Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 12 Dec 2010 19:48:55 -0800 (PST)
From:      "Ronald F.Guilmette" <rfg@tristatelogic.com>
To:        FreeBSD-gnats-submit@FreeBSD.org
Cc:        gecko@FreeBSD.org, rfg@tristatelogic.com
Subject:   ports/153114: firefox-3.6.12_1, 1 crash: Assertion failure: prop == (JSProperty*) sprop, at jstracer.cpp:11137
Message-ID:  <20101213034855.385FABDC46@segfault.tristatelogic.com>
Resent-Message-ID: <201012130350.oBD3o9oe029702@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         153114
>Category:       ports
>Synopsis:       firefox-3.6.12_1,1 crash: Assertion failure: prop == (JSProperty*) sprop, at jstracer.cpp:11137
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Dec 13 03:50:09 UTC 2010
>Closed-Date:
>Last-Modified:
>Originator:     Ronald F. Guilmette
>Release:        FreeBSD 7.0-RELEASE i386
>Organization:
Infinite Monkeys & Co.
>Environment:
System: FreeBSD segfault.tristatelogic.com 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Tue Aug 5 02:38:40 PDT 2008 root@segfault.monkeys.com:/usr/src/sys/i386/compile/rfg20080805 i386

firefox-3.6.12_1,1 

>Description:

So I go to google and google for "Sony F-V100" (without the quotes)... no
problem when searching for that, just on the web.  But now click on the
google "Shopping" link, and ka-blewie!  Firefox crashes.  Seriously un-
friendly.

I saved a log of stdout/stderr from the Firefox session.  Here it is below.
Apparently there is an assertion failure at jstracer.cpp:11137

===================================================================
*** Registering components in: xpconnect
*** Registering components in: nsUCvMathModule
*** Registering components in: nsUConvModule
*** Registering components in: nsI18nModule
*** Registering components in: nsChardetModule
*** Registering components in: nsUniversalCharDetModule
*** Registering components in: necko
*** Registering components in: nsCookieModule
*** Registering components in: nsPermissionsModule
*** Registering components in: nsAuthModule
*** Registering components in: nsJarModule
*** Registering components in: ZipWriterModule
*** Registering components in: nsPrefModule
*** Registering components in: nsSecurityManagerModule
*** Registering components in: nsRDFModule
*** Registering components in: nsXPIntlModule
*** Registering components in: nsWindowDataSourceModule
*** Registering components in: nsParserModule
*** Registering components in: nsGfxModule
*** Registering components in: nsWidgetGtk2Module
*** Registering components in: nsImageLib2Module
*** Registering components in: nsPluginModule
*** Registering components in: nsLayoutModule
*** Registering components in: docshell_provider
*** Registering components in: embedcomponents
*** Registering components in: Browser_Embedding_Module
*** Registering components in: nsAccessibilityModule
*** Registering components in: appshell
*** Registering components in: nsTransactionManagerModule
*** Registering components in: nsComposerModule
*** Registering components in: nsChromeModule
*** Registering components in: application
*** Registering components in: nsFindComponent
*** Registering components in: Apprunner
*** Registering components in: CommandLineModule
*** Registering components in: nsFileViewModule
*** Registering components in: mozStorageModule
*** Registering components in: nsPlacesModule
*** Registering components in: tkAutoCompleteModule
*** Registering components in: satchel
*** Registering components in: PKI
*** Registering components in: nsToolkitCompsModule
*** Registering components in: RemoteServiceModule
*** Registering components in: nsSoftwareUpdate
*** Registering components in: JavaScript_Debugger
*** Registering components in: BOOT
*** Registering components in: NSS
*** Registering components in: nsSystemPrefModule
*** Registering components in: nsAutoConfigModule
*** Registering components in: mozSpellCheckerModule
*** Registering components in: nsUnixProxyModule
*** Registering components in: jsctypes
WARNING: NS_ENSURE_SUCCESS(rv, rv) failed with result 0x80004005: file nsXREDirProvider.cpp, line 1245
pldhash: for the table at address 0x2b70a658, the given entrySize of 48 probably favors chaining over double hashing.
++DOCSHELL 0x2b70a5f0 == 1
pldhash: for the table at address 0x2b77a588, the given entrySize of 48 probably favors chaining over double hashing.
++DOMWINDOW == 1 (0x2b03fe50) [serial = 1] [outer = 0x0]
pldhash: for the table at address 0x2bc49c98, the given entrySize of 52 probably favors chaining over double hashing.
pldhash: for the table at address 0x2bc5b6c0, the given entrySize of 80 definitely favors chaining over double hashing.
pldhash: for the table at address 0x2b70bba8, the given entrySize of 48 probably favors chaining over double hashing.
++DOCSHELL 0x2b70bb40 == 2
++DOMWINDOW == 2 (0x2b040930) [serial = 2] [outer = 0x0]
++DOMWINDOW == 3 (0x2b040b00) [serial = 3] [outer = 0x2b040900]
++DOMWINDOW == 4 (0x2b041410) [serial = 4] [outer = 0x2b03fe20]
pldhash: for the table at address 0x2b70c938, the given entrySize of 48 probably favors chaining over double hashing.
++DOCSHELL 0x2b70c8d0 == 3
++DOMWINDOW == 5 (0x2b041d20) [serial = 5] [outer = 0x0]
pldhash: for the table at address 0x2b70cb28, the given entrySize of 48 probably favors chaining over double hashing.
++DOCSHELL 0x2b70cac0 == 4
++DOMWINDOW == 6 (0x2b041ef0) [serial = 6] [outer = 0x0]
pldhash: for the table at address 0x2b70daa8, the given entrySize of 48 probably favors chaining over double hashing.
++DOCSHELL 0x2b70da40 == 5
WARNING: NS_ENSURE_TRUE(browserChrome) failed: file nsDocShell.cpp, line 9903
WARNING: Something wrong when creating the docshell for a frameloader!: file nsFrameLoader.cpp, line 912
WARNING: NS_ENSURE_SUCCESS(rv, rv) failed with result 0x80004005: file nsFrameLoader.cpp, line 936
WARNING: NS_ENSURE_SUCCESS(rv, rv) failed with result 0x80004005: file nsFrameLoader.cpp, line 193
pldhash: for the table at address 0x2b70de88, the given entrySize of 48 probably favors chaining over double hashing.
++DOCSHELL 0x2b70de20 == 6
++DOMWINDOW == 7 (0x2b267670) [serial = 7] [outer = 0x0]
WARNING: Subdocument container has no frame: file nsDocumentViewer.cpp, line 2383
++DOMWINDOW == 8 (0x2b045720) [serial = 8] [outer = 0x2b041cf0]
WARNING: Subdocument container has no frame: file nsDocumentViewer.cpp, line 2383
++DOMWINDOW == 9 (0x2cc0e070) [serial = 9] [outer = 0x2b041ec0]
++DOMWINDOW == 10 (0x2b268d30) [serial = 10] [outer = 0x2b267640]
*** e = [Exception... "Component returned failure code: 0x80570016 (NS_ERROR_XPC_GS_RETURNED_FAILURE) [nsIJSCID.getService]"  nsresult: "0x80570016 (NS_ERROR_XPC_GS_RETURNED_FAILURE)"  location: "JS frame :: chrome://browser/content/utilityOverlay.js :: getShellService :: line 326"  data: no]
++DOMWINDOW == 11 (0x2b269270) [serial = 11] [outer = 0x2b267640]
++DOMWINDOW == 12 (0x2b26a5b0) [serial = 12] [outer = 0x2b267640]
pldhash: for the table at address 0x2b7116b8, the given entrySize of 48 probably favors chaining over double hashing.
++DOCSHELL 0x2b711650 == 7
++DOMWINDOW == 13 (0x2b26a770) [serial = 13] [outer = 0x0]
WARNING: Subdocument container has no frame: file nsDocumentViewer.cpp, line 2383
++DOMWINDOW == 14 (0x2b26a930) [serial = 14] [outer = 0x2b26a740]
--DOMWINDOW == 13 (0x2b268d30) [serial = 10] [outer = 0x2b267640] [url = about:blank]
pldhash: for the table at address 0x2d9421f8, the given entrySize of 48 probably favors chaining over double hashing.
++DOCSHELL 0x2d942190 == 8
++DOMWINDOW == 14 (0x2cc0c1a0) [serial = 15] [outer = 0x0]
++DOMWINDOW == 15 (0x2cc0e7b0) [serial = 16] [outer = 0x2cc0c170]
pldhash: for the table at address 0x2d9427c8, the given entrySize of 48 probably favors chaining over double hashing.
++DOCSHELL 0x2d942760 == 9
++DOMWINDOW == 16 (0x2cc0dcd0) [serial = 17] [outer = 0x0]
++DOMWINDOW == 17 (0x2d46a3c0) [serial = 18] [outer = 0x2cc0dca0]
--DOMWINDOW == 16 (0x2cc0c1a0) [serial = 15] [outer = 0x0] [url = chrome://browser/content/aboutDialog.xul]
--DOMWINDOW == 15 (0x2cc0e7b0) [serial = 16] [outer = 0x0] [url = about:blank]
--DOCSHELL 0x2d942190 == 8
--DOMWINDOW == 14 (0x2cc0dcd0) [serial = 17] [outer = 0x0] [url = about:blank]
--DOCSHELL 0x2d942760 == 7
--DOMWINDOW == 13 (0x2d46a3c0) [serial = 18] [outer = 0x0] [url = about:blank]
Assertion failure: prop == (JSProperty*) sprop, at jstracer.cpp:11137
Trace/BPT trap (core dumped)
===================================================================

>How-To-Repeat:

See above.  Just google for "Sony F-V100" without the quotes and then click
on the google "shopping" link. KA-BLEWIE!

>Fix:

Beats the hell out of me.  I've kinda got a lot else to do right now, so I'm
just reporting this and hoping that maybe somebody else has time to look
at it.

Ceratinly, the filename "jstracer.cpp" suggests that this problem has
something to do with JavaScript interpretation.
>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20101213034855.385FABDC46>