirProvider = {<nsIDirectoryServiceProvider2> =
{<nsIDirectoryServiceProvider>
= {<nsISupports> = {_vptr.nsISupports = 0x7ffff5163550 <vtable for
nsXREDirProvider+16>}, <No data fields>}, <No data fields>},
<nsIProfileStartup> = {<nsISupports> = {_vptr.nsISupports = 0x7ffff5163598
<vtable for nsXREDirProvider+88>}, <No data fields>}, mAppProvider =
{<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}, mGREDir =
{<nsCOMPtr_base> = {mRawPtr = 0x7ffff6b52780}, <No data fields>},
mGREBinDir =
{<nsCOMPtr_base> = {mRawPtr = 0x7ffff6b52cc0}, <No data fields>},
mXULAppDir =
{<nsCOMPtr_base> = {mRawPtr = 0x7ffff6b52a80}, <No data fields>},
mProfileDir =
{<nsCOMPtr_base> = {mRawPtr = 0x7ffff6b54040}, <No data fields>},
mProfileLocalDir = {<nsCOMPtr_base> = {mRawPtr = 0x7ffff6b54100}, <No data
fields>}, mProfileNotified = true, mAppBundleDirectories =
{<nsCOMArray_base> =
{mArray = {<nsTArray_Impl<nsISupports*, nsTArrayInfallibleAllocator>> =
{<nsTArray_base<nsTArrayInfallibleAllocator, nsTArray_CopyWithMemutils>> =
{mHdr = 0x7ffff53c4590 <nsTArrayHeader::sEmptyHdr>},
<nsTArray_TypedBase<nsISupports*, nsTArray_Impl<nsISupports*,
nsTArrayInfallibleAllocator> >> =
{<nsTArray_SafeElementAtHelper<nsISupports*,
nsTArray_Impl<nsISupports*, nsTArrayInfallibleAllocator> >> = {<No data
fields>}, <No data fields>}, static NoIndex = <optimized out>}, <No data
fields>}}, <No data fields>}, mExtensionDirectories = {<nsCOMArray_base> =
{mArray = {<nsTArray_Impl<nsISupports*, nsTArrayInfallibleAllocator>> =
{<nsTArray_base<nsTArrayInfallibleAllocator, nsTArray_CopyWithMemutils>> =
{mHdr = 0x7fffdb1ee550}, <nsTArray_TypedBase<nsISupports*,
nsTArray_Impl<nsISupports*, nsTArrayInfallibleAllocator> >> =
{<nsTArray_SafeElementAtHelper<nsISupports*, nsTArray_Impl<nsISupports*,
nsTArrayInfallibleAllocator> >> = {<No data fields>}, <No data fields>},
static
NoIndex = <optimized out>}, <No data fields>}}, <No data fields>},
mThemeDirectories = {<nsCOMArray_base> = {mArray =
{<nsTArray_Impl<nsISupports*, nsTArrayInfallibleAllocator>> =
{<nsTArray_base<nsTArrayInfallibleAllocator, nsTArray_CopyWithMemutils>> =
{mHdr = 0x7fffdb1ee950}, <nsTArray_TypedBase<nsISupports*,
nsTArray_Impl<nsISupports*, nsTArrayInfallibleAllocator> >> =
{<nsTArray_SafeElementAtHelper<nsISupports*, nsTArray_Impl<nsISupports*,
nsTArrayInfallibleAllocator> >> = {<No data fields>}, <No data fields>},
static
NoIndex = <optimized out>}, <No data fields>}}, <No data fields>}},
mProfileName = {<nsFixedCString> = {<nsCString> = {<nsACString_internal> =
{mData = 0x7fffe611c4d8 "default", mLength = 7, mFlags = 65541}, <No data
fields>}, mFixedCapacity = 63, mFixedBuf = 0x7fffffffcf18 ""}, mStorage =
"\000\317\377\377\377\177\000\000\237\317\377\377\377\177\000\000\237\317\377\377\377\177\000\000\230\317\377\377\377\177\000\000\237\317\377\377\377\177\000\000\237\317\377\377\377\177\000\000\000\247\326z\355\024\021}P\320\377\377\377\177\000"},
mDesktopStartupID = {<nsFixedCString> = {<nsCString> =
{<nsACString_internal> =
{mData = 0x7fffffffcf78 "", mLength = 0, mFlags = 65553}, <No data fields>},
mFixedCapacity = 63, mFixedBuf = 0x7fffffffcf78 ""}, mStorage =
"\000\317\377\377\377\177\000\000\a\000\000\000\021\000\001\000?\000\000\000\377\177\000\000\230\317\377\377\377\177\000\000browser\000\200'\265\366\377\177\000\000\071\317c\361\377\177\000\000\000
\265\366\377\177\000"}, mStartOffline = false, mShuttingDown = false,
mDisableRemote = false, mGdkDisplay = 0x7ffff6bef020}
         result = <optimized out>
#14 0x000055555555846e in do_main (argc=1, argv=0x7fffffffe378,
xreDirectory=0x7ffff6b52780) at
/tmp/buildd/iceweasel-38.4.0esr/browser/app/nsBrowserApp.cpp:294
         appData = {<nsXREAppData> = {size = 128, directory =
0x7ffff6b52a80,
vendor = 0x7ffff6ba12c0 "Mozilla", name = 0x7ffff6b446a0 "Iceweasel",
remotingName = 0x7ffff6b446b0 "iceweasel", version = 0x7ffff6ba12c8
"38.4.0",
buildID = 0x7ffff6b446c0 "20151103235259", ID = 0x7ffff6bb6d90
"{ec8030f7-c20a-
464f-9b0e-13a3a9e97384}", copyright = 0x0, flags = 2, xreDirectory =
0x7ffff6b52780, minVersion = 0x7ffff6ba12d0 "38.4.0", maxVersion =
0x7ffff6ba12d8 "38.4.0", crashReporterURL = 0x7ffff6ba12e0 "", profile =
0x7ffff6b446d0 "mozilla/firefox", UAName = 0x0}, <No data fields>}
         exeFile = {<nsCOMPtr_base> = {mRawPtr = 0x7ffff6b52900}, <No data
fields>}
         greDir = {<nsCOMPtr_base> = {mRawPtr = 0x7ffff6b529c0}, <No data
fields>}
         appSubdir = {<nsCOMPtr_base> = {mRawPtr = 0x7ffff6b52a80}, <No data
fields>}
         rv = <optimized out>
         appDataFile = <optimized out>
         metroOnDesktop = false
         appini = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
#15 0x0000555555557bb6 in main (argc=1, argv=0x7fffffffe378) at
/tmp/buildd/iceweasel-38.4.0esr/browser/app/nsBrowserApp.cpp:667
         gotCounters = 1
         initialRUsage = {ru_utime = {tv_sec = 0, tv_usec = 0}, ru_stime =
{tv_sec = 0, tv_usec = 4000}, {ru_maxrss = 16724, __ru_maxrss_word = 16724},
{ru_ixrss = 0, __ru_ixrss_word = 0}, {ru_idrss = 0, __ru_idrss_word = 0},
{ru_isrss = 0, __ru_isrss_word = 0}, {ru_minflt = 219, __ru_minflt_word
= 219},
{ru_majflt = 5, __ru_majflt_word = 5}, {ru_nswap = 0, __ru_nswap_word = 0},
{ru_inblock = 640, __ru_inblock_word = 640}, {ru_oublock = 0,
__ru_oublock_word
= 0}, {ru_msgsnd = 0, __ru_msgsnd_word = 0}, {ru_msgrcv = 0,
__ru_msgrcv_word =
0}, {ru_nsignals = 0, __ru_nsignals_word = 0}, {ru_nvcsw = 13,
__ru_nvcsw_word
= 13}, {ru_nivcsw = 2, __ru_nivcsw_word = 2}}
         xreDirectory = 0x7ffff6b52780
         rv = <optimized out>
         result = <optimized out>