Bug#709841: iceweasel: spurious out of memory + crash (segmentation fault)

Sun May 26 09:00:21 UTC 2013

On 2013-05-26 08:52:24 +0200, Mike Hommey wrote:
> Without a crash backtrace, there's nothing this bug report is going to
> achieve.

Here is it.

xvii:~> gdb =iceweasel core
GNU gdb (GDB) 7.6-debian
Copyright (C) 2013 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/lib/iceweasel/iceweasel...Reading symbols from /usr/lib/debug/usr/lib/iceweasel/iceweasel...done.
done.
[...]
warning: .dynamic section for "/usr/lib/x86_64-linux-gnu/libX11.so.6" is not at the expected address (wrong library or version mismatch?)

warning: .dynamic section for "/usr/lib/x86_64-linux-gnu/libX11-xcb.so.1" is not at the expected address (wrong library or version mismatch?)

warning: .dynamic section for "/usr/lib/x86_64-linux-gnu/gio/modules/libgvfsdbus.so" is not at the expected address (wrong library or version mismatch?)

warning: .dynamic section for "/usr/lib/x86_64-linux-gnu/gvfs/libgvfscommon.so" is not at the expected address (wrong library or version mismatch?)

warning: Could not load shared library symbols for linux-vdso.so.1.
Do you need "set solib-search-path" or "set sysroot"?
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".

warning: no loadable sections found in added symbol-file system-supplied DSO at 0x7fffeaffe000
Core was generated by `iceweasel'.
Program terminated with signal 11, Segmentation fault.
#0  0x00007fc1e040e0eb in raise (sig=11)
    at ../nptl/sysdeps/unix/sysv/linux/pt-raise.c:38
38      ../nptl/sysdeps/unix/sysv/linux/pt-raise.c: No such file or directory.
(gdb) set pagination off
(gdb) bt full
#0  0x00007fc1e040e0eb in raise (sig=11) at ../nptl/sysdeps/unix/sysv/linux/pt-raise.c:38
        resultvar = 0
        pid = <optimized out>
#1  0x00007fc1dcc0f371 in nsProfileLock::FatalSignalHandler (signo=11, info=<optimized out>, context=<optimized out>) at /tmp/buildd/iceweasel-21.0/build-xulrunner/toolkit/profile/nsProfileLock.cpp:180
        unblock_sigs = {__val = {1024, 0 <repeats 15 times>}}
        oldact = <optimized out>
#2  <signal handler called>
No locals.
#3  mozalloc_abort (msg=msg at entry=0x7fc1deb55124 "out of memory") at /tmp/buildd/iceweasel-21.0/memory/mozalloc/mozalloc_abort.cpp:30
No locals.
#4  0x00007fc1deb550e2 in mozalloc_handle_oom (size=size at entry=32768) at /tmp/buildd/iceweasel-21.0/memory/mozalloc/mozalloc_oom.cpp:27
No locals.
#5  0x00007fc1deb54f21 in moz_xmalloc (size=32768) at /tmp/buildd/iceweasel-21.0/memory/mozalloc/mozalloc.cpp:56
        ptr = <optimized out>
#6  0x00007fc1dd80bcff in nsSegmentedBuffer::AppendNewSegment (this=this at entry=0x7fc197c05aa8) at /tmp/buildd/iceweasel-21.0/xpcom/io/nsSegmentedBuffer.cpp:71
        seg = <optimized out>
#7  0x00007fc1dd809d57 in nsPipe::GetWriteSegment (this=0x7fc197c05a00, segment=@0x7fc1c49f4c38: 0x7fc1c49f4c80 "N0\310\334\301\177", segmentLen=@0x7fc1c49f4c30: 1563529216) at /tmp/buildd/iceweasel-21.0/xpcom/io/nsPipe3.cpp:463
        seg = <optimized out>
        mon = {mReentrantMonitor = 0x7fc197c05aa0}
#8  0x00007fc1dd80a6d5 in nsPipeOutputStream::WriteSegments (this=0x7fc197c05a60, reader=0x7fc1dcc8b796 <nsHttpTransaction::WritePipeSegment(nsIOutputStream*, void*, char*, unsigned int, unsigned int, unsigned int*)>, closure=0x7fc1c4072010, count=32768, writeCount=0x7fc1c49f4cbc) at /tmp/buildd/iceweasel-21.0/xpcom/io/nsPipe3.cpp:1086
        readCount = 32705
        originalLen = <optimized out>
        rv = <optimized out>
        segment = 0x7fc1c49f4c80 "N0\310\334\301\177"
        segmentLen = 1563529216
#9  0x00007fc1dcc89481 in WriteSegments (countWritten=<optimized out>, count=<optimized out>, writer=<optimized out>, this=<optimized out>) at /tmp/buildd/iceweasel-21.0/netwerk/protocol/http/nsHttpTransaction.cpp:636
        rv = <optimized out>
#10 nsHttpTransaction::WriteSegments (this=0x7fc1c4072010, writer=<optimized out>, count=<optimized out>, countWritten=<optimized out>) at /tmp/buildd/iceweasel-21.0/netwerk/protocol/http/nsHttpTransaction.cpp:626
No locals.
#11 0x00007fc1dcc7cf54 in nsHttpConnection::OnSocketReadable (this=0x7fc13706b800) at /tmp/buildd/iceweasel-21.0/netwerk/protocol/http/nsHttpConnection.cpp:1404
        rv = <optimized out>
        now = 595297492
        delta = <optimized out>
        k400ms = 400
        n = 0
        again = true
#12 0x00007fc1dcc7dc8e in nsHttpConnection::OnInputStreamReady (this=0x7fc13706b800, in=<optimized out>) at /tmp/buildd/iceweasel-21.0/netwerk/protocol/http/nsHttpConnection.cpp:1525
        rv = <optimized out>
#13 0x00007fc1dcc315e3 in nsSocketInputStream::OnSocketReady (this=this at entry=0x7fc166a15558, condition=condition at entry=NS_OK) at /tmp/buildd/iceweasel-21.0/netwerk/base/src/nsSocketTransport2.cpp:226
        callback = {<nsCOMPtr_base> = {mRawPtr = 0x7fc13706b810}, <No data fields>}
#14 0x00007fc1dcc31816 in nsSocketTransport::OnSocketReady (this=0x7fc166a15420, fd=0x7fc19b2ca040, outFlags=1) at /tmp/buildd/iceweasel-21.0/netwerk/base/src/nsSocketTransport2.cpp:1565
No locals.
#15 0x00007fc1dcc33fce in nsSocketTransportService::DoPollIteration (this=this at entry=0x7fc1c6854500, wait=<optimized out>) at /tmp/buildd/iceweasel-21.0/netwerk/base/src/nsSocketTransportService2.cpp:803
        desc = <optimized out>
        s = <optimized out>
        i = 31
        count = 8
        pollInterval = 0
        n = 1
#16 0x00007fc1dcc3416e in nsSocketTransportService::Run (this=0x7fc1c6854500) at /tmp/buildd/iceweasel-21.0/netwerk/base/src/nsSocketTransportService2.cpp:642
        pendingEvents = false
        goingOffline = <optimized out>
        thread = 0x7fc1dfd43c00
        threadInt = {<nsCOMPtr_base> = {mRawPtr = 0x7fc1dfd43c00}, <No data fields>}
#17 0x00007fc1dd81938a in nsThread::ProcessNextEvent (this=0x7fc1dfd43c00, mayWait=<optimized out>, result=0x7fc1c49f4e5f) at /tmp/buildd/iceweasel-21.0/xpcom/threads/nsThread.cpp:627
        event = {<nsCOMPtr_base> = {mRawPtr = 0x7fc1c6854518}, <No data fields>}
        notifyMainThreadObserver = <optimized out>
        obs = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
        canary = {static sOutputFD = 0}
        rv = NS_OK
#18 0x00007fc1dd7ee624 in NS_ProcessNextEvent_P (thread=<optimized out>, thread at entry=0x7fc1dfd43c00, mayWait=mayWait at entry=true) at /tmp/buildd/iceweasel-21.0/build-xulrunner/xpcom/build/nsThreadUtils.cpp:238
        val = <optimized out>
#19 0x00007fc1dd819bda in nsThread::ThreadFunc (arg=0x7fc1dfd43c00) at /tmp/buildd/iceweasel-21.0/xpcom/threads/nsThread.cpp:265
        self = 0x7fc1dfd43c00
        event = {<nsCOMPtr_base> = {mRawPtr = 0x0}, <No data fields>}
#20 0x00007fc1df1a029c in _pt_root (arg=0x7fc1dfd1aae0) at ptthread.c:191
        thred = 0x7fc1dfd1aae0
        detached = 0
        tid = 18178
#21 0x00007fc1e0406e0e in start_thread (arg=0x7fc1c49f5700) at pthread_create.c:311
        __res = <optimized out>
        pd = 0x7fc1c49f5700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140470204192512, 3686614535800586745, 0, 140737135507984, 4096, 140470204192512, -3698874360471256583, -3698936458145332743}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
        __PRETTY_FUNCTION__ = "start_thread"
#22 0x00007fc1e013a95d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
No locals.

-- 
Vincent Lefèvre <vincent at vinc17.net> - Web: <http://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <http://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)