==7286== Memcheck, a memory error detector. ==7286== Copyright (C) 2002-2006, and GNU GPL'd, by Julian Seward et al. ==7286== Using LibVEX rev 1606, a library for dynamic binary translation. ==7286== Copyright (C) 2004-2006, and GNU GPL'd, by OpenWorks LLP. ==7286== Using valgrind-3.2.0, a dynamic binary instrumentation framework. ==7286== Copyright (C) 2000-2006, and GNU GPL'd, by Julian Seward et al. ==7286== ==7286== My PID = 7286, parent PID = 7208. Prog and args are: ==7286== /usr/lib/mozilla-firefox/firefox-bin ==7286== --7286-- --7286-- Command line --7286-- /usr/lib/mozilla-firefox/firefox-bin --7286-- Startup, with flags: --7286-- --tool=memcheck --7286-- -v --7286-- -v --7286-- --trace-children=yes --7286-- --track-fds=yes --7286-- --log-file=firefox.vald --7286-- --error-limit=no --7286-- --leak-check=full --7286-- Contents of /proc/version: --7286-- Linux version 2.6.17-gentoo-r8 (root@trinity) (gcc version 4.1.1 (Gentoo 4.1.1)) #1 PREEMPT Mon Sep 18 12:20:50 EDT 2006 --7286-- Arch and hwcaps: X86, x86-sse0 --7286-- Valgrind library directory: /usr/lib/valgrind --7286-- TT/TC: VG_(init_tt_tc) (startup of code management) --7286-- TT/TC: cache: 8 sectors of 20127744 bytes each = 161021952 total --7286-- TT/TC: table: 524168 total entries, max occupancy 419328 (80%) --7286-- Reading syms from /lib/ld-2.4.so (0x4000000) --7286-- summarise_context(loc_start = 0x5D): cannot summarise(why=1): 0x66: 44(r3) u u u c-36 u u c-44 c-40 c-4 u u u u u u u u u u u --7286-- summarise_context(loc_start = 0x66): cannot summarise(why=1): 0x69: 44(r3) u u u c-36 u u u c-40 c-4 u u u u u u u u u u u --7286-- summarise_context(loc_start = 0x69): cannot summarise(why=1): 0x78: 44(r3) u u u c-36 u u u u c-4 u u u u u u u u u u u --7286-- Reading syms from /usr/lib/mozilla-firefox/firefox-bin (0x8048000) --7286-- Reading syms from /usr/lib/valgrind/x86-linux/memcheck (0x38000000) --7286-- object doesn't have a dynamic symbol table --7286-- Reading suppressions file: /usr/lib/valgrind/default.supp --7286-- TT/TC: initialise sector 0 --7286-- REDIR: 0x4014890 (index) redirected to 0x38027BF3 (vgPlain_x86_linux_REDIR_FOR_index) --7286-- Reading syms from /usr/lib/valgrind/x86-linux/vgpreload_core.so (0x401D000) --7286-- Reading syms from /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so (0x401F000) ==7286== WARNING: new redirection conflicts with existing -- ignoring it --7286-- new: 0x04014890 (index ) R-> 0x04022370 index --7286-- REDIR: 0x4014A30 (strlen) redirected to 0x4022420 (strlen) --7286-- Reading syms from /usr/lib/mozilla-firefox/libmozjs.so (0x4025000) --7286-- Reading syms from /usr/lib/mozilla-firefox/libxpcom.so (0x40E0000) --7286-- Reading syms from /usr/lib/mozilla-firefox/libxpcom_core.so (0x40E4000) --7286-- Reading syms from /usr/lib/nspr/libplds4.so.6 (0x41CA000) --7286-- Reading syms from /usr/lib/nspr/libplc4.so.6 (0x41CE000) --7286-- Reading syms from /usr/lib/nspr/libnspr4.so.6 (0x41D3000) --7286-- Reading syms from /lib/libpthread-2.4.so (0x4223000) --7286-- Reading syms from /lib/libdl-2.4.so (0x4236000) --7286-- Reading syms from /usr/lib/libgtk-x11-2.0.so.0.800.19 (0x423A000) --7286-- Reading syms from /usr/lib/libgdk-x11-2.0.so.0.800.19 (0x4513000) --7286-- Reading syms from /usr/lib/libatk-1.0.so.0.1211.0 (0x4592000) --7286-- Reading syms from /usr/lib/libgdk_pixbuf-2.0.so.0.800.19 (0x45AC000) --7286-- Reading syms from /usr/lib/libpangocairo-1.0.so.0.1201.2 (0x45C2000) --7286-- Reading syms from /usr/lib/libpango-1.0.so.0.1201.2 (0x45CA000) --7286-- Reading syms from /usr/lib/libcairo.so.2.9.2 (0x4603000) --7286-- Reading syms from /usr/lib/libgobject-2.0.so.0.1000.3 (0x4663000) --7286-- Reading syms from /usr/lib/libgmodule-2.0.so.0.1000.3 (0x469D000) --7286-- Reading syms from /usr/lib/libglib-2.0.so.0.1000.3 (0x46A1000) --7286-- Reading syms from /usr/lib/libpangoxft-1.0.so.0.1201.2 (0x4727000) --7286-- Reading syms from /usr/lib/libpangoft2-1.0.so.0.1201.2 (0x472E000) --7286-- Reading syms from /usr/lib/libX11.so.6.2.0 (0x4753000) --7286-- Reading syms from /lib/libm-2.4.so (0x483E000) --7286-- Reading syms from /usr/lib/gcc/i686-pc-linux-gnu/4.1.1/libstdc++.so.6.0.8 (0x4864000) --7286-- Reading syms from /usr/lib/gcc/i686-pc-linux-gnu/4.1.1/libgcc_s.so.1 (0x4943000) --7286-- Reading syms from /lib/libc-2.4.so (0x494D000) --7286-- summarise_context(loc_start = 0x18): cannot summarise(why=1): 0x24: 0(r0) u u u c0 r1 c12 c4 c8 r2 u u u u u u u u u u u --7286-- summarise_context(loc_start = 0x24): cannot summarise(why=1): 0x2C: 0(r0) u u u u r1 u u u r2 u u u u u u u u u u u --7286-- summarise_context(loc_start = 0x34): cannot summarise(why=1): 0x4D: 0(r0) u c60 c56 c52 u c44 c40 c36 c-4 u u u u u u u u u u u --7286-- Reading syms from /usr/lib/libfreetype.so.6.3.8 (0x4A69000) --7286-- Reading syms from /lib/libz.so.1.2.3 (0x4ACF000) --7286-- Reading syms from /usr/lib/libfontconfig.so.1.0.4 (0x4AE2000) --7286-- Reading syms from /usr/lib/libexpat.so.1.5.0 (0x4B11000) --7286-- Reading syms from /usr/lib/libXext.so.6.4.0 (0x4B30000) --7286-- Reading syms from /usr/lib/libXrender.so.1.3.0 (0x4B3E000) --7286-- Reading syms from /usr/lib/libXi.so.6.0.0 (0x4B46000) --7286-- Reading syms from /usr/lib/libXrandr.so.2.0.0 (0x4B4E000) --7286-- Reading syms from /usr/lib/libXcursor.so.1.0.2 (0x4B53000) --7286-- Reading syms from /usr/lib/libXfixes.so.3.1.0 (0x4B5C000) --7286-- Reading syms from /usr/lib/libglitz.so.1.0.0 (0x4B61000) --7286-- Reading syms from /usr/lib/libpng12.so.0.12.0 (0x4B86000) --7286-- Reading syms from /usr/lib/libXft.so.2.1.2 (0x4BAA000) --7286-- Reading syms from /usr/lib/libXau.so.6.0.0 (0x4BBD000) --7286-- Reading syms from /usr/lib/libXdmcp.so.6.0.0 (0x4BC0000) --7286-- REDIR: 0x49B6880 (memset) redirected to 0x40226F0 (memset) --7286-- REDIR: 0x49B6D50 (memcpy) redirected to 0x4022E50 (memcpy) --7286-- REDIR: 0x49B5A20 (rindex) redirected to 0x4022250 (rindex) --7286-- REDIR: 0x49B5630 (strlen) redirected to 0x4022400 (strlen) --7286-- REDIR: 0x49B2480 (calloc) redirected to 0x40206A0 (calloc) --7286-- REDIR: 0x4014DF0 (stpcpy) redirected to 0x4022B90 (stpcpy) --7286-- REDIR: 0x49B29B0 (malloc) redirected to 0x4021580 (malloc) --7286-- REDIR: 0x49B0780 (free) redirected to 0x4021120 (free) --7286-- REDIR: 0x49B5140 (strcpy) redirected to 0x40229E0 (strcpy) --7286-- REDIR: 0x49B5830 (strncmp) redirected to 0x4022460 (strncmp) --7286-- REDIR: 0x4916010 (operator new(unsigned)) redirected to 0x4021DB0 (operator new(unsigned)) --7286-- REDIR: 0x4914B60 (operator delete(void*)) redirected to 0x4020DB0 (operator delete(void*)) --7286-- REDIR: 0x49B50D0 (strcmp) redirected to 0x40224D0 (strcmp) --7286-- REDIR: 0x49B6A70 (stpcpy) redirected to 0x4022C70 (stpcpy) --7286-- REDIR: 0x49B2DE0 (realloc) redirected to 0x4021640 (realloc) --7286-- REDIR: 0x49B4F60 (index) redirected to 0x4022340 (index) --7286-- REDIR: 0x49B7690 (strchrnul) redirected to 0x4022780 (strchrnul) --7286-- REDIR: 0x49B6380 (memchr) redirected to 0x40225F0 (memchr) --7286-- REDIR: 0x49B56E0 (strnlen) redirected to 0x40223D0 (strnlen) --7286-- REDIR: 0x49B75C0 (rawmemchr) redirected to 0x40227B0 (rawmemchr) --7286-- REDIR: 0x49B2D10 (posix_memalign) redirected to 0x4020610 (posix_memalign) --7286-- REDIR: 0x49B6810 (memmove) redirected to 0x4022720 (memmove) --7286-- REDIR: 0x49B4DB0 (strcat) redirected to 0x4022AB0 (strcat) --7286-- REDIR: 0x49B5980 (strncpy) redirected to 0x40228B0 (strncpy) --7286-- Reading syms from /lib/libnss_compat-2.4.so (0x4DE7000) --7286-- Reading syms from /lib/libnsl-2.4.so (0x4DEF000) --7286-- Reading syms from /lib/libnss_nis-2.4.so (0x4E04000) --7286-- Reading syms from /lib/libnss_files-2.4.so (0x4E0E000) --7286-- Reading syms from /usr/lib/gconv/ISO8859-1.so (0x421E000) ==7286== Syscall param write(buf) points to uninitialised byte(s) ==7286== at 0x422DEC3: __write_nocancel (in /lib/libpthread-2.4.so) ==7286== by 0x478CCFE: _X11TransWrite (Xtrans.c:897) ==7286== by 0x4792616: _XFlushInt (XlibInt.c:665) ==7286== by 0x47926EA: _XReply (XlibInt.c:1694) ==7286== by 0x4778DB3: XInternAtom (IntAtom.c:185) ==7286== by 0x478C84D: XSetWMProperties (WMProps.c:145) ==7286== by 0x45667A7: setup_toplevel_window (gdkwindow-x11.c:628) ==7286== by 0x4568E9E: gdk_window_new (gdkwindow-x11.c:923) ==7286== by 0x4546B28: gdk_display_open (gdkdisplay-x11.c:202) ==7286== by 0x45259CC: gdk_display_open_default_libgtk_only (gdk.c:278) ==7286== by 0x4358FBE: gtk_init_check (gtkmain.c:744) ==7286== by 0x4358FF3: gtk_init (gtkmain.c:779) ==7286== Address 0x4C1CDF0 is 128 bytes inside a block of size 16,384 alloc'd ==7286== at 0x402070E: calloc (vg_replace_malloc.c:279) ==7286== by 0x477DAB7: XOpenDisplay (OpenDis.c:262) ==7286== by 0x45469F1: gdk_display_open (gdkdisplay-x11.c:165) ==7286== by 0x45259CC: gdk_display_open_default_libgtk_only (gdk.c:278) ==7286== by 0x4358FBE: gtk_init_check (gtkmain.c:744) ==7286== by 0x4358FF3: gtk_init (gtkmain.c:779) ==7286== by 0x804FFC1: XRE_main (nsAppRunner.cpp:1983) ==7286== by 0x804B15E: main (nsBrowserApp.cpp:61) --7286-- REDIR: 0x4916150 (operator new[](unsigned)) redirected to 0x4021A30 (operator new[](unsigned)) --7286-- Reading syms from /usr/lib/gconv/UTF-16.so (0x4DD1000) --7286-- REDIR: 0x4914BC0 (operator delete[](void*)) redirected to 0x4020990 (operator delete[](void*)) --7286-- Reading syms from /usr/lib/mozilla-firefox/components/libbrowserdirprovider.so (0x4DD5000) --7286-- Reading syms from /usr/lib/mozilla-firefox/components/libxpconnect.so (0x5118000) --7286-- Reading syms from /usr/lib/mozilla-firefox/components/libchrome.so (0x518D000) --7286-- Reading syms from /usr/lib/mozilla-firefox/components/libpref.so (0x51AE000) --7286-- Reading syms from /usr/lib/mozilla-firefox/components/libnecko.so (0x51C6000) --7286-- Reading syms from /usr/lib/mozilla-firefox/components/libi18n.so (0x5BDC000) --7286-- Reading syms from /usr/lib/mozilla-firefox/components/libuconv.so (0x5C29000) --7286-- Reading syms from /usr/lib/mozilla-firefox/components/libjar50.so (0x5D01000) --7286-- Reading syms from /usr/lib/mozilla-firefox/components/libwidget_gtk2.so (0x5D1F000) --7286-- Reading syms from /usr/lib/mozilla-firefox/libgkgfx.so (0x5D65000) --7286-- Reading syms from /usr/lib/mozilla-firefox/libgtkxtbin.so (0x4DDA000) --7286-- Reading syms from /usr/lib/libXt.so.6.0.0 (0x5DA4000) --7286-- Reading syms from /usr/lib/libSM.so.6.0.0 (0x5DF4000) --7286-- Reading syms from /usr/lib/libICE.so.6.3.0 (0x5DFD000) --7286-- Reading syms from /usr/lib/mozilla-firefox/components/libtoolkitcomps.so (0x5E15000) --7286-- Reading syms from /usr/lib/mozilla-firefox/components/libembedcomponents.so (0x5F80000) --7286-- Reading syms from /usr/lib/mozilla-firefox/components/libcaps.so (0x5FD8000) --7286-- TT/TC: initialise sector 1 --7286-- memcheck GC: 1024 nodes, 1024 survivors (100.0%) --7286-- memcheck GC: increase table size to 2048 --7286-- Reading syms from /usr/lib/mozilla-firefox/components/librdf.so (0x6217000) --7286-- Reading syms from /usr/lib/mozilla-firefox/components/libsystem-pref.so (0x5D8E000) --7286-- Reading syms from /usr/lib/mozilla-firefox/components/libtypeaheadfindsea.so (0x6257000) --7286-- Reading syms from /usr/lib/mozilla-firefox/components/libgklayout.so (0x6278000) --7286-- Reading syms from /usr/lib/mozilla-firefox/components/libimglib2.so (0x69A8000) ==7286== ==7286== Invalid write of size 1 ==7286== at 0x4022BB7: stpcpy (mc_replace_strmem.c:461) ==7286== by 0x400752F: _dl_dst_substitute (dl-load.c:277) ==7286== by 0x400766B: expand_dynamic_string_token (dl-load.c:339) ==7286== by 0x4007705: decompose_rpath (dl-load.c:566) ==7286== by 0x4007C16: cache_rpath (dl-load.c:619) ==7286== by 0x40082AC: _dl_map_object (dl-load.c:2046) ==7286== by 0x400BC05: openaux (dl-deps.c:63) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x400BE05: _dl_map_object_deps (dl-deps.c:246) ==7286== by 0x40111D0: dl_open_worker (dl-open.c:292) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x4010C43: _dl_open (dl-open.c:550) ==7286== Address 0x4C38A3D is 0 bytes after a block of size 61 alloc'd ==7286== at 0x40215E8: malloc (vg_replace_malloc.c:149) ==7286== by 0x400764F: expand_dynamic_string_token (dl-load.c:335) ==7286== by 0x4007705: decompose_rpath (dl-load.c:566) ==7286== by 0x4007C16: cache_rpath (dl-load.c:619) ==7286== by 0x40082AC: _dl_map_object (dl-load.c:2046) ==7286== by 0x400BC05: openaux (dl-deps.c:63) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x400BE05: _dl_map_object_deps (dl-deps.c:246) ==7286== by 0x40111D0: dl_open_worker (dl-open.c:292) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x4010C43: _dl_open (dl-open.c:550) ==7286== by 0x4236E3C: dlopen_doit (dlopen.c:66) ==7286== ==7286== Invalid write of size 1 ==7286== at 0x4022BC1: stpcpy (mc_replace_strmem.c:461) ==7286== by 0x400752F: _dl_dst_substitute (dl-load.c:277) ==7286== by 0x400766B: expand_dynamic_string_token (dl-load.c:339) ==7286== by 0x4007705: decompose_rpath (dl-load.c:566) ==7286== by 0x4007C16: cache_rpath (dl-load.c:619) ==7286== by 0x40082AC: _dl_map_object (dl-load.c:2046) ==7286== by 0x400BC05: openaux (dl-deps.c:63) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x400BE05: _dl_map_object_deps (dl-deps.c:246) ==7286== by 0x40111D0: dl_open_worker (dl-open.c:292) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x4010C43: _dl_open (dl-open.c:550) ==7286== Address 0x4C38A47 is 10 bytes after a block of size 61 alloc'd ==7286== at 0x40215E8: malloc (vg_replace_malloc.c:149) ==7286== by 0x400764F: expand_dynamic_string_token (dl-load.c:335) ==7286== by 0x4007705: decompose_rpath (dl-load.c:566) ==7286== by 0x4007C16: cache_rpath (dl-load.c:619) ==7286== by 0x40082AC: _dl_map_object (dl-load.c:2046) ==7286== by 0x400BC05: openaux (dl-deps.c:63) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x400BE05: _dl_map_object_deps (dl-deps.c:246) ==7286== by 0x40111D0: dl_open_worker (dl-open.c:292) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x4010C43: _dl_open (dl-open.c:550) ==7286== by 0x4236E3C: dlopen_doit (dlopen.c:66) ==7286== ==7286== Invalid write of size 1 ==7286== at 0x4007461: _dl_dst_substitute (dl-load.c:295) ==7286== by 0x400766B: expand_dynamic_string_token (dl-load.c:339) ==7286== by 0x4007705: decompose_rpath (dl-load.c:566) ==7286== by 0x4007C16: cache_rpath (dl-load.c:619) ==7286== by 0x40082AC: _dl_map_object (dl-load.c:2046) ==7286== by 0x400BC05: openaux (dl-deps.c:63) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x400BE05: _dl_map_object_deps (dl-deps.c:246) ==7286== by 0x40111D0: dl_open_worker (dl-open.c:292) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x4010C43: _dl_open (dl-open.c:550) ==7286== by 0x4236E3C: dlopen_doit (dlopen.c:66) ==7286== Address 0x4C38A47 is 10 bytes after a block of size 61 alloc'd ==7286== at 0x40215E8: malloc (vg_replace_malloc.c:149) ==7286== by 0x400764F: expand_dynamic_string_token (dl-load.c:335) ==7286== by 0x4007705: decompose_rpath (dl-load.c:566) ==7286== by 0x4007C16: cache_rpath (dl-load.c:619) ==7286== by 0x40082AC: _dl_map_object (dl-load.c:2046) ==7286== by 0x400BC05: openaux (dl-deps.c:63) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x400BE05: _dl_map_object_deps (dl-deps.c:246) ==7286== by 0x40111D0: dl_open_worker (dl-open.c:292) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x4010C43: _dl_open (dl-open.c:550) ==7286== by 0x4236E3C: dlopen_doit (dlopen.c:66) ==7286== ==7286== Invalid write of size 1 ==7286== at 0x40074E9: _dl_dst_substitute (dl-load.c:302) ==7286== by 0x400766B: expand_dynamic_string_token (dl-load.c:339) ==7286== by 0x4007705: decompose_rpath (dl-load.c:566) ==7286== by 0x4007C16: cache_rpath (dl-load.c:619) ==7286== by 0x40082AC: _dl_map_object (dl-load.c:2046) ==7286== by 0x400BC05: openaux (dl-deps.c:63) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x400BE05: _dl_map_object_deps (dl-deps.c:246) ==7286== by 0x40111D0: dl_open_worker (dl-open.c:292) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x4010C43: _dl_open (dl-open.c:550) ==7286== by 0x4236E3C: dlopen_doit (dlopen.c:66) ==7286== Address 0x4C38A58 is not stack'd, malloc'd or (recently) free'd ==7286== ==7286== Invalid read of size 1 ==7286== at 0x4007730: decompose_rpath (dl-load.c:575) ==7286== by 0x4007C16: cache_rpath (dl-load.c:619) ==7286== by 0x40082AC: _dl_map_object (dl-load.c:2046) ==7286== by 0x400BC05: openaux (dl-deps.c:63) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x400BE05: _dl_map_object_deps (dl-deps.c:246) ==7286== by 0x40111D0: dl_open_worker (dl-open.c:292) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x4010C43: _dl_open (dl-open.c:550) ==7286== by 0x4236E3C: dlopen_doit (dlopen.c:66) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x42372DB: _dlerror_run (dlerror.c:164) ==7286== Address 0x4C38A3D is 0 bytes after a block of size 61 alloc'd ==7286== at 0x40215E8: malloc (vg_replace_malloc.c:149) ==7286== by 0x400764F: expand_dynamic_string_token (dl-load.c:335) ==7286== by 0x4007705: decompose_rpath (dl-load.c:566) ==7286== by 0x4007C16: cache_rpath (dl-load.c:619) ==7286== by 0x40082AC: _dl_map_object (dl-load.c:2046) ==7286== by 0x400BC05: openaux (dl-deps.c:63) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x400BE05: _dl_map_object_deps (dl-deps.c:246) ==7286== by 0x40111D0: dl_open_worker (dl-open.c:292) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x4010C43: _dl_open (dl-open.c:550) ==7286== by 0x4236E3C: dlopen_doit (dlopen.c:66) valgrind: m_mallocfree.c:194 (get_bszB_as_is): Assertion 'bszB_lo == bszB_hi' failed. valgrind: Heap block lo/hi size mismatch: lo = 7424, hi = 0. Probably caused by overrunning/underrunning a heap block's bounds. ==7286== at 0x380160DD: report_and_quit (m_libcassert.c:136) ==7286== by 0x380163E1: vgPlain_assert_fail (m_libcassert.c:200) ==7286== by 0x3801F7A9: unlinkBlock (m_mallocfree.c:191) ==7286== by 0x38020121: vgPlain_arena_malloc (m_mallocfree.c:1055) ==7286== by 0x38001F5B: vgMemCheck_malloc (mc_malloc_wrappers.c:182) ==7286== by 0x38036744: do_client_request (scheduler.c:1158) ==7286== by 0x3803773D: vgPlain_scheduler (scheduler.c:869) ==7286== by 0x38057C87: run_a_thread_NORETURN (syswrap-linux.c:87) sched status: running_tid=1 Thread 1: status = VgTs_Runnable ==7286== at 0x40215E8: malloc (vg_replace_malloc.c:149) ==7286== by 0x4007747: decompose_rpath (dl-load.c:581) ==7286== by 0x4007C16: cache_rpath (dl-load.c:619) ==7286== by 0x40082AC: _dl_map_object (dl-load.c:2046) ==7286== by 0x400BC05: openaux (dl-deps.c:63) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x400BE05: _dl_map_object_deps (dl-deps.c:246) ==7286== by 0x40111D0: dl_open_worker (dl-open.c:292) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x4010C43: _dl_open (dl-open.c:550) ==7286== by 0x4236E3C: dlopen_doit (dlopen.c:66) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x42372DB: _dlerror_run (dlerror.c:164) ==7286== by 0x4236D73: dlopen@@GLIBC_2.1 (dlopen.c:87) ==7286== by 0x41E627A: pr_LoadLibraryByPathname (prlink.c:966) ==7286== by 0x41E63AD: PR_LoadLibrary (prlink.c:604) ==7286== by 0x415F1E4: nsLocalFile::Load(PRLibrary**) (nsLocalFileUnix.cpp:1588) ==7286== by 0x4175EB0: nsDll::Load() (xcDll.cpp:143) ==7286== by 0x4173614: nsNativeComponentLoader::GetFactory(nsID const&, char const*, char const*, nsIFactory**) (nsNativeComponentLoader.cpp:121) ==7286== by 0x4170ED4: nsFactoryEntry::GetFactory(nsIFactory**, nsComponentManagerImpl*) (nsComponentManager.h:301) ==7286== by 0x4168F36: nsComponentManagerImpl::CreateInstanceByContractID(char const*, nsISupports*, nsID const&, void**) (nsComponentManager.cpp:1976) ==7286== by 0x416B5F2: nsComponentManagerImpl::GetServiceByContractID(char const*, nsID const&, void**) (nsComponentManager.cpp:2408) ==7286== by 0x4109FBA: CallGetService(char const*, nsID const&, void**) (nsComponentManagerUtils.cpp:94) ==7286== by 0x65ABA5C: unsigned CallGetService(char const*, imgILoader**) (nsServiceManagerUtils.h:130) ==7286== by 0x65AA353: nsContentUtils::Init() (nsContentUtils.cpp:193) ==7286== by 0x632FE35: Initialize(nsIModule*) (nsLayoutModule.cpp:270) ==7286== by 0x410E701: nsGenericModule::Initialize(nsIComponentManager*) (nsGenericFactory.cpp:272) ==7286== by 0x410E9CF: nsGenericModule::GetClassObject(nsIComponentManager*, nsID const&, nsID const&, void**) (nsGenericFactory.cpp:360) ==7286== by 0x417150B: nsNativeComponentLoader::GetFactoryFromModule(nsDll*, nsID const&, nsIFactory**) (nsNativeComponentLoader.cpp:1058) ==7286== by 0x417373A: nsNativeComponentLoader::GetFactory(nsID const&, char const*, char const*, nsIFactory**) (nsNativeComponentLoader.cpp:143) ==7286== by 0x4170ED4: nsFactoryEntry::GetFactory(nsIFactory**, nsComponentManagerImpl*) (nsComponentManager.h:301) ==7286== by 0x4168D57: nsComponentManagerImpl::CreateInstance(nsID const&, nsISupports*, nsID const&, void**) (nsComponentManager.cpp:1895) ==7286== by 0x4109EF1: CallCreateInstance(nsID const&, nsISupports*, nsID const&, void**) (nsComponentManagerUtils.cpp:157) ==7286== by 0x4109F57: nsCreateInstanceByCID::operator()(nsID const&, void**) const (nsComponentManagerUtils.cpp:199) ==7286== by 0x626CB53: nsCOMPtr::assign_from_helper(nsCOMPtr_helper const&, nsID const&) (nsCOMPtr.h:1292) ==7286== by 0x6270331: nsCOMPtr::operator=(nsCOMPtr_helper const&) (nsCOMPtr.h:780) ==7286== by 0x62650D6: nsTypeAheadFindSea::Init() (nsTypeAheadFind.cpp:189) ==7286== by 0x6265394: nsTypeAheadFindSea::GetInstance() (nsTypeAheadFind.cpp:230) ==7286== by 0x6273883: nsTypeAheadFindSeaConstructor(nsISupports*, nsID const&, void**) (nsTypeAheadFindRegistration.cpp:84) ==7286== by 0x410D93D: nsGenericFactory::CreateInstance(nsISupports*, nsID const&, void**) (nsGenericFactory.cpp:79) ==7286== by 0x4168F57: nsComponentManagerImpl::CreateInstanceByContractID(char const*, nsISupports*, nsID const&, void**) (nsComponentManager.cpp:1981) ==7286== by 0x416B5F2: nsComponentManagerImpl::GetServiceByContractID(char const*, nsID const&, void**) (nsComponentManager.cpp:2408) ==7286== by 0x4109FBA: CallGetService(char const*, nsID const&, void**) (nsComponentManagerUtils.cpp:94) ==7286== by 0x410A00F: nsGetServiceByContractIDWithError::operator()(nsID const&, void**) const (nsComponentManagerUtils.cpp:288) ==7286== by 0x5FA015F: nsCOMPtr::assign_from_gs_contractid_with_error(nsGetServiceByContractIDWithError const&, nsID const&) (nsCOMPtr.h:1282) ==7286== by 0x5FA01B1: nsCOMPtr::operator=(nsGetServiceByContractIDWithError const&) (nsCOMPtr.h:771) ==7286== by 0x5F9F71B: nsAppStartupNotifier::Observe(nsISupports*, char const*, unsigned short const*) (nsAppStartupNotifier.cpp:98) ==7286== by 0x805064C: XRE_main (nsAppRunner.cpp:2203) ==7286== by 0x804B15E: main (nsBrowserApp.cpp:61) Thread 2: status = VgTs_WaitSys ==7286== at 0x49FE411: poll (poll.c:87) ==7286== by 0x41F948B: _pr_poll_with_poll (ptio.c:3877) ==7286== by 0x521CD29: nsSocketTransportService::Poll(unsigned*) (nsSocketTransportService2.cpp:359) ==7286== by 0x521CFA1: nsSocketTransportService::Run() (nsSocketTransportService2.cpp:568) ==7286== by 0x417CA83: nsThread::Main(void*) (nsThread.cpp:118) ==7286== by 0x41FE754: _pt_root (ptthread.c:220) ==7286== by 0x4228263: start_thread (pthread_create.c:261) ==7286== by 0x4A0736D: clone (in /lib/libc-2.4.so) ==7286== by 0x400D385: _dl_catch_error (dl-error.c:178) ==7286== by 0x1: ??? Note: see also the FAQ.txt in the source distribution. It contains workarounds to several common problems. If that doesn't help, please report this bug to: www.valgrind.org In the bug report, send all the above text, the valgrind version, and what Linux distro you are using. Thanks.