Package: pango-graphite; Maintainer for pango-graphite is Daniel Glassey <wdg@debian.org>; Source for pango-graphite is src:pango-graphite (PTS, buildd, popcon).
Reported by: Axel Beckert <abe@debian.org>
Date: Mon, 8 Sep 2008 14:21:01 UTC
Severity: critical
Tags: patch
Merged with 471642, 476089, 479153
Fixed in version pango-graphite/0.9.3-0.1
Done: Arand Nash <ienorand@gmail.com>
Bug is archived. No further changes may be made.
View this report as an mbox folder, status mbox, maintainer mbox
Report forwarded to debian-bugs-dist@lists.debian.org, Axel Beckert <abe@noone.org>, Mike Hommey <glandium@debian.org>:
Bug#498258; Package xulrunner-1.9.
(full text, mbox, link).
Acknowledgement sent to Axel Beckert <abe@noone.org>:
New Bug report received and forwarded. Copy sent to Axel Beckert <abe@noone.org>, Mike Hommey <glandium@debian.org>.
(full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
Package: xulrunner-1.9
Version: 1.9.0.1-1
Severity: important
On amd64 conkeror, kazehakase-gecko as well as iceweasel crash shortly
after startup on about 9 out of 10 starts. Sometimes it gets a
"xulrunner-bin: double free or corruption", sometimes it just
segfaults, so it maybe two different issues, but both appearing for
about one week or so. The conkeror segfaults often happen if you just
leave the window open and idling for more than half a minute.
On i386 at least conkeror (same version of conkeror and xulrunner)
works fine.
gdb on conkeror trying to login on identi.ca via openid gave the
following SIGABRT:
$ LD_LIBRARY_PATH=/usr/lib/xulrunner-1.9 gdb /usr/lib/xulrunner-1.9/xulrunner-bin
GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu"...
(gdb) set args /usr/share/conkeror/application.ini
(gdb) r
Starting program: /usr/lib/xulrunner-1.9/xulrunner-bin /usr/share/conkeror/application.ini
[Thread debugging using libthread_db enabled]
[New Thread 0x7f8ec5cf5780 (LWP 19239)]
[New Thread 0x410e9950 (LWP 19245)]
[New Thread 0x418ea950 (LWP 19246)]
[New Thread 0x420eb950 (LWP 19247)]
[New Thread 0x428ec950 (LWP 19248)]
[Thread 0x428ec950 (LWP 19248) exited]
[Thread 0x420eb950 (LWP 19247) exited]
[New Thread 0x428ec950 (LWP 19249)]
watch:accessibility.:browsewithcaret
[New Thread 0x420eb950 (LWP 19250)]
[New Thread 0x430ed950 (LWP 19251)]
** (xulrunner-bin:19239): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:19239): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:19239): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:19239): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:19239): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:19239): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:19239): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:19239): WARNING **: Exception in gr::RangeSegment
[New Thread 0x438ee950 (LWP 19313)]
[Thread 0x438ee950 (LWP 19313) exited]
[New Thread 0x438ee950 (LWP 19314)]
[New Thread 0x440ef950 (LWP 19315)]
*** glibc detected *** /usr/lib/xulrunner-1.9/xulrunner-bin: double free or corruption (!prev): 0x0000000002da86d0 ***
======= Backtrace: =========
/lib/libc.so.6[0x7f8ec3d3c968]
/lib/libc.so.6(cfree+0x76)[0x7f8ec3d3ea76]
/usr/lib/libpango-1.0.so.0(pango_glyph_string_free+0x12)[0x7f8ec1a6e7c2]
/usr/lib/xulrunner-1.9/libxul.so(_ZN17gfxPangoFontGroup24CreateGlyphRunsItemizingEP10gfxTextRunPKcjj+0x2a3)[0x7f8ec53038f1]
/usr/lib/xulrunner-1.9/libxul.so(_ZN17gfxPangoFontGroup11MakeTextRunEPKtjPKN17gfxTextRunFactory10ParametersEj+0x11e)[0x7f8ec5303bf8]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec5300040]
/usr/lib/xulrunner-1.9/libxul.so(_ZN15gfxTextRunCache11MakeTextRunEPKtjP12gfxFontGroupP10gfxContextjj+0x39)[0x7f8ec52fec2b]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec52375fe]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec5236a3e]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec52eb806]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4ceb34c]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4ddb53a]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4ddb597]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4ddb5bf]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4dced87]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4dce0ef]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4dced87]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4dce0ef]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4dced87]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4dce0ef]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4dd0589]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4dccfdb]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4dcc8fd]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4dd1a70]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4dccfdb]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4dcc8fd]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4dce357]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4d0f7cb]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4d553c6]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4cf205b]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4cf556f]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4cf56a2]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec4d21dca]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec52ca86e]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec52a037e]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec522487d]
/usr/lib/xulrunner-1.9/libxul.so[0x7f8ec5106f71]
/usr/lib/xulrunner-1.9/libxul.so(XRE_main+0x1daf)[0x7f8ec4b91ae9]
/usr/lib/xulrunner-1.9/xulrunner-bin[0x4023bb]
/lib/libc.so.6(__libc_start_main+0xe6)[0x7f8ec3ce71a6]
/usr/lib/xulrunner-1.9/xulrunner-bin[0x401e89]
======= Memory map: ========
00400000-00409000 r-xp 00000000 fe:00 1556934 /usr/lib/xulrunner-1.9/xulrunner-bin
00609000-0060a000 rw-p 00009000 fe:00 1556934 /usr/lib/xulrunner-1.9/xulrunner-bin
0173d000-02faa000 rw-p 0173d000 00:00 0 [heap]
408e9000-408ea000 ---p 408e9000 00:00 0
408ea000-410ea000 rw-p 408ea000 00:00 0
410ea000-410eb000 ---p 410ea000 00:00 0
410eb000-418eb000 rw-p 410eb000 00:00 0
418eb000-418ec000 ---p 418eb000 00:00 0
418ec000-420ec000 rw-p 418ec000 00:00 0
420ec000-420ed000 ---p 420ec000 00:00 0
420ed000-428ed000 rw-p 420ed000 00:00 0
428ed000-428ee000 ---p 428ed000 00:00 0
428ee000-430ee000 rw-p 428ee000 00:00 0
430ee000-430ef000 ---p 430ee000 00:00 0
430ef000-438ef000 rw-p 430ef000 00:00 0
438ef000-438f0000 ---p 438ef000 00:00 0
438f0000-440f0000 rw-p 438f0000 00:00 0
7f8eb0000000-7f8eb0021000 rw-p 7f8eb0000000 00:00 0
7f8eb0021000-7f8eb4000000 ---p 7f8eb0021000 00:00 0
7f8eb4d30000-7f8eb4d34000 r-xp 00000000 08:02 68332 /lib/libnss_dns-2.7.so
7f8eb4d34000-7f8eb4f33000 ---p 00004000 08:02 68332 /lib/libnss_dns-2.7.so
7f8eb4f33000-7f8eb4f35000 rw-p 00003000 08:02 68332 /lib/libnss_dns-2.7.so
7f8eb4f35000-7f8eb4f37000 r-xp 00000000 08:02 68812 /lib/libnss_mdns4_minimal.so.2
7f8eb4f37000-7f8eb5136000 ---p 00002000 08:02 68812 /lib/libnss_mdns4_minimal.so.2
7f8eb5136000-7f8eb5137000 rw-p 00001000 08:02 68812 /lib/libnss_mdns4_minimal.so.2
7f8eb5162000-7f8eb5171000 r--p 00000000 fe:00 132899 /usr/share/fonts/truetype/ttf-bitstream-vera/VeraBd.ttf
7f8eb5171000-7f8eb517d000 r--p 00000000 fe:00 132902 /usr/share/fonts/truetype/ttf-bitstream-vera/VeraMoBd.ttf
7f8eb517d000-7f8eb52de000 r--p 00000000 fe:00 1135576 /usr/share/fonts/truetype/ttf-sil-charis/CharisSILB.ttf
7f8eb52de000-7f8eb52ed000 r--p 00000000 fe:00 132906 /usr/share/fonts/truetype/ttf-bitstream-vera/VeraSeBd.ttf
7f8eb52ed000-7f8eb52fa000 r-xp 00000000 fe:00 1556973 /usr/lib/xulrunner-1.9/components/libimgicon.so
7f8eb52fa000-7f8eb54f9000 ---p 0000d000 fe:00 1556973 /usr/lib/xulrunner-1.9/components/libimgicon.so
7f8eb54f9000-7f8eb54fb000 rw-p 0000c000 fe:00 1556973 /usr/lib/xulrunner-1.9/components/libimgicon.so
7f8eb54fb000-7f8eb5663000 r--p 00000000 fe:00 1135575 /usr/share/fonts/truetype/ttf-sil-charis/CharisSILR.ttf
7f8eb5663000-7f8eb5665000 r-xp 00000000 fe:00 1459614 /usr/lib/pango/1.6.0/modules/pango-basic-fc.so
7f8eb5665000-7f8eb5864000 ---p 00002000 fe:00 1459614 /usr/lib/pango/1.6.0/modules/pango-basic-fc.so
7f8eb5864000-7f8eb5865000 rw-p 00001000 fe:00 1459614 /usr/lib/pango/1.6.0/modules/pango-basic-fc.so
7f8eb5865000-7f8eb58c0000 r-xp 00000000 fe:00 2326968 /usr/lib/libgraphite.so.3.0.0
7f8eb58c0000-7f8eb5ac0000 ---p 0005b000 fe:00 2326968 /usr/lib/libgraphite.so.3.0.0
7f8eb5ac0000-7f8eb5ac3000 rw-p 0005b000 fe:00 2326968 /usr/lib/libgraphite.so.3.0.0
7f8eb5ac3000-7f8eb5acf000 r-xp 00000000 fe:00 1524672 /usr/lib/pango/1.6.0/modules/graphite/pango-graphite.so
7f8eb5acf000-7f8
Program received signal SIGABRT, Aborted.
[Switching to Thread 0x7f8ec5cf5780 (LWP 19239)]
0x00007f8ec3cfaef5 in raise () from /lib/libc.so.6
(gdb) bt
#0 0x00007f8ec3cfaef5 in raise () from /lib/libc.so.6
#1 0x00007f8ec3cfc413 in abort () from /lib/libc.so.6
#2 0x00007f8ec3d373e8 in ?? () from /lib/libc.so.6
#3 0x00007f8ec3d3c968 in ?? () from /lib/libc.so.6
#4 0x00007f8ec3d3ea76 in free () from /lib/libc.so.6
#5 0x00007f8ec1a6e7c2 in pango_glyph_string_free (string=0x2f23b40) at /build/buildd/pango1.0-1.20.5/pango/glyphstring.c:135
#6 0x00007f8ec53038f1 in gfxPangoFontGroup::CreateGlyphRunsItemizing (this=0x2821f70, aTextRun=0x1d44fd0, aUTF8=0x7fffcde453e0 "?200? Looking up identi.ca?200?", aUTF8Length=46366352, aUTF8HeaderLen=3) at gfxPangoFonts.cpp:1697
#7 0x00007f8ec5303bf8 in gfxPangoFontGroup::MakeTextRun (this=0x2821f70, aString=0x7fffcde459b0, aLength=22, aParams=0x7fffcde45b40, aFlags=1) at gfxPangoFonts.cpp:1142
#8 0x00007f8ec5300040 in TextRunWordCache::MakeTextRun (this=0x1ac4f40, aText=0x201b408, aLength=21, aFontGroup=0x2821f70, aParams=0x7fffcde45bf0, aFlags=0) at gfxTextRunWordCache.cpp:532
#9 0x00007f8ec52fec2b in gfxTextRunCache::MakeTextRun (aText=0x206, aLength=19239, aFontGroup=0x6, aRefContext=0x8, aAppUnitsPerDevUnit=<value optimized out>, aFlags=0) at gfxTextRunCache.cpp:89
#10 0x00007f8ec52375fe in AutoTextRun (this=0x7fffcde45c70, aMetrics=0x2938ea0, aRC=<value optimized out>, aString=0x201b408, aLength=21) at nsThebesFontMetrics.h:168
#11 0x00007f8ec5236a3e in nsThebesFontMetrics::GetWidth (this=0x8, aString=<value optimized out>, aLength=21, aWidth=@0x7fffcde45cc4, aFontID=<value optimized out>, aContext=0x6) at nsThebesFontMetrics.cpp:330
#12 0x00007f8ec52eb806 in nsRenderingContextImpl::GetWidth (this=0x21009f0, aString=0x201b408, aLength=21, aWidth=@0x7fffcde45d40, aFontID=<value optimized out>) at nsRenderingContextImpl.cpp:184
#13 0x00007f8ec4ceb34c in nsLayoutUtils::GetStringWidth (aFrame=0x28f4858, aContext=0x21009f0, aString=0x201b408, aLength=21) at nsLayoutUtils.cpp:2302
#14 0x00007f8ec4ddb53a in nsTextBoxFrame::GetTextSize (this=0x28f4858, aPresContext=<value optimized out>, aRenderingContext=@0x21009f0, aString=@0x28f48a0, aSize=@0x7fffcde45dd0, aAscent=@0x28f48ec) at nsTextBoxFrame.cpp:912
#15 0x00007f8ec4ddb597 in nsTextBoxFrame::CalcTextSize (this=0x4b27, aBoxLayoutState=<value optimized out>) at nsTextBoxFrame.cpp:926
#16 0x00007f8ec4ddb5bf in nsTextBoxFrame::GetBoxAscent (this=0x4b27, aBoxLayoutState=@0x4b27) at nsTextBoxFrame.cpp:974
#17 0x00007f8ec4dced87 in nsSprocketLayout::GetAscent (this=<value optimized out>, aBox=<value optimized out>, aState=@0x7fffcde46330) at nsSprocketLayout.cpp:1525
#18 0x00007f8ec4dce0ef in nsBoxFrame::GetBoxAscent (this=0x28f4620, aBoxLayoutState=@0x7fffcde46330) at nsBoxFrame.cpp:844
#19 0x00007f8ec4dced87 in nsSprocketLayout::GetAscent (this=<value optimized out>, aBox=<value optimized out>, aState=@0x7fffcde46330) at nsSprocketLayout.cpp:1525
#20 0x00007f8ec4dce0ef in nsBoxFrame::GetBoxAscent (this=0x28f3e50, aBoxLayoutState=@0x7fffcde46330) at nsBoxFrame.cpp:844
#21 0x00007f8ec4dced87 in nsSprocketLayout::GetAscent (this=<value optimized out>, aBox=<value optimized out>, aState=@0x7fffcde46330) at nsSprocketLayout.cpp:1525
#22 0x00007f8ec4dce0ef in nsBoxFrame::GetBoxAscent (this=0x25a2868, aBoxLayoutState=@0x7fffcde46330) at nsBoxFrame.cpp:844
#23 0x00007f8ec4dd0589 in nsSprocketLayout::Layout (this=0x26be810, aBox=0x25a2868, aState=@0x7fffcde46330) at nsSprocketLayout.cpp:244
#24 0x00007f8ec4dccfdb in nsBoxFrame::DoLayout (this=0xffffffffffffffff, aState=@0x7fffcde46330) at nsBoxFrame.cpp:946
#25 0x00007f8ec4dcc8fd in nsIFrame::Layout (this=0x25a2868, aState=@0x7fffcde46330) at nsBox.cpp:561
#26 0x00007f8ec4dd1a70 in nsStackLayout::Layout (this=<value optimized out>, aBox=0x25a2348, aState=@0x7fffcde46330) at nsStackLayout.cpp:288
#27 0x00007f8ec4dccfdb in nsBoxFrame::DoLayout (this=0xffffffffffffffff, aState=@0x7fffcde46330) at nsBoxFrame.cpp:946
#28 0x00007f8ec4dcc8fd in nsIFrame::Layout (this=0x25a2348, aState=@0x7fffcde46330) at nsBox.cpp:561
#29 0x00007f8ec4dce357 in nsBoxFrame::Reflow (this=0x25a2348, aPresContext=<value optimized out>, aDesiredSize=@0x7fffcde46690, aReflowState=@0x7fffcde46590, aStatus=@0x7fffcde4688c) at nsBoxFrame.cpp:757
#30 0x00007f8ec4d0f7cb in nsContainerFrame::ReflowChild (this=<value optimized out>, aKidFrame=0x25a2348, aPresContext=0x2597c10, aDesiredSize=@0x7fffcde46690, aReflowState=@0x7fffcde46590, aX=0, aY=0, aFlags=0,
aStatus=@0x7fffcde4688c, aTracker=0x0) at nsContainerFrame.cpp:771
#31 0x00007f8ec4d553c6 in ViewportFrame::Reflow (this=0x25a2250, aPresContext=0x2597c10, aDesiredSize=@0x7fffcde46830, aReflowState=@0x7fffcde46730, aStatus=@0x7fffcde4688c) at nsViewportFrame.cpp:286
#32 0x00007f8ec4cf205b in PresShell::DoReflow (this=0x25a3940, target=0x25a2250) at nsPresShell.cpp:6280
#33 0x00007f8ec4cf556f in PresShell::ProcessReflowCommands (this=0x25a3940, aInterruptible=0) at nsPresShell.cpp:6386
#34 0x00007f8ec4cf56a2 in PresShell::DoFlushPendingNotifications (this=0x25a3940, aType=Flush_Layout, aInterruptibleReflow=0) at nsPresShell.cpp:4574
#35 0x00007f8ec4d21dca in nsGfxScrollFrameInner::AsyncScrollPortEvent::Run (this=0x1e126e0) at nsGfxScrollFrame.cpp:1930
#36 0x00007f8ec52ca86e in nsThread::ProcessNextEvent (this=0x179ebe0, mayWait=1, result=0x7fffcde469ac) at nsThread.cpp:510
#37 0x00007f8ec52a037e in NS_ProcessNextEvent_P (thread=0x4b27, mayWait=1) at nsThreadUtils.cpp:230
#38 0x00007f8ec522487d in nsBaseAppShellntime
As another example a segfault which occurred when I just tried to load
http://identi.ca/xtaran/all at start (pressing "g", entering the URL
and pressing enter):
$ LD_LIBRARY_PATH=/usr/lib/xulrunner-1.9 gdb /usr/lib/xulrunner-1.9/xulrunner-bin
GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu"...
(gdb) set args /usr/share/conkeror/application.ini
(gdb) r
Starting program: /usr/lib/xulrunner-1.9/xulrunner-bin /usr/share/conkeror/application.ini
[Thread debugging using libthread_db enabled]
[New Thread 0x7fd7f1368780 (LWP 21067)]
[New Thread 0x413a8950 (LWP 21073)]
[New Thread 0x41ba9950 (LWP 21074)]
[New Thread 0x426b3950 (LWP 21075)]
[Thread 0x426b3950 (LWP 21075) exited]
[New Thread 0x42eb4950 (LWP 21076)]
[Thread 0x42eb4950 (LWP 21076) exited]
[New Thread 0x42eb4950 (LWP 21077)]
watch:accessibility.:browsewithcaret
[New Thread 0x426b3950 (LWP 21078)]
[New Thread 0x40968950 (LWP 21079)]
** (xulrunner-bin:21067): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:21067): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:21067): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:21067): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:21067): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:21067): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:21067): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:21067): WARNING **: Exception in gr::RangeSegment
[New Thread 0x436b5950 (LWP 21083)]
[New Thread 0x43eb6950 (LWP 21084)]
[New Thread 0x446b7950 (LWP 21085)]
[Thread 0x436b5950 (LWP 21083) exited]
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fd7f1368780 (LWP 21067)]
0x00007fd7e1341e8c in graphite_PangoGlyphString () from /usr/lib/pango/1.6.0/modules/graphite/pango-graphite.so
(gdb) bt
#0 0x00007fd7e1341e8c in graphite_PangoGlyphString () from /usr/lib/pango/1.6.0/modules/graphite/pango-graphite.so
#1 0x00007fd7ed0f852a in pango_shape (text=0x7ffff94b7a58 "?200?", length=3, analysis=0x218f7c0, glyphs=0x7fd7ef68a9e0) at /build/buildd/pango1.0-1.20.5/pango/shape.c:55
#2 0x00007fd7f097684d in gfxPangoFontGroup::CreateGlyphRunsItemizing (this=0x1ef5b60, aTextRun=0x209be80, aUTF8=0x7ffff94b7a40 "?200? Looking up identi.ca?200?", aUTF8Length=<value optimized out>, aUTF8HeaderLen=3)
at gfxPangoFonts.cpp:1687
#3 0x00007fd7f0976bf8 in gfxPangoFontGroup::MakeTextRun (this=0x1ef5b60, aString=0x7ffff94b8010, aLength=22, aParams=0x7ffff94b81a0, aFlags=1) at gfxPangoFonts.cpp:1142
#4 0x00007fd7f0973040 in TextRunWordCache::MakeTextRun (this=0x1198f40, aText=0x2708268, aLength=21, aFontGroup=0x1ef5b60, aParams=0x7ffff94b8250, aFlags=0) at gfxTextRunWordCache.cpp:532
#5 0x00007fd7f0971c2b in gfxTextRunCache::MakeTextRun (aText=0x7fd7ebbe3fe0, aLength=4014315632, aFontGroup=0x31, aRefContext=0x1, aAppUnitsPerDevUnit=<value optimized out>, aFlags=4016613856) at gfxTextRunCache.cpp:89
#6 0x00007fd7f08aa5fe in AutoTextRun (this=0x7ffff94b82d0, aMetrics=0x1ef5ae0, aRC=<value optimized out>, aString=0x2708268, aLength=21) at nsThebesFontMetrics.h:168
#7 0x00007fd7f08a9a3e in nsThebesFontMetrics::GetWidth (this=0x1, aString=<value optimized out>, aLength=21, aWidth=@0x7ffff94b8324, aFontID=<value optimized out>, aContext=0x31) at nsThebesFontMetrics.cpp:330
#8 0x00007fd7f095e806 in nsRenderingContextImpl::GetWidth (this=0x27081c0, aString=0x2708268, aLength=21, aWidth=@0x7ffff94b83a0, aFontID=<value optimized out>) at nsRenderingContextImpl.cpp:184
#9 0x00007fd7f035e34c in nsLayoutUtils::GetStringWidth (aFrame=0x1fa4858, aContext=0x27081c0, aString=0x2708268, aLength=21) at nsLayoutUtils.cpp:2302
#10 0x00007fd7f044e53a in nsTextBoxFrame::GetTextSize (this=0x1fa4858, aPresContext=<value optimized out>, aRenderingContext=@0x27081c0, aString=@0x1fa48a0, aSize=@0x7ffff94b8430, aAscent=@0x1fa48ec) at nsTextBoxFrame.cpp:912
#11 0x00007fd7f044e597 in nsTextBoxFrame::CalcTextSize (this=0x2700970, aBoxLayoutState=<value optimized out>) at nsTextBoxFrame.cpp:926
#12 0x00007fd7f044e5bf in nsTextBoxFrame::GetBoxAscent (this=0x2700970, aBoxLayoutState=@0x7fd7ef459870) at nsTextBoxFrame.cpp:974
#13 0x00007fd7f0441d87 in nsSprocketLayout::GetAscent (this=<value optimized out>, aBox=<value optimized out>, aState=@0x7ffff94b8990) at nsSprocketLayout.cpp:1525
#14 0x00007fd7f04410ef in nsBoxFrame::GetBoxAscent (this=0x1fa4620, aBoxLayoutState=@0x7ffff94b8990) at nsBoxFrame.cpp:844
#15 0x00007fd7f0441d87 in nsSprocketLayout::GetAscent (this=<value optimized out>, aBox=<value optimized out>, aState=@0x7ffff94b8990) at nsSprocketLayout.cpp:1525
#16 0x00007fd7f04410ef in nsBoxFrame::GetBoxAscent (this=0x1fa3e50, aBoxLayoutState=@0x7ffff94b8990) at nsBoxFrame.cpp:844
#17 0x00007fd7f0441d87 in nsSprocketLayout::GetAscent (this=<value optimized out>, aBox=<value optimized out>, aState=@0x7ffff94b8990) at nsSprocketLayout.cpp:1525
#18 0x00007fd7f04410ef in nsBoxFrame::GetBoxAscent (this=0x1c5e4f8, aBoxLayoutState=@0x7ffff94b8990) at nsBoxFrame.cpp:844
#19 0x00007fd7f0443589 in nsSprocketLayout::Layout (this=0x1d92860, aBox=0x1c5e4f8, aState=@0x7ffff94b8990) at nsSprocketLayout.cpp:244
#20 0x00007fd7f043ffdb in nsBoxFrame::DoLayout (this=0x0, aState=@0x7ffff94b8990) at nsBoxFrame.cpp:946
#21 0x00007fd7f043f8fd in nsIFrame::Layout (this=0x1c5e4f8, aState=@0x7ffff94b8990) at nsBox.cpp:561
#22 0x00007fd7f0444a70 in nsStackLayout::Layout (this=<value optimized out>, aBox=0x1c5dfd8, aState=@0x7ffff94b8990) at nsStackLayout.cpp:288
#23 0x00007fd7f043ffdb in nsBoxFrame::DoLayout (this=0x0, aState=@0x7ffff94b8990) at nsBoxFrame.cpp:946
#24 0x00007fd7f043f8fd in nsIFrame::Layout (this=0x1c5dfd8, aState=@0x7ffff94b8990) at nsBox.cpp:561
#25 0x00007fd7f0441357 in nsBoxFrame::Reflow (this=0x1c5dfd8, aPresContext=<value optimized out>, aDesiredSize=@0x7ffff94b8cf0, aReflowState=@0x7ffff94b8bf0, aStatus=@0x7ffff94b8eec) at nsBoxFrame.cpp:757
#26 0x00007fd7f03827cb in nsContainerFrame::ReflowChild (this=<value optimized out>, aKidFrame=0x1c5dfd8, aPresContext=0x1d74ee0, aDesiredSize=@0x7ffff94b8cf0, aReflowState=@0x7ffff94b8bf0, aX=0, aY=0, aFlags=0,
aStatus=@0x7ffff94b8eec, aTracker=0x0) at nsContainerFrame.cpp:771
#27 0x00007fd7f03c83c6 in ViewportFrame::Reflow (this=0x1c5dee0, aPresContext=0x1d74ee0, aDesiredSize=@0x7ffff94b8e90, aReflowState=@0x7ffff94b8d90, aStatus=@0x7ffff94b8eec) at nsViewportFrame.cpp:286
#28 0x00007fd7f036505b in PresShell::DoReflow (this=0x1c5b760, target=0x1c5dee0) at nsPresShell.cpp:6280
#29 0x00007fd7f036856f in PresShell::ProcessReflowCommands (this=0x1c5b760, aInterruptible=1) at nsPresShell.cpp:6386
#30 0x00007fd7f03686a2 in PresShell::DoFlushPendingNotifications (this=0x1c5b760, aType=Flush_Layout, aInterruptibleReflow=1) at nsPresShell.cpp:4574
#31 0x00007fd7f0368722 in PresShell::ReflowEvent::Run (this=<value optimized out>) at nsPresShell.cpp:6145
#32 0x00007fd7f093d86e in nsThread::ProcessNextEvent (this=0xe72be0, mayWait=1, result=0x7ffff94b901c) at nsThread.cpp:510
#33 0x00007fd7f091337e in NS_ProcessNextEvent_P (thread=0x2700970, mayWait=1) at nsThreadUtils.cpp:230
#34 0x00007fd7f089787d in nsBaseAppShell::Run (this=0xf01670) at nsBaseAppShell.cpp:170
#35 0x00007fd7f0779f71 in nsAppStartup::Run (this=0xf94a10) at nsAppStartup.cpp:181
#36 0x00007fd7f0204ae9 in XRE_main (argc=<value optimized out>, argv=<value optimized out>, aAppData=<value optimized out>) at nsAppRunner.cpp:3182
#37 0x00000000004023bb in main (argc=1, argv=0x7ffff94b9cc0) at nsXULRunnerApp.cpp:410
(gdb)
-- System Information:
Debian Release: lenny/sid
APT prefers testing
APT policy: (990, 'testing'), (600, 'unstable'), (110, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.26-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages xulrunner-1.9 depends on:
ii libatk1.0-0 1.22.0-1 The ATK accessibility toolkit
ii libbz2-1.0 1.0.5-1 high-quality block-sorting file co
ii libc6 2.7-13 GNU C Library: Shared libraries
ii libcairo2 1.6.4-6 The Cairo 2D vector graphics libra
ii libfontconfig1 2.6.0-1 generic font configuration library
ii libfreetype6 2.3.7-2 FreeType 2 font engine, shared lib
ii libgcc1 1:4.3.1-9 GCC support library
ii libglib2.0-0 2.16.5-1 The GLib library of C routines
ii libgtk2.0-0 2.12.11-3 The GTK+ graphical user interface
ii libhunspell-1.2-0 1.2.6-1 spell checker and morphological an
ii libjpeg62 6b-14 The Independent JPEG Group's JPEG
ii liblcms1 1.17.dfsg-1 Color management library
ii libmozjs1d 1.9.0.1-1 The Mozilla SpiderMonkey JavaScrip
ii libnspr4-0d 4.7.1-3 NetScape Portable Runtime Library
ii libnss3-1d 3.12.0-5 Network Security Service libraries
ii libpango1.0-0 1.20.5-1 Layout and rendering of internatio
ii libpng12-0 1.2.27-1 PNG library - runtime
ii libreadline5 5.2-3 GNU readline and history libraries
ii libsqlite3-0 3.5.9-3 SQLite 3 shared library
ii libstartup-notificatio 0.9-1 library for program launch feedbac
ii libstdc++6 4.3.1-9 The GNU Standard C++ Library v3
ii libx11-6 2:1.1.4-2 X11 client-side library
ii libxrender1 1:0.9.4-2 X Rendering Extension client libra
ii libxt6 1:1.0.5-3 X11 toolkit intrinsics library
ii zlib1g 1:1.2.3.3.dfsg-12 compression library - runtime
xulrunner-1.9 recommends no packages.
Versions of packages xulrunner-1.9 suggests:
ii xulrunner-1.9-gnome-support 1.9.0.1-1 Support for GNOME in xulrunner app
-- no debconf information
Information forwarded to debian-bugs-dist@lists.debian.org, Mike Hommey <glandium@debian.org>:
Bug#498258; Package xulrunner-1.9.
(full text, mbox, link).
Acknowledgement sent to Luca Capello <luca@pca.it>:
Extra info received and forwarded to list. Copy sent to Mike Hommey <glandium@debian.org>.
(full text, mbox, link).
Message #10 received at 498258@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Hi there! On Mon, 08 Sep 2008 16:18:47 +0200, Axel Beckert wrote: > On amd64 conkeror, kazehakase-gecko as well as iceweasel crash shortly > after startup on about 9 out of 10 starts. FWIW, I've never experienced any crash with Conkeror on a daily-updated sid-amd64. I should add that I don't have any Java or Flash software installed. > The conkeror segfaults often happen if you just leave the window open > and idling for more than half a minute. My Conkeror survives various suspend-to-disk cycles, which means that it's idle for more than half a minute ;-) > As another example a segfault which occurred when I just tried to load > http://identi.ca/xtaran/all at start (pressing "g", entering the URL > and pressing enter): No crash here :-( > Versions of packages xulrunner-1.9 depends on: I found some differences which I don't think are important, but it doesn't cost anything to report them: > ii libgcc1 1:4.3.1-9 GCC support library ii libgcc1 1:4.3.2-1 GCC support library > ii libpango1.0-0 1.20.5-1 Layout and rendering of internatio ii libpango1.0-0 1.20.5-2 Layout and rendering of internatio > ii libsqlite3-0 3.5.9-3 SQLite 3 shared library ii libsqlite3-0 3.5.9-4 SQLite 3 shared library > ii libstdc++6 4.3.1-9 The GNU Standard C++ Library v3 ii libstdc++6 4.3.2-1 The GNU Standard C++ Library v3 FWIW I'm available for any other tests useful to solve this bug. Thx, bye, Gismo / Luca
[Message part 2 (application/pgp-signature, inline)]
Information forwarded to debian-bugs-dist@lists.debian.org, Mike Hommey <glandium@debian.org>:
Bug#498258; Package xulrunner-1.9.
(full text, mbox, link).
Acknowledgement sent to Axel Beckert <abe@deuxchevaux.org>:
Extra info received and forwarded to list. Copy sent to Mike Hommey <glandium@debian.org>.
(full text, mbox, link).
Message #15 received at 498258@bugs.debian.org (full text, mbox, reply):
Hi, On Wed, Sep 17, 2008 at 11:12:47PM +0200, Luca Capello wrote: > FWIW, I've never experienced any crash with Conkeror on a daily-updated > sid-amd64. I should add that I don't have any Java or Flash software > installed. Although the segfaults are often in libjsemalloc (or so), I also plan to try it once with all flash and java plugin packages removed as well as with virgin .mozilla, .conkeror.mozdev.org, etc. directories to see if anything there causes the harm. > FWIW I'm available for any other tests useful to solve this bug. Thanks for the feedback. Gives me hope that I once will be able to have more than one working browser (arora with QtWebKit since midori and GtkWebKit also segfaults often) on my ThinkPad. :-) Regards, Axel -- Axel Beckert - abe@deuxchevaux.org, abe@noone.org - http://noone.org/abe/
Information forwarded
to debian-bugs-dist@lists.debian.org, Mike Hommey <glandium@debian.org>:
Bug#498258; Package xulrunner-1.9.
(Mon, 29 Sep 2008 02:36:02 GMT) (full text, mbox, link).
Acknowledgement sent
to Axel Beckert <abe@deuxchevaux.org>:
Extra info received and forwarded to list. Copy sent to Mike Hommey <glandium@debian.org>.
(Mon, 29 Sep 2008 02:36:02 GMT) (full text, mbox, link).
Message #20 received at 498258@bugs.debian.org (full text, mbox, reply):
found 498258 1.9.0.3-1
thanks
On Wed, Sep 17, 2008 at 11:12:47PM +0200, Luca Capello wrote:
> On Mon, 08 Sep 2008 16:18:47 +0200, Axel Beckert wrote:
> > On amd64 conkeror, kazehakase-gecko as well as iceweasel crash shortly
> > after startup on about 9 out of 10 starts.
>
> FWIW, I've never experienced any crash with Conkeror on a daily-updated
> sid-amd64.
That's good to know. I can also confirm this. Just installed conkeror
and dependencies in a amd64 Xen DomU running Debian Sid. Looks stable,
no crashes. But also nearly no other desktop packages or plugins
installed since the machine is only accessible via ssh.
> I should add that I don't have any Java or Flash software installed.
Just checked: Purging swfdec-mozilla didn't change anything in the
behaviour here. (Other flash players are not installed.) Neither did
switching java versions back and forth to gcj.
> > The conkeror segfaults often happen if you just leave the window open
> > and idling for more than half a minute.
>
> My Conkeror survives various suspend-to-disk cycles, which means that
> it's idle for more than half a minute ;-)
So there's hope. :-)
> > As another example a segfault which occurred when I just tried to load
> > http://identi.ca/xtaran/all at start (pressing "g", entering the URL
> > and pressing enter):
>
> No crash here :-(
Not always there, but at least for it's reproducable after an OpenID
login there, even if the OpenID login wasn't successful. Worst case I
have to wait a few minutes leaving the browser idle.
Regarding the also crashing iceweasel: The crashes at startup are gone
with renaming .mozilla, but it still segfaults while surfing, even
with no per user plugins.
Renaming conkeror's .conkeror.mozdev.org directory didn't change
anything.
I tried to deinstall all plugins for mozilla products I have installed
via Debian, too, to see if that changes anything. The
following were purged, but the crashes still appeared:
- firefox-sage
- iceape-traybiff
- icedove-beagle
- icedove-dispmua
- icedove-inspector
- icedove-traybiff
- icedove-typeaheadfind
- iceweasel-beagle
- iceweasel-greasemonkey
- iceweasel-torbutton
- iceweasel-webdeveloper
- java-gcj-compat-plugin
- kaffeine-mozilla
- libmozjs0d
- mozilla-imagezoom
- mozilla-livehttpheaders
- mozilla-mozgest
- mozilla-mplayer
- mozilla-nukeimage
- mozilla-plugin-vlc
- mozilla-venkman
- mozplugger
- swfdec-mozilla
- totem-mozilla
Even purged the gnome support packages:
- iceape-gnome-support
- icedove-gnome-support
- iceweasel-gnome-support
- xulrunner-1.9-gnome-support
Didn't help so far.
Since 1.9.0.3-1 the jemalloc segfaults only appear if MOZILLA_JEMALLOC
is set, but the the double frees still occurr, e.g. during input or
scrolling or after releasing the Ctrl key or while being idle in
conkeror. It seems as if the double frees now happen instead of the
libjemalloc issues.
Additionally a new kind of crash showed up since 1.9.0.3-1:
*** glibc detected *** /usr/lib/xulrunner-1.9/xulrunner-bin:
realloc(): invalid next size: 0x0000000001fe6750 ***
One backtrace from conkeror (xulrunner-dbg
variant):
[...]
** (xulrunner-bin:27491): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:27491): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:27491): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:27491): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:27491): WARNING **: Exception in gr::RangeSegment
*** glibc detected *** /usr/lib/xulrunner-1.9/xulrunner-bin:
**realloc(): invalid next size: 0x00000000031bc5a0 ***
======= Backtrace: =========
/lib/libc.so.6[0x7fadd83b5968]
/lib/libc.so.6[0x7fadd83b9561]
/lib/libc.so.6(realloc+0x12f)[0x7fadd83b9fdf]
/usr/lib/libglib-2.0.so.0(g_realloc+0x2e)[0x7fadd5556b6e]
/usr/lib/libpango-1.0.so.0(pango_glyph_string_set_size+0x78)[0x7fadd60e8908]
/usr/lib/pango/1.6.0/modules/pango-basic-fc.so[0x7fadcab1836a]
/usr/lib/libpango-1.0.so.0(pango_shape+0x4a)[0x7fadd60ff4ca]
/usr/lib/xulrunner-1.9/libxul.so(_ZN17gfxPangoFontGroup24CreateGlyphRunsItemizingEP10gfxTextRunPKcjj+0x1ff)[0x7fadd997d529]
/usr/lib/xulrunner-1.9/libxul.so(_ZN17gfxPangoFontGroup11MakeTextRunEPKtjPKN17gfxTextRunFactory10ParametersEj+0x11e)[0x7fadd997d8d4]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd9979be8]
/usr/lib/xulrunner-1.9/libxul.so(_ZN15gfxTextRunCache11MakeTextRunEPKtjP12gfxFontGroupP10gfxContextjj+0x39)[0x7fadd99787d3]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd98b1c3a]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd98b107a]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd99653b6]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd9368584]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd9458802]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd945885f]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd9458887]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd944c04b]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd944b3b3]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd944c04b]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd944b3b3]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd944c04b]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd944b3b3]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd944d84d]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd944a29f]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd9449bc1]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd944ed34]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd944a29f]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd9449bc1]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd944b61b]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd938c9bf]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd93d2816]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd936f28f]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd93727c9]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd93728fc]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd937297c]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd9944562]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd991a652]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd989f065]
/usr/lib/xulrunner-1.9/libxul.so[0x7fadd9782601]
/usr/lib/xulrunner-1.9/libxul.so(XRE_main+0x1da8)[0x7fadd9210208]
/usr/lib/xulrunner-1.9/xulrunner-bin[0x4023bb]
/lib/libc.so.6(__libc_start_main+0xe6)[0x7fadd83601a6]
/usr/lib/xulrunner-1.9/xulrunner-bin[0x401e89]
======= Memory map: ========
00400000-00409000 r-xp 00000000 fe:00 1556697 /usr/lib/xulrunner-1.9/xulrunner-bin
00609000-0060a000 rw-p 00009000 fe:00 1556697 /usr/lib/xulrunner-1.9/xulrunner-bin
01828000-03db7000 rw-p 01828000 00:00 0 [heap]
40069000-4006a000 ---p 40069000 00:00 0
4006a000-4086a000 rw-p 4006a000 00:00 0
40981000-40982000 ---p 40981000 00:00 0
40982000-41182000 rw-p 40982000 00:00 0
41182000-41183000 ---p 41182000 00:00 0
41183000-41983000 rw-p 41183000 00:00 0
41c21000-41c22000 ---p 41c21000 00:00 0
41c22000-42422000 rw-p 41c22000 00:00 0
42422000-42423000 ---p 42422000 00:00 0
42423000-42c23000 rw-p 42423000 00:00 0
42c23000-42c24000 ---p 42c23000 00:00 0
42c24000-43424000 rw-p 42c24000 00:00 0
43424000-43425000 ---p 43424000 00:00 0
43425000-43c25000 rw-p 43425000 00:00 0
43c25000-43c26000 ---p 43c25000 00:00 0
43c26000-44426000 rw-p 43c26000 00:00 0
7fadc30d0000-7fadc30df000 r-xp 00000000 08:02 65444 /lib/libbz2.so.1.0.4
7fadc30df000-7fadc32de000 ---p 0000f000 08:02 65444 /lib/libbz2.so.1.0.4
7fadc32de000-7fadc32e0000 rw-p 0000e000 08:02 65444 /lib/libbz2.so.1.0.4
7fadc32e0000-7fadc334e000 r-xp 00000000 fe:00 1245918 /usr/lib/libgio-2.0.so.0.0.0
7fadc334e000-7fadc354e000 ---p 0006e000 fe:00 1245918 /usr/lib/libgio-2.0.so.0.0.0
7fadc354e000-7fadc3551000 rw-p 0006e000 fe:00 1245918 /usr/lib/libgio-2.0.so.0.0.0
7fadc3551000-7fadc3588000 r-xp 00000000 fe:00 1247127 /usr/lib/libcroco-0.6.so.3.0.1
7fadc3588000-7fadc3787000 ---p 00037000 fe:00 1247127 /usr/lib/libcroco-0.6.so.3.0.1
7fadc3787000-7fadc378b000 rw-p 00036000 fe:00 1247127 /usr/lib/libcroco-0.6.so.3.0.1
7fadc378b000-7fadc37c1000 r-xp 00000000 fe:00 1248930 /usr/lib/libgsf-1.so.114.0.8
7fadc37c1000-7fadc39c1000 ---p 00036000 fe:00 1248930 /usr/lib/libgsf-1.so.114.0.8
7fadc39c1000-7fadc39c5000 rw-p 00036000 fe:00 1248930 /usr/lib/libgsf-1.so.114.0.8
7fadc39c5000-7fadc39c6000 rw-p 7fadc39c5000 00:00 0
7fadc39c6000-7fadc39f9000 r-xp 00000000 fe:00 1247407 /usr/lib/librsvg-2.so.2.22.2
7fadc39f9000-7fadc3bf9000 ---p 00033000 fe:00 1247407 /usr/lib/librsvg-2.so.2.22.2
7fadc3bf9000-7fadc3bfb000 rw-p 00033000 fe:00 1247407 /usr/lib/librsvg-2.so.2.22.2
7fadc3bfb000-7fadc3bfd000 r-xp 00000000 fe:00 2211860 /usr/lib/gtk-2.0/2.10.0/loaders/svg_loader.so
7fadc3bfd000-7fadc3dfc000 ---p 00002000 fe:00 2211860 /usr/lib/gtk-2.0/2.10.0/loaders/svg_loader.so
7fadc3dfc000-7fadc3dfd000 rw-p 00001000 fe:00 2211860 /usr/lib/gtk-2.0/2.10.0/loaders/svg_loader.so
7fadc3dfd000-7fadc3e00000 r-xp 00000000 fe:00 344194 /usr/lib/pango/1.6.0/modules/pango-hangul-fc.so
7fadc3e00000-7fadc3fff000 ---p 00003000 fe:00 344194 /usr/lib/pango/1.6.0/modules/pango-hangul-fc.so
7fadc3fff000-7fadc4000000 rw-p 00002^C
Another one was:
[...]
** (xulrunner-bin:28066): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:28066): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:28066): WARNING **: Exception in gr::RangeSegment
** (xulrunner-bin:28066): WARNING **: Exception in gr::RangeSegment
*** glibc detected *** /usr/lib/xulrunner-1.9/xulrunner-bin: munmap_chunk(): invalid pointer: 0x00000000029e97f0 ***
======= Backtrace: =========
/lib/libc.so.6[0x7f9c0aa6e968]
/usr/lib/pango/1.6.0/modules/graphite/pango-graphite.so(_ZN2gr12PangoTextSrcD0Ev+0x20)[0x7f9bfd6615a0]
/usr/lib/pango/1.6.0/modules/graphite/pango-graphite.so(graphite_PangoGlyphString+0x11c)[0x7f9bfd662e7c]
/usr/lib/libpango-1.0.so.0(pango_shape+0x4a)[0x7f9c087b84ca]
/usr/lib/xulrunner-1.9/libxul.so(_ZN17gfxPangoFontGroup24CreateGlyphRunsItemizingEP10gfxTextRunPKcjj+0x1ff)[0x7f9c0c036529]
/usr/lib/xulrunner-1.9/libxul.so(_ZN17gfxPangoFontGroup11MakeTextRunEPKtjPKN17gfxTextRunFactory10ParametersEj+0x11e)[0x7f9c0c0368d4]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0c032be8]
/usr/lib/xulrunner-1.9/libxul.so(_ZN15gfxTextRunCache11MakeTextRunEPKtjP12gfxFontGroupP10gfxContextjj+0x39)[0x7f9c0c0317d3]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bf6ac3a]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bf6a07a]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0c01e3b6]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0ba21584]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bb11802]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bb1185f]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bb11887]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bb0504b]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bb043b3]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bb0504b]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bb043b3]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bb0504b]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bb043b3]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bb0684d]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bb0329f]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bb02bc1]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bb07d34]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bb0329f]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bb02bc1]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bb0461b]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0ba459bf]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0ba8b816]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0ba2828f]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0ba2b7c9]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0ba2b8fc]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bb45ee8]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0bc5ebe1]
/usr/lib/xulrunner-1.9/libxul.so(NS_InvokeByIndex_P+0x26e)[0x7f9c0c007682]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0b8f0fd5]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0b8f8a56]
/usr/lib/libmozjs.so.1d(js_Invoke+0x696)[0x7f9c09ea0b1f]
/usr/lib/libmozjs.so.1d[0x7f9c09ea0eca]
/usr/lib/libmozjs.so.1d(JS_CallFunctionValue+0x1a)[0x7f9c09e6caf1]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0b8ffcb1]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0b8facf0]
/usr/lib/libmozjs.so.1d[0x7f9c09ea6f63]
/usr/lib/libmozjs.so.1d[0x7f9c09ea7ef7]
/usr/lib/libmozjs.so.1d[0x7f9c09e93c5b]
/usr/lib/libmozjs.so.1d(js_Invoke+0x6dd)[0x7f9c09ea0b66]
/usr/lib/libmozjs.so.1d[0x7f9c09e8e86f]
/usr/lib/libmozjs.so.1d[0x7f9c09e92e19]
/usr/lib/libmozjs.so.1d(js_Invoke+0x6dd)[0x7f9c09ea0b66]
/usr/lib/libmozjs.so.1d[0x7f9c09e8e86f]
/usr/lib/libmozjs.so.1d[0x7f9c09e92e19]
/usr/lib/libmozjs.so.1d(js_Invoke+0x6dd)[0x7f9c09ea0b66]
/usr/lib/libmozjs.so.1d[0x7f9c09e8e86f]
/usr/lib/libmozjs.so.1d[0x7f9c09e92e19]
/usr/lib/libmozjs.so.1d(js_Invoke+0x6dd)[0x7f9c09ea0b66]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0b8ee51c]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0c008259]
/usr/lib/xulrunner-1.9/libxul.so[0x7f9c0c007707]
======= Memory map: ========
00400000-00409000 r-xp 00000000 fe:00 1556697 /usr/lib/xulrunner-1.9/xulrunner-bin
00609000-0060a000 rw-p 00009000 fe:00 1556697 /usr/lib/xulrunner-1.9/xulrunner-bin
009f6000-02a29000 rw-p 009f6000 00:00 0 [heap]
40446000-40447000 ---p 40446000 00:00 0
40447000-40c47000 rw-p 40447000 00:00 0
40dcc000-40dcd000 ---p 40dcc000 00:00 0
40dcd000-415cd000 rw-p 40dcd000 00:00 0
415cd000-415ce000 ---p 415cd000 00:00 0
415ce000-41dce000 rw-p 415ce000 00:00 0
41dce000-41dcf000 ---p 41dce000 00:00 0
41dcf000-425cf000 rw-p 41dcf000 00:00 0
425cf000-425d0000 ---p 425cf000 00:00 0
425d0000-42dd0000 rw-p 425d0000 00:00 0
42dd0000-42dd1000 ---p 42dd0000 00:00 0
42dd1000-435d1000 rw-p 42dd1000 00:00 0
435d1000-435d2000 ---p 435d1000 00:00 0
435d2000-43dd2000 rw-p 435d2000 00:00 0
7f9bf6403000-7f9bf6412000 r-xp 00000000 08:02 65444 /lib/libbz2.so.1.0.4
7f9bf6412000-7f9bf6611000 ---p 0000f000 08:02 65444 /lib/libbz2.so.1.0.4
7f9bf6611000-7f9bf6613000 rw-p 0000e000 08:02 65444 /lib/libbz2.so.1.0.4
7f9bf6613000-7f9bf6681000 r-xp 00000000 fe:00 1245918 /usr/lib/libgio-2.0.so.0.0.0
7f9bf6681000-7f9bf6881000 ---p 0006e000 fe:00 1245918 /usr/lib/libgio-2.0.so.0.0.0
7f9bf6881000-7f9bf6884000 rw-p 0006e000 fe:00 1245918 /usr/lib/libgio-2.0.so.0.0.0
7f9bf6884000-7f9bf68bb000 r-xp 00000000 fe:00 1247127 /usr/lib/libcroco-0.6.so.3.0.1
7f9bf68bb000-7f9bf6aba000 ---p 00037000 fe:00 1247127 /usr/lib/libcroco-0.6.so.3.0.1
7f9bf6aba000-7f9bf6abe000 rw-p 00036000 fe:00 1247127 /usr/lib/libcroco-0.6.so.3.0.1
7f9bf6abe000-7f9bf8000000 r--p 00000000 fe:00 180325 /usr/share/icons/Gorilla/icon-theme.cache
7f9bf8000000-7f9bf8031000 rw-p 7f9bf8000000 00:00 0
7f9bf8031000-7f9bfc000000 ---p 7f9bf8031000 00:00 0
7f9bfc170000-7f9bfc205000 r--p 00000000 fe:00 478039 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf
7f9bfc205000-7f9bfc23b000 r-xp 00000000 fe:00 1248930 /usr/lib/libgsf-1.so.114.0.8
7f9bfc23b000-7f9bfc43b000 ---p 00036000 fe:00 1248930 /usr/lib/libgsf-1.so.114.0.8
7f9bfc43b000-7f9bfc43f000 rw-p 00036000 fe:00 1/usr/lib/xulrunner-1.9/run-mozilla.sh: line 131: 28066 Aborted "$prog" ${1+"$@"}
Further ideas which came to my mind: Defective RAM, because midori
(gtk-webkit) segfaults often, too, and other machines seem not have
these problems. But then again, arora (qt-webkit) is very stable and
opera (non-free deb from deb.opera.com) is very stable although I have
hundreds of tabs open and it uses sometimes 2 to 3 GB of RAM and is
still stable. So I don't think, it's a memory fault. Anyway, I'll
check the RAM using memtest when I need to reboot the machine and can
run memtest for a while.
BTW: Those "** (xulrunner-bin:28066): WARNING **: Exception in
gr::RangeSegment" are normal or could they be related?
Regards, Axel
--
Axel Beckert - abe@deuxchevaux.org, abe@noone.org - http://noone.org/abe/
Bug marked as found in version 1.9.0.3-1.
Request was from Axel Beckert <abe@deuxchevaux.org>
to control@bugs.debian.org.
(Mon, 29 Sep 2008 02:36:03 GMT) (full text, mbox, link).
Information forwarded
to debian-bugs-dist@lists.debian.org, Mike Hommey <glandium@debian.org>:
Bug#498258; Package xulrunner-1.9.
(Mon, 29 Sep 2008 05:33:02 GMT) (full text, mbox, link).
Acknowledgement sent
to Mike Hommey <mh@glandium.org>:
Extra info received and forwarded to list. Copy sent to Mike Hommey <glandium@debian.org>.
(Mon, 29 Sep 2008 05:33:02 GMT) (full text, mbox, link).
Message #27 received at 498258@bugs.debian.org (full text, mbox, reply):
On Mon, Sep 29, 2008 at 04:31:05AM +0200, Axel Beckert wrote: > *** glibc detected *** /usr/lib/xulrunner-1.9/xulrunner-bin: munmap_chunk(): invalid pointer: 0x00000000029e97f0 *** > ======= Backtrace: ========= > /lib/libc.so.6[0x7f9c0aa6e968] > /usr/lib/pango/1.6.0/modules/graphite/pango-graphite.so(_ZN2gr12PangoTextSrcD0Ev+0x20)[0x7f9bfd6615a0] > /usr/lib/pango/1.6.0/modules/graphite/pango-graphite.so(graphite_PangoGlyphString+0x11c)[0x7f9bfd662e7c] > /usr/lib/libpango-1.0.so.0(pango_shape+0x4a)[0x7f9c087b84ca] Try deinstalling pango-graphite. This looks like bug #476089. Mike
Information forwarded
to debian-bugs-dist@lists.debian.org, Mike Hommey <glandium@debian.org>:
Bug#498258; Package xulrunner-1.9.
(Mon, 29 Sep 2008 10:30:12 GMT) (full text, mbox, link).
Acknowledgement sent
to Axel Beckert <abe@deuxchevaux.org>:
Extra info received and forwarded to list. Copy sent to Mike Hommey <glandium@debian.org>.
(Mon, 29 Sep 2008 10:30:12 GMT) (full text, mbox, link).
Message #32 received at 498258@bugs.debian.org (full text, mbox, reply):
Hi, On Mon, Sep 29, 2008 at 07:28:29AM +0200, Mike Hommey wrote: > On Mon, Sep 29, 2008 at 04:31:05AM +0200, Axel Beckert wrote: > > *** glibc detected *** /usr/lib/xulrunner-1.9/xulrunner-bin: munmap_chunk(): invalid pointer: 0x00000000029e97f0 *** > > ======= Backtrace: ========= > > /lib/libc.so.6[0x7f9c0aa6e968] > > /usr/lib/pango/1.6.0/modules/graphite/pango-graphite.so(_ZN2gr12PangoTextSrcD0Ev+0x20)[0x7f9bfd6615a0] > > /usr/lib/pango/1.6.0/modules/graphite/pango-graphite.so(graphite_PangoGlyphString+0x11c)[0x7f9bfd662e7c] > > /usr/lib/libpango-1.0.so.0(pango_shape+0x4a)[0x7f9c087b84ca] > > Try deinstalling pango-graphite. This looks like bug #476089. Debugged several hours yesterday evening without really getting forward, so thanks for the light at end of the tunnel, because there's indeed pango-graphite installed on the machine. (And configured to match the local display without knowing from which package this feature comes from. :-) Luca: You haven't experienced those problems, do you have pango-graphite installed. On the Sid machine where I haven't those problems, pango-graphite isn't installed. Installed pango-graphite on the above mentioned Sid machine, but hadn't any crashes in five minutes of browsing around on sites where those crashes occurred recently. But it's only over ssh, not many fonts installed locally and the fonts look quite strange currently (too much spacing, etc.). Currently the machine where I experienced these crashes runs memtest at home, so I can't access or reboot it remotely. I peeked in after about 5h of memtest this morning (yeah, hadn't that much sleep this night :-) and it hadn't found anything so far. Will continue debugging by purging pango-graphite this evening. Regards, Axel -- Axel Beckert - abe@deuxchevaux.org, abe@noone.org - http://noone.org/abe/
Information forwarded
to debian-bugs-dist@lists.debian.org, Mike Hommey <glandium@debian.org>:
Bug#498258; Package xulrunner-1.9.
(Mon, 29 Sep 2008 11:54:02 GMT) (full text, mbox, link).
Acknowledgement sent
to Luca Capello <luca@pca.it>:
Extra info received and forwarded to list. Copy sent to Mike Hommey <glandium@debian.org>.
(Mon, 29 Sep 2008 11:54:02 GMT) (full text, mbox, link).
Message #37 received at 498258@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Hi Axel! On Mon, 29 Sep 2008 12:10:50 +0200, Axel Beckert wrote: > On Mon, Sep 29, 2008 at 07:28:29AM +0200, Mike Hommey wrote: >> Try deinstalling pango-graphite. This looks like bug #476089. > > Debugged several hours yesterday evening without really getting > forward, so thanks for the light at end of the tunnel, because there's > indeed pango-graphite installed on the machine. (And configured to > match the local display without knowing from which package this > feature comes from. :-) > > Luca: You haven't experienced those problems, do you have > pango-graphite installed. On the Sid machine where I haven't those > problems, pango-graphite isn't installed. I confirm that on my sid-amd64 there's no pango-graphite. I installed it now and OpenID on SourceForge.net works as well as your identi.ca page. I'm leaving Conkeror open, we will see if it crashes. BTW, I'm using a beta package for Conkeror, Axel knows about it ;-) As a side note, with pango-graphite the fonts are really ugly, with too much spaces between words. I don't konw if it's a pango-graphite or conkeror problem, however. Thx, bye, Gismo / Luca
[Message part 2 (application/pgp-signature, inline)]
Information forwarded
to debian-bugs-dist@lists.debian.org, Mike Hommey <glandium@debian.org>:
Bug#498258; Package xulrunner-1.9.
(Mon, 29 Sep 2008 13:45:02 GMT) (full text, mbox, link).
Acknowledgement sent
to Axel Beckert <abe@deuxchevaux.org>:
Extra info received and forwarded to list. Copy sent to Mike Hommey <glandium@debian.org>.
(Mon, 29 Sep 2008 13:45:02 GMT) (full text, mbox, link).
Message #42 received at 498258@bugs.debian.org (full text, mbox, reply):
Hi, On Mon, Sep 29, 2008 at 01:50:27PM +0200, Luca Capello wrote: > I confirm that on my sid-amd64 there's no pango-graphite. I installed > it now and OpenID on SourceForge.net works as well as your identi.ca > page. I'm leaving Conkeror open, we will see if it crashes. No crashes here yet either. Maybe a special font has to be installed for those crashes, too? I've got quite a lot of fonts installed on the machine at home. > BTW, I'm using a beta package for Conkeror, Axel knows about it ;-) *g* Should make no difference here either. Using the version from sid currently. > As a side note, with pango-graphite the fonts are really ugly, with > too much spaces between words. Ack, on the machine where I installed it freshly, too. On the machine at home it really looks fine. > I don't konw if it's a pango-graphite or conkeror problem, however. Iceweasel, too, not only conkeror. Sounds like a font or probably a not so many fonts plus pango-graphite problem. Regards, Axel -- Axel Beckert - abe@deuxchevaux.org, abe@noone.org - http://noone.org/abe/
Information forwarded
to debian-bugs-dist@lists.debian.org, Mike Hommey <glandium@debian.org>:
Bug#498258; Package xulrunner-1.9.
(Mon, 29 Sep 2008 15:03:03 GMT) (full text, mbox, link).
Acknowledgement sent
to Luca Capello <luca@pca.it>:
Extra info received and forwarded to list. Copy sent to Mike Hommey <glandium@debian.org>.
(Mon, 29 Sep 2008 15:03:03 GMT) (full text, mbox, link).
Message #47 received at 498258@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Hi Axel! On Mon, 29 Sep 2008 15:41:45 +0200, Axel Beckert wrote: > On Mon, Sep 29, 2008 at 01:50:27PM +0200, Luca Capello wrote: >> I confirm that on my sid-amd64 there's no pango-graphite. I installed >> it now and OpenID on SourceForge.net works as well as your identi.ca >> page. I'm leaving Conkeror open, we will see if it crashes. > > No crashes here yet either. Maybe a special font has to be installed > for those crashes, too? I've got quite a lot of fonts installed on the > machine at home. I can install any fonts you've installed and test it, just to be sure it's not a specific font problem. >> BTW, I'm using a beta package for Conkeror, Axel knows about it ;-) > > *g* Should make no difference here either. Using the version from sid > currently. I'll try the version in sid with both either this evening or tomorrow. >> As a side note, with pango-graphite the fonts are really ugly, with >> too much spaces between words. > > Ack, on the machine where I installed it freshly, too. On the machine > at home it really looks fine. Which is strange, since it should look fine with the default font, too. Thx, bye, Gismo / Luca
[Message part 2 (application/pgp-signature, inline)]
Information forwarded
to debian-bugs-dist@lists.debian.org, Mike Hommey <glandium@debian.org>:
Bug#498258; Package xulrunner-1.9.
(Mon, 29 Sep 2008 22:57:03 GMT) (full text, mbox, link).
Acknowledgement sent
to Axel Beckert <abe@deuxchevaux.org>:
Extra info received and forwarded to list. Copy sent to Mike Hommey <glandium@debian.org>.
(Mon, 29 Sep 2008 22:57:03 GMT) (full text, mbox, link).
Message #52 received at 498258@bugs.debian.org (full text, mbox, reply):
Hi Mike, On Mon, Sep 29, 2008 at 07:28:29AM +0200, Mike Hommey wrote: > Try deinstalling pango-graphite. This looks like bug #476089. That was it! Great! Thanks! Conkeror as well as Iceweasel are stable again here, even with all the Firefox plugins I've installed. Even those reproducable segfaults in Liferea on feed items with Japanese, Korean or Chinese fonts are gone! Regards, Axel -- Axel Beckert - abe@deuxchevaux.org, abe@noone.org - http://noone.org/abe/
Information forwarded
to debian-bugs-dist@lists.debian.org, Mike Hommey <glandium@debian.org>:
Bug#498258; Package xulrunner-1.9.
(Tue, 30 Sep 2008 05:12:03 GMT) (full text, mbox, link).
Acknowledgement sent
to Mike Hommey <mh@glandium.org>:
Extra info received and forwarded to list. Copy sent to Mike Hommey <glandium@debian.org>.
(Tue, 30 Sep 2008 05:12:03 GMT) (full text, mbox, link).
Message #57 received at 498258@bugs.debian.org (full text, mbox, reply):
On Tue, Sep 30, 2008 at 12:55:52AM +0200, Axel Beckert wrote: > Hi Mike, > > On Mon, Sep 29, 2008 at 07:28:29AM +0200, Mike Hommey wrote: > > Try deinstalling pango-graphite. This looks like bug #476089. > > That was it! Great! Thanks! Conkeror as well as Iceweasel are stable > again here, even with all the Firefox plugins I've installed. > > Even those reproducable segfaults in Liferea on feed items with > Japanese, Korean or Chinese fonts are gone! Note that starting with xulrunner 1.9.0.3-1, you can also totally disable plugins without moving the files around, by setting the MOZILLA_DISABLE_PLUGINS environment variables. In case you'd have plugins problems in the future ;) Mike
Bug reassigned from package `xulrunner-1.9' to `pango-graphite'.
Request was from Mike Hommey <glandium@debian.org>
to control@bugs.debian.org.
(Sat, 18 Oct 2008 08:21:06 GMT) (full text, mbox, link).
Changed Bug submitter to 'Axel Beckert <abe@debian.org>' from 'Axel Beckert <abe@noone.org>'
Request was from Axel Beckert <abe@debian.org>
to control@bugs.debian.org.
(Wed, 17 Feb 2010 19:15:37 GMT) (full text, mbox, link).
Forcibly Merged 471642 476089 479153 498258.
Request was from Axel Beckert <abe@debian.org>
to control@bugs.debian.org.
(Mon, 24 Oct 2011 17:39:05 GMT) (full text, mbox, link).
Bug archived.
Request was from Axel Beckert <abe@debian.org>
to control@bugs.debian.org.
(Mon, 24 Oct 2011 17:39:05 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.