Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 362311 - www-client/firefox-4.0-r3 - glibc detected *** firefox: free(): invalid next size (normal): 0x09cc0158 in /usr/lib/xulrunner-2.0/libmozalloc.so(moz_free+0x1e)[0xb77e30be]
Summary: www-client/firefox-4.0-r3 - glibc detected *** firefox: free(): invalid next ...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: x86 Linux
: Normal critical with 1 vote (vote)
Assignee: Mozilla Gentoo Team
URL:
Whiteboard:
Keywords:
: 367635 (view as bug list)
Depends on:
Blocks:
 
Reported: 2011-04-06 16:08 UTC by KinG-InFeT
Modified: 2011-10-03 20:06 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
Output after crash firefox (firefox.log,24.33 KB, text/plain)
2011-04-06 16:09 UTC, KinG-InFeT
Details
other crash (other_crach_firefox.log,8.38 KB, text/plain)
2011-04-09 09:54 UTC, KinG-InFeT
Details
other debug 2 (debug,756 bytes, application/octet-stream)
2011-05-24 21:23 UTC, KinG-InFeT
Details

Note You need to log in before you can comment on or make changes to this bug.
Description KinG-InFeT 2011-04-06 16:08:41 UTC
I was just browsing the boards of various sites and suddenly crashes, after which I started firefox from terminal and I noticed the mistake and I saved the log out.

Reproducible: Sometimes

Steps to Reproduce:
1. run firefox
2. I sail with a couple of tabs open to various sites.
Actual Results:  
Close firefox and crash


Portage 2.1.9.42 (default/linux/x86/10.0/desktop, gcc-4.4.5, glibc-2.11.3-r0, 2.6.35.8 i686)
=================================================================
System uname: Linux-2.6.35.8-i686-Pentium-R-_Dual-Core_CPU_E5400_@_2.70GHz-with-gentoo-1.12.14
Timestamp of tree: Mon, 04 Apr 2011 14:45:01 +0000
app-shells/bash:     4.1_p9
dev-java/java-config: 2.1.11-r3
dev-lang/python:     2.6.6-r2, 3.1.3-r1
dev-util/cmake:      2.8.1-r2
sys-apps/baselayout: 1.12.14-r1
sys-apps/sandbox:    2.4
sys-devel/autoconf:  2.13, 2.65-r1
sys-devel/automake:  1.9.6-r3, 1.10.3, 1.11.1
sys-devel/binutils:  2.20.1-r1
sys-devel/gcc:       4.4.5
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.10
sys-devel/make:      3.81-r2
virtual/os-headers:  2.6.36.1 (sys-kernel/linux-headers)
ACCEPT_KEYWORDS="x86 ~x86"
ACCEPT_LICENSE="*"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=native -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/php/apache2-php5.3/ext-active/ /etc/php/cgi-php5.3/ext-active/ /etc/php/cli-php5.3/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-O2 -march=native -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="assume-digests binpkg-logs distlocks fixlafiles fixpackages news parallel-fetch protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch"
FFLAGS=""
GENTOO_MIRRORS="http://gentoo.osuosl.org/"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
LINGUAS="en it"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY=""
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="X a52 aac acl acpi alsa berkdb bluetooth branding bzip2 cairo cdr cli consolekit cracklib crypt cue cups cxx dbus dirac dri dts dvd dvdr emboss encode exif extras fam firefox flac fontconfig fortran gd gdbm gdu gif gpm gsm gtk iconv icu ipv6 jpeg jpeg2k lcms ldap libnotify mad mikmod misepack mng modules mp3 mp4 mpeg mudflap ncurses nls nptl nptlonly ogg opencore-amr opengl openmp pam pango pcre pdf perl png policykit ppds pppd python qt3support readline schroedinger sdl session sid sndfile speex spell sqlite ssl startup-notification static-libs svg sysfs tcpd theora threads tiff timidity tordns truetype udev unicode usb v41 v412 vdpau vorbis x264 x86 xcb xml xorg xulrunner xv xvid zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en it" PHP_TARGETS="php5-3" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="intel" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" 
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 1 KinG-InFeT 2011-04-06 16:09:31 UTC
Created attachment 268729 [details]
Output after crash firefox

output on terminal of firefox crash
Comment 2 Rafał Mużyło 2011-04-06 17:22:01 UTC
I personally have a session of about 200 tabs and haven't seen such crash.
As such, unless you can provide a reproducible way to trigger the crash, I don't see this bug getting anywhere.
Comment 3 KinG-InFeT 2011-04-06 19:11:40 UTC
Errors:
*** glibc detected *** firefox: free(): invalid next size (normal): 0x09cc0158 ***
...................

I was seeing a couple of addons for firefox on this link:
https://addons.mozilla.org/it/firefox/search/?q=twitter&cat=all&x=0&y=0
and after clicking the Power of Twitter addons I crashed 2 times.

I do not know what to say.
Comment 4 Jeroen Roovers (RETIRED) gentoo-dev 2011-04-07 16:08:14 UTC
(In reply to comment #1)
> Created attachment 268729 [details]
> Output after crash firefox
> 
> output on terminal of firefox crash

You're running firefox as root??!!?
Comment 5 KinG-InFeT 2011-04-07 16:36:44 UTC
firefox and all system using root account
Comment 6 KinG-InFeT 2011-04-09 09:53:52 UTC
other Crash
Go to this LINK: http://www.oscommerce.info/confluence/dashboard.action
and firefox crashed!
Comment 7 KinG-InFeT 2011-04-09 09:54:14 UTC
Created attachment 269123 [details]
other crash
Comment 8 KinG-InFeT 2011-04-11 17:54:29 UTC
similar bug
https://bugs.gentoo.org/show_bug.cgi?id=360619
Comment 9 KinG-InFeT 2011-04-13 16:45:57 UTC
other link 
http://internapoli-city.blogspot.com/2010/12/jackass-3dmegaupload-ita.html

crashed
Comment 10 Yu Yuwei 2011-04-19 03:15:14 UTC
well, I got crash with "fast":

*** glibc detected *** firefox: free(): invalid next size (fast): 0x00007f4b26c9ebb0 ***
======= Backtrace: =========
/lib/libc.so.6(+0x73705)[0x7f4b3cbe0705]
/lib/libc.so.6(cfree+0x6c)[0x7f4b3cbe556c]
/usr/lib/libnvidia-tls.so.270.18(+0x8bb)[0x7f4b36acb8bb]
======= Memory map: ========
00400000-0040b000 r-xp 00000000 08:03 11983                              /usr/lib64/firefox/firefox
0060a000-0060b000 r--p 0000a000 08:03 11983                              /usr/lib64/firefox/firefox
0060b000-0060c000 rw-p 0000b000 08:03 11983                              /usr/lib64/firefox/firefox
01166000-057af000 rw-p 00000000 00:00 0                                  [heap]
7f4b0c7ee000-7f4b0c7fe000 rwxp 00000000 00:00 0 
7f4b0c7fe000-7f4b0c806000 rw-p 00000000 00:00 0 
7f4b0c806000-7f4b0c816000 rwxp 00000000 00:00 0 
7f4b0c816000-7f4b0c8b0000 r--p 00000000 08:03 280833                     /usr/share/fonts/TTF/Tahoma Bold.ttf
7f4b0c8b0000-7f4b0d5cd000 r--p 00000000 08:03 151425                     /usr/share/fonts/TTF/zhongyi/simsun.ttc
7f4b0d5cd000-7f4b0d674000 r--p 00000000 08:03 280831                     /usr/share/fonts/TTF/Tahoma.ttf
7f4b0d674000-7f4b0d684000 rwxp 00000000 00:00 0 
7f4b0d684000-7f4b0d69c000 rw-p 00000000 00:00 0 
7f4b0d6a2000-7f4b0d6b2000 rwxp 00000000 00:00 0 
7f4b0d6b3000-7f4b0d6cb000 rw-p 00000000 00:00 0 
7f4b0d6cb000-7f4b0d6dd000 r--p 00000000 08:03 19702                      /usr/share/fonts/urw-fonts/n019004l.pfb
7f4b0d6dd000-7f4b0d6fd000 rwxp 00000000 00:00 0 
7f4b0d6fd000-7f4b0d705000 rw-p 00000000 00:00 0 
7f4b0d705000-7f4b0d725000 rwxp 00000000 00:00 0 
7f4b0d725000-7f4b0d73d000 rw-p 00000000 00:00 0 
7f4b0d73d000-7f4b0d74d000 rwxp 00000000 00:00 0 
7f4b0d74d000-7f4b0d755000 rw-p 00000000 00:00 0 
7f4b0d755000-7f4b0d795000 rwxp 00000000 00:00 0 
7f4b0d795000-7f4b0dba7000 rw-p 00000000 00:00 0 
7f4b0dba7000-7f4b0dba8000 ---p 00000000 00:00 0 
7f4b0dba8000-7f4b0e3a8000 rw-p 00000000 00:00 0 
7f4b0e3a8000-7f4b0e3a9000 ---p 00000000 00:00 0 
7f4b0e3a9000-7f4b0eba9000 rw-p 00000000 00:00 0 
7f4b0eba9000-7f4b0ebaa000 ---p 00000000 00:00 0 
7f4b0ebaa000-7f4b0f3aa000 rw-p 00000000 00:00 0 
7f4b0f3aa000-7f4b0f3ab000 ---p 00000000 00:00 0 
7f4b0f3ab000-7f4b0fdb4000 rw-p 00000000 00:00 0 
7f4b0fdb4000-7f4b0fdb7000 r-xp 00000000 08:03 5873                       /usr/lib64/libXss.so.1.0.0
7f4b0fdb7000-7f4b0ffb6000 ---p 00003000 08:03 5873                       /usr/lib64/libXss.so.1.0.0
7f4b0ffb6000-7f4b0ffb7000 r--p 00002000 08:03 5873                       /usr/lib64/libXss.so.1.0.0
7f4b0ffb7000-7f4b0ffb8000 rw-p 00003000 08:03 5873                       /usr/lib64/libXss.so.1.0.0
7f4b0ffb8000-7f4b101c1000 rw-p 00000000 00:00 0 
7f4b101c1000-7f4b101d6000 r--p 00000000 08:06 1180857                    /home/acevery/.mozilla/firefox/keavtzxf.acevery/extensions/firegestures@xuldev.org.xpi
7f4b101d6000-7f4b101e6000 rwxp 00000000 00:00 0 
7f4b101e6000-7f4b109ea000 rw-p 00000000 00:00 0 
7f4b109ea000-7f4b109eb000 ---p 00000000 00:00 0 
7f4b109eb000-7f4b111f3000 rw-p 00000000 00:00 0 
7f4b111f3000-7f4b11213000 rwxp 00000000 00:00 0 
7f4b11213000-7f4b11327000 r--p 00000000 08:03 280816                     /usr/share/fonts/TTF/lucida/LucidaGrande.ttf
7f4b11327000-7f4b11528000 rw-p 00000000 00:00 0 
7f4b11528000-7f4b11529000 ---p 00000000 00:00 0 
7f4b11529000-7f4b11d29000 rw-p 00000000 00:00 0 
7f4b11d29000-7f4b11d49000 rwxp 00000000 00:00 0 
7f4b11d49000-7f4b11d4e000 r-xp 00000000 08:03 802593                     /lib64/libnss_dns-2.13.so
7f4b11d4e000-7f4b11f4d000 ---p 00005000 08:03 802593                     /lib64/libnss_dns-2.13.so
7f4b11f4d000-7f4b11f4e000 r--p 00004000 08:03 802593                     /lib64/libnss_dns-2.13.so
7f4b11f4e000-7f4b11f4f000 rw-p 00005000 08:03 802593                     /lib64/libnss_dns-2.13.so
7f4b11f55000-7f4b11f5d000 rw-s 00000000 08:06 22950772                   /home/acevery/.mozilla/firefox/keavtzxf.acevery/places.sqlite-shm
7f4b11f5d000-7f4b11fbd000 rwxp 00000000 00:00 0 
7f4b11fbd000-7f4b125c0000 rw-p 00000000 00:00 0 
7f4b125c0000-7f4b125e0000 rwxp 00000000 00:00 0 
7f4b125e2000-7f4b125ea000 r--p 00000000 08:03 151185                     /usr/share/fonts/OTF/Monotype/Arial/ArialMTStd-Bold.otf
7f4b125ea000-7f4b125f0000 r--p 00000000 08:03 1204688                    /usr/share/fonts/OTF/Adobe/LucidaTypewriterStd/LucidaSansTypewriterStd.otf
7f4b125f0000-7f4b12600000 rwxp 00000000 00:00 0 
7f4b12600000-7f4b12811000 rw-p 00000000 00:00 0 
7f4b12811000-7f4b12cb9000 r--p 00000000 08:03 1218678                    /usr/share/icons/hicolor/icon-theme.cache
7f4b12cb9000-7f4b162b4000 r--p 00000000 08:03 1185964                    /usr/share/icons/gnome/icon-theme.cache
7f4b162b4000-7f4b166b4000 r--p 00000000 08:03 550783                     /usr/share/icons/glass-icons/icon-theme.cache
7f4b166b4000-7f4b166b5000 ---p 00000000 00:00 0 
7f4b166b5000-7f4b16eb5000 rw-p 00000000 00:00 0 
7f4b16eb5000-7f4b16f27000 r--p 00000000 08:06 23337025                   /home/acevery/.mozilla/firefox/keavtzxf.acevery/extensions/sroussey@illumination-for-developers.com/chrome/Illumination.jar
7f4b16f27000-7f4b1706a000 r--p 00000000 08:06 24118217                   /home/acevery/.mozilla/firefox/keavtzxf.acevery/extensions/firebug@software.joehewitt.com.xpi
7f4b1706a000-7f4b1706b000 ---p 00000000 00:00 0 
7f4b1706b000-7f4b17d6e000 rw-p 00000000 00:00 0 
7f4b17d6e000-7f4b17d7e000 rwxp 00000000 00:00 0 
7f4b17d7e000-7f4b18010000 rw-p 00000000 00:00 0 
7f4b18010000-7f4b1809d000 r--p 00000000 08:06 24118214                   /home/acevery/.mozilla/firefox/keavtzxf.acevery/extensions/vimperator@mozdev.org.xpi
7f4b1809d000-7f4b180b5000 r--p 00000000 08:06 1969265                    /home/acevery/.mozilla/firefox/keavtzxf.acevery/extensions/{c4dc572a-3295-40eb-b30f-b54aa4cdc4b7}/chrome/wmlbrowser.jar
7f4b180b5000-7f4b180bd000 r--p 00000000 08:06 9961927                    /home/acevery/.mozilla/firefox/keavtzxf.acevery/extensions/itsalltext@docwhat.gerf.org/chrome/content.jar
7f4b180bd000-7f4b1833a000 rw-p 00000000 00:00 0 
7f4b1833a000-7f4b1835c000 r--p 00000000 08:06 23204448                   /home/acevery/.mozilla/firefox/keavtzxf.acevery/extensions/{53A03D43-5363-4669-8190-99061B2DEBA5}.xpi
7f4b1835c000-7f4b1837e000 r--p 00000000 08:06 1969218                    /home/acevery/.mozilla/firefox/keavtzxf.acevery/extensions/{e968fc70-8f95-4ab9-9e79-304de2a71ee1}/chrome/useragentswitcher.jar
7f4b1837e000-7f4b185c2000 r--p 00000000 08:06 1969275                    /home/acevery/.mozilla/firefox/keavtzxf.acevery/extensions/{c45c406e-ab73-11d8-be73-000a95be3b12}/chrome/webdeveloper.jar^C
Comment 11 KinG-InFeT 2011-04-19 13:46:33 UTC
on which website is the crash?
Comment 12 Yu Yuwei 2011-04-20 00:18:43 UTC
(In reply to comment #11)
> on which website is the crash?

http://bbs.gfan.com/forum-339-1.html

cause this crash, thanks.
Comment 13 Yu Yuwei 2011-04-20 00:19:48 UTC
I emerge -e world, and no help.
Comment 14 KinG-InFeT 2011-04-20 11:30:55 UTC
this url: http://bbs.gfan.com/forum-339-1.html
NOT crash
Comment 15 Yu Yuwei 2011-04-21 01:13:13 UTC
I emerge -DNu world today, and remerge xulrunner-2.0-r1 and firefox-4.0-r3 it 

doesn't crash now ...

the addons I changed is Vimperator -> Pentadactyl.
Comment 16 KinG-InFeT 2011-04-23 22:00:02 UTC
with web site: http://msdn.microsoft.com/en-us/ms752872.aspx

Output Firefox consol:

KinG-InFeT ~ $ firefox
Segmentation fault

:S
Comment 17 KinG-InFeT 2011-04-30 12:39:40 UTC
upgrade firefox version 4.0 to 4.0.1 for many bugs
Comment 18 KinG-InFeT 2011-05-09 15:09:22 UTC
crash with this url
 http://www.oscommerce.info/confluence/dashboard.action

with firefox v4.0.1
Comment 20 Jory A. Pratt gentoo-dev 2011-05-17 11:40:38 UTC
(In reply to comment #19)
> other link to crash
> http://social.msdn.microsoft.com/Forums/en-US/lightswitchgeneral/thread/0b067219-791d-4219-b000-6e1f0506cd43
> 
> with firefox 4.0.1

Enough is enough, your not adding a single thing to the bug that is useful or helpful in resolving the issue. If you can provide something useful feel free to post but do not keep spamming our inboxes with the same useless data over and over.
Comment 21 Jory A. Pratt gentoo-dev 2011-05-17 11:45:34 UTC
*** Bug 367635 has been marked as a duplicate of this bug. ***
Comment 22 Aurelien Minet 2011-05-18 13:04:51 UTC
I found that emerging net-libs/xulrunner-2.0.1-r1 with USE=debug doesn't make firefox segfaulting while opening usually problematic URLs
Comment 23 KinG-InFeT 2011-05-18 20:46:23 UTC
is the segmentation fault is resolved but net-libs/xulrunner-2.0.1-r1 alll'apertura links still filled with crashes firefox 4.0.1-r1 and xurlunner 2.0.1-r1
Comment 24 Jacek Sowiński 2011-05-24 20:23:39 UTC
(In reply to comment #22)
> I found that emerging net-libs/xulrunner-2.0.1-r1 with USE=debug doesn't make
> firefox segfaulting while opening uzualny problematic URLs

Same here. Problems disappeared after rebuilding net-libs/xulrunner-2.0.1-r1 with USE=debug and rebuilding www-client/firefox-4.0.1-r1.
Comment 25 KinG-InFeT 2011-05-24 21:23:17 UTC
rebuilter firefox 4.0.1 with USE = debug and this link:
http://msdn.microsoft.com/en-us/ms752872.aspx

debug output: 
root@KinG-InFeT ~ $ firefox
###!!! ASSERTION: nsPrivateBrowsingServiceWrapper not thread-safe: '_mOwningThread.GetThread() == PR_GetCurrentThread()', file nsPrivateBrowsingServiceWrapper.cpp, line 52
###!!! ASSERTION: nsPrivateBrowsingServiceWrapper not thread-safe: '_mOwningThread.GetThread() == PR_GetCurrentThread()', file nsPrivateBrowsingServiceWrapper.cpp, line 52
###!!! ASSERTION: nsPrivateBrowsingServiceWrapper not thread-safe: '_mOwningThread.GetThread() == PR_GetCurrentThread()', file nsPrivateBrowsingServiceWrapper.cpp, line 52
###!!! ASSERTION: nsPrivateBrowsingServiceWrapper not thread-safe: '_mOwningThread.GetThread() == PR_GetCurrentThread()', file nsPrivateBrowsingServiceWrapper.cpp, line 52
Segmentation fault
root@KinG-InFeT ~ $
Comment 26 KinG-InFeT 2011-05-24 21:23:38 UTC
Created attachment 274543 [details]
other debug 2
Comment 27 KinG-InFeT 2011-09-19 19:02:27 UTC
not crash with firefox v6
Comment 28 KinG-InFeT 2011-10-03 20:06:13 UTC
fixed in firefox v 7.0.1