Bug#491351: epiphany-browser: Epiphany frooze while opening a new tab

[Josselin Mouette]

clone 491351 -1
reassign -1 mozilla-plugin-gnash
retitle -1 double free in gnash when opening a new tab in epiphany
thanks

Le jeudi 24 juillet 2008 à 11:33 +0200, Paul Menzel a écrit :
> epiphany-gecko has just frozen again.
> 
> Output on terminal:
> 
> b29a8000-b2a00000 r--p 00000000 fd:03
> 541654     /usr/share/fonts/X11/misc/12x13ja.pcf.gz

Looks like the end of the stack trace printed by the glibc when gnash
has a double-free.

So we have two issues here: the double-free in gnash, and the fact that
epiphany freezes when it happens. I’ll let the gnash maintainers handle
the former; you will need to use bug-buddy or similar software to catch
the crash when it is occuring.

As for the latter:

> (gdb) thread apply all bt full
> 
> Thread 8 (Thread 0xb5ae2b90 (LWP 13855)):
> #2  0xb7f0d46c in _pr_poll_with_poll (pds=0x9a6afb8, npds=1, 
>     timeout=4294967295) at ptio.c:3895
> #3  0xb5f68921 in nsSocketTransportService::Poll (this=0x9a6aad8, wait=1, 
>     interval=0xb5ae21a8) at nsSocketTransportService2.cpp:349
> #4  0xb5f68e16 in nsSocketTransportService::DoPollIteration (this=0x9a6aad8, 
>     wait=1) at nsSocketTransportService2.cpp:644
> #5  0xb5f690c0 in nsSocketTransportService::OnProcessNextEvent (
>     this=0x9a6aad8, thread=0x9a6b338, mayWait=1, depth=1)
>     at nsSocketTransportService2.cpp:523

> Thread 7 (Thread 0xb48ffb90 (LWP 13858)):
> #1  0xb7140342 in pthread_cond_timedwait@@GLIBC_2.3.2 ()
>    from /lib/i686/cmov/libpthread.so.0
> No symbol table info available.
> #2  0xb7f0a6ce in pt_TimedWait (cv=0x99f940c, ml=0x99f9c70, timeout=2622659)
>     at ptsynch.c:280

> Thread 6 (Thread 0xb5100b90 (LWP 13859)):
> #1  0xb7140015 in pthread_cond_wait@@GLIBC_2.3.2 ()
>    from /lib/i686/cmov/libpthread.so.0
> No symbol table info available.
> #2  0xb7f0b529 in PR_WaitCondVar (cvar=0xa6699b0, timeout=4294967295)
>     at ptsynch.c:405

> Thread 5 (Thread 0xb40feb90 (LWP 13860)):
> #1  0xb7140015 in pthread_cond_wait@@GLIBC_2.3.2 ()
>    from /lib/i686/cmov/libpthread.so.0
> #2  0xb7f0b529 in PR_WaitCondVar (cvar=0xa669b80, timeout=4294967295)
>     at ptsynch.c:405

> Thread 4 (Thread 0xb26feb90 (LWP 13863)):
> #1  0xb7140015 in pthread_cond_wait@@GLIBC_2.3.2 ()
>    from /lib/i686/cmov/libpthread.so.0
> #2  0xb7f0b529 in PR_WaitCondVar (cvar=0xb2f05fb8, timeout=4294967295)
>     at ptsynch.c:405

> Thread 3 (Thread 0xafcfeb90 (LWP 14210)):
> #0  0xb7f4e424 in __kernel_vsyscall ()
> No symbol table info available.
> #1  0xb6eb0823 in ?? () from /lib/i686/cmov/libc.so.6
> No symbol table info available.
> #2  0xb6e35d6d in ?? () from /lib/i686/cmov/libc.so.6
> No symbol table info available.
> Backtrace stopped: previous frame identical to this frame (corrupt stack?)
> 
> Thread 2 (Thread 0xb0fffb90 (LWP 14211)):
> #1  0xb7140015 in pthread_cond_wait@@GLIBC_2.3.2 ()
>    from /lib/i686/cmov/libpthread.so.0
> #2  0xb7f0b529 in PR_WaitCondVar (cvar=0xb16afd40, timeout=4294967295)
>     at ptsynch.c:405

> Thread 1 (Thread 0xb6b6d700 (LWP 13854)):
> #0  0xb7f4e424 in __kernel_vsyscall ()
> No symbol table info available.
> #1  0xb6eb0823 in ?? () from /lib/i686/cmov/libc.so.6
> No symbol table info available.
> #2  0xb6e35c51 in ?? () from /lib/i686/cmov/libc.so.6
> No symbol table info available.
> Backtrace stopped: previous frame identical to this frame (corrupt stack?)
> #0  0xb7f4e424 in __kernel_vsyscall ()

All of this looks either like a good old deadlock in xulrunner, or like
threads 1&3 have done something wrong. As the debugger seems confused
here, I will have to ask you to install libc6-dbg and try again, as it
should help gdb go up the stack (unless it is really corrupt).

> PS: Shall I add your address to CC or not?

No, thanks.

Cheers,
-- 
 .''`.
: :' :      We are debian.org. Lower your prices, surrender your code.
`. `'       We will add your hardware and software distinctiveness to
  `-        our own. Resistance is futile.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Ceci est une partie de message
	=?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e?=
Url : http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20080724/d93390f5/attachment.pgp