==2845== Memcheck, a memory error detector.
==2845== Copyright (C) 2002-2008, and GNU GPL'd, by Julian Seward et al.
==2845== Using LibVEX rev 1884, a library for dynamic binary translation.
==2845== Copyright (C) 2004-2008, and GNU GPL'd, by OpenWorks LLP.
==2845== Using valgrind-3.4.1, a dynamic binary instrumentation framework.
==2845== Copyright (C) 2000-2008, and GNU GPL'd, by Julian Seward et al.
==2845== For more details, rerun with: -v
==2845== 
==2845== My PID = 2845, parent PID = 6731.  Prog and args are:
==2845==    /usr/lib64/mozilla-firefox/firefox
==2845== 
==2845== Source and destination overlap in memcpy(0x22DB0D78, 0x22DB0D78, 8192)
==2845==    at 0x4C2559A: memcpy (mc_replace_strmem.c:402)
==2845==    by 0x2B9ED733: snd_pcm_area_copy (in /usr/lib64/libasound.so.2.0.0)
==2845==    by 0x2B9EDB7F: snd_pcm_areas_copy (in /usr/lib64/libasound.so.2.0.0)
==2845==    by 0x2BA27110: snd_pcm_softvol_write_areas (in /usr/lib64/libasound.so.2.0.0)
==2845==    by 0x2B9F75D0: snd_pcm_plugin_mmap_commit (in /usr/lib64/libasound.so.2.0.0)
==2845==    by 0x2BA0109C: snd_pcm_rate_commit_area (in /usr/lib64/libasound.so.2.0.0)
==2845==    by 0x2BA0114F: snd_pcm_rate_sync_playback_area (in /usr/lib64/libasound.so.2.0.0)
==2845==    by 0x2BA0127C: snd_pcm_rate_mmap_commit (in /usr/lib64/libasound.so.2.0.0)
==2845==    by 0x2B9F5C6E: snd_pcm_mmap_write_areas (in /usr/lib64/libasound.so.2.0.0)
==2845==    by 0x2B9EB511: snd1_pcm_write_areas (in /usr/lib64/libasound.so.2.0.0)
==2845==    by 0x2B9F5DFA: snd_pcm_mmap_writei (in /usr/lib64/libasound.so.2.0.0)
==2845==    by 0x259DBE33: (within /opt/netscape/plugins/libflashplayer.so)
==2845== 
==2845== Thread 15:
==2845== Source and destination overlap in memcpy(0x2D2B4180, 0x2D2B4580, 1280)
==2845==    at 0x4C2559A: memcpy (mc_replace_strmem.c:402)
==2845==    by 0x25A945B6: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x25A94EA6: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x25A95028: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x25883D6B: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x2588430C: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x259DBCF0: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x259DBF09: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x259DC040: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x4E302E6: start_thread (in /lib64/libpthread-2.10.1.so)
==2845==    by 0x562738C: clone (in /lib64/libc-2.10.1.so)
==2845== 
==2845== Thread 1:
==2845== Source and destination overlap in memcpy(0x22F06AD0, 0x22F06AD0, 108)
==2845==    at 0x4C2559A: memcpy (mc_replace_strmem.c:402)
==2845==    by 0x2572AD51: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x2572B795: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x25705361: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x25705B59: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x25700C6F: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x2572A79A: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x2572D4D3: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x2572C782: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x258AFF3E: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x258B151D: (within /opt/netscape/plugins/libflashplayer.so)
==2845==    by 0x258AF835: (within /opt/netscape/plugins/libflashplayer.so)
==2845== 
==2845== Mismatched free() / delete / delete []
==2845==    at 0x4C24AC1: realloc (vg_replace_malloc.c:429)
==2845==    by 0xC20B0E6: (within /usr/lib64/opengl/nvidia/lib/libGL.so.180.60)
==2845==    by 0x100000000: ???
==2845==    by 0x12A3CF9F: (within /usr/lib64/libgnutls.so.26.14.7)
==2845==  Address 0x1fb5fab8 is 0 bytes inside a block of size 128 alloc'd
==2845==    at 0x4C2434C: operator new(unsigned long) (vg_replace_malloc.c:230)
==2845==    by 0x6E91DF9: nsFrameSelection::nsFrameSelection() (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E91F5B: NS_NewSelection(nsFrameSelection**) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E087AA: CreateSelection(nsISupports*, nsID const&, void**) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x740EF81: nsComponentManagerImpl::CreateInstance(nsID const&, nsISupports*, nsID const&, void**) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x73E6703: nsCreateInstanceByCID::operator()(nsID const&, void**) const (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x73E5E2D: nsCOMPtr_base::assign_from_helper(nsCOMPtr_helper const&, nsID const&) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6EAED88: nsTextControlFrame::CreateFrameFor(nsIContent*) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E154FB: nsCSSFrameConstructor::CreateAnonymousFrames(nsFrameConstructorState&, nsIContent*, nsIDocument*, nsIFrame*, int, nsFrameItems&) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E194D9: nsCSSFrameConstructor::ConstructHTMLFrame(nsFrameConstructorState&, nsIContent*, nsIFrame*, nsIAtom*, int, nsStyleContext*, nsFrameItems&, int) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E12D92: nsCSSFrameConstructor::ConstructFrameInternal(nsFrameConstructorState&, nsIContent*, nsIFrame*, nsIAtom*, int, nsStyleContext*, nsFrameItems&, int) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E132D7: nsCSSFrameConstructor::ConstructFrame(nsFrameConstructorState&, nsIContent*, nsIFrame*, nsFrameItems&) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845== 
==2845== Invalid free() / delete / delete[]
==2845==    at 0x4C24AC1: realloc (vg_replace_malloc.c:429)
==2845==    by 0xC20B0E6: (within /usr/lib64/opengl/nvidia/lib/libGL.so.180.60)
==2845==    by 0x100000000: ???
==2845==    by 0x12A3CF9F: (within /usr/lib64/libgnutls.so.26.14.7)
==2845==  Address 0x1f820b88 is 0 bytes inside a block of size 56 free'd
==2845==    at 0x4C2318D: operator delete(void*) (vg_replace_malloc.c:342)
==2845==    by 0x900D11B: _cairo_user_data_array_fini (in /usr/lib64/libcairo.so.2.10800.6)
==2845==    by 0x902DF34: cairo_surface_destroy (in /usr/lib64/libcairo.so.2.10800.6)
==2845==    by 0x743E61E: gfxASurface::Release() (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x735B51E: nsRefPtr<gfxASurface>::operator=(gfxASurface*) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x73518AB: nsWindow::GetThebesSurface() (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x737CC37: nsThebesDeviceContext::CreateRenderingContext(nsIWidget*, nsIRenderingContext*&) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E44BAE: PresShell::CreateRenderingContext(nsIFrame*, nsIRenderingContext**) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E3F3B5: PresShell::DoReflow(nsIFrame*) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E429D2: PresShell::ProcessReflowCommands(int) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E42B09: PresShell::DoFlushPendingNotifications(mozFlushType, int) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E3F5DE: PresShell::DidDoReflow() (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845== 
==2845== Invalid read of size 4
==2845==    at 0x6CFF5E6: nsXPCWrappedJS::QueryInterface(nsID const&, void**) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E88DBB: nsFrameSelection::~nsFrameSelection() (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E88302: nsFrameSelection::Release() (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6EADBF5: nsTextControlFrame::PreDestroy() (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6EADFDA: nsTextControlFrame::Destroy() (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E7CEF7: nsLineBox::DeleteLineList(nsPresContext*, nsLineList&) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E56C38: nsBlockFrame::Destroy() (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E7CEF7: nsLineBox::DeleteLineList(nsPresContext*, nsLineList&) (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E56C38: nsBlockFrame::Destroy() (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E68B57: nsFrameList::DestroyFrames() (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E56C21: nsBlockFrame::Destroy() (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==    by 0x6E68B57: nsFrameList::DestroyFrames() (in /usr/lib64/xulrunner-1.9/libxul.so)
==2845==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
==2845== 
==2845== ERROR SUMMARY: 22382 errors from 6 contexts (suppressed: 0 from 0)
==2845== malloc/free: in use at exit: 85,957,675 bytes in 482,698 blocks.
==2845== malloc/free: 4,549,523 allocs, 4,066,825 frees, 2,702,759,970 bytes allocated.
==2845== For counts of detected errors, rerun with: -v
==2845== searching for pointers to 482,698 not-freed blocks.
==2845== checked 282,001,040 bytes.
==2845== 
==2845== LEAK SUMMARY:
==2845==    definitely lost: 1,248,534 bytes in 27,371 blocks.
==2845==      possibly lost: 18,089,553 bytes in 57,001 blocks.
==2845==    still reachable: 66,619,588 bytes in 398,326 blocks.
==2845==         suppressed: 0 bytes in 0 blocks.
==2845== Rerun with --leak-check=full to see details of leaked memory.