[Bug 341202] [NEW] Firefox crashes on sqlite3 memcpy segfault

[Joonas Koivunen]

Public bug reported:

Binary package hint: firefox-3.0

I only recently upgraded to Kubuntu Jaunty alpha-5 yesterday, having
updated all my packages (~350MB) I noticed firefox 3.0.7 (3.0.7
+nobinonly-0ubuntu1) started crashing.

Before this constant crashing I had to terminate firefox as it froze on
some simple website, which might have corrupted it's sqlite databases.

After removing the databases firefox works normally, and I was again
greeted with first-time welcome message.

Running firefox under gdb didn't result in anything interesting as the
binary is staticly linked with debug information stripped:

$ firefox -g
/usr/bin/gdb /usr/lib/firefox-3.0.7/firefox -x /tmp/mozargs.aloTqx
GNU gdb 6.8-debian
// snip
(gdb) run                                                                    
Starting program: /usr/lib/firefox-3.0.7/firefox                             
(no debugging symbols found) // rest of these omitted
[Thread debugging using libthread_db enabled]
[New Thread 0xb7ced6d0 (LWP 7762)]
[New Thread 0xb611eb90 (LWP 7765)]
(firefox:7762): Gtk-WARNING **: libbonoboui-2.so.0: cannot open shared object file: No such file or directory
(firefox:7762): Gtk-WARNING **: libbonoboui-2.so.0: cannot open shared object file: No such file or directory
[New Thread 0xb51a9b90 (LWP 7766)]
[New Thread 0xb48b2b90 (LWP 7767)]                                                                           
[New Thread 0xb3e9bb90 (LWP 7768)]                                                                           
[Thread 0xb3e9bb90 (LWP 7768) exited]
[New Thread 0xb3e9bb90 (LWP 7769)]                                                                           
[Thread 0xb48b2b90 (LWP 7767) exited]
[New Thread 0xb48b2b90 (LWP 7770)]                                                                           
[New Thread 0xb2cfeb90 (LWP 7772)]                                                                           
[New Thread 0xb34ffb90 (LWP 7771)]                                                                           
[Thread 0xb48b2b90 (LWP 7770) exited]
[New Thread 0xb48b2b90 (LWP 7773)]
[New Thread 0xb24fdb90 (LWP 7774)]
[New Thread 0xb0271b90 (LWP 7775)]                                                                           
[Thread 0xb0271b90 (LWP 7775) exited]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb24fdb90 (LWP 7774)]         
0xb7d688aa in memcpy () from /lib/tls/i686/cmov/libc.so.6
(gdb) bt                                                 
#0  0xb7d688aa in memcpy () from /lib/tls/i686/cmov/libc.so.6
#1  0xb6fc9cbd in ?? () from /usr/lib/libsqlite3.so.0        
#2  0xb6fcbe0e in ?? () from /usr/lib/libsqlite3.so.0        
#3  0xb6fca640 in ?? () from /usr/lib/libsqlite3.so.0        
#4  0xb6fd326a in ?? () from /usr/lib/libsqlite3.so.0        
#5  0xb6fdfc19 in ?? () from /usr/lib/libsqlite3.so.0        
#6  0xb6fe63b0 in sqlite3_step () from /usr/lib/libsqlite3.so.0
#7  0xb78488c8 in ?? () from /usr/lib/xulrunner-1.9.0.7/libxul.so
#8  0xb78481d1 in ?? () from /usr/lib/xulrunner-1.9.0.7/libxul.so
#9  0xb774af34 in ?? () from /usr/lib/xulrunner-1.9.0.7/libxul.so
#10 0xb7752345 in ?? () from /usr/lib/xulrunner-1.9.0.7/libxul.so
#11 0xb77537f6 in ?? () from /usr/lib/xulrunner-1.9.0.7/libxul.so
#12 0xb7753916 in ?? () from /usr/lib/xulrunner-1.9.0.7/libxul.so
#13 0xb7966029 in NS_InvokeByIndex_P () from /usr/lib/xulrunner-1.9.0.7/libxul.so
#14 0xb795e3a5 in ?? () from /usr/lib/xulrunner-1.9.0.7/libxul.so
#15 0xb795a188 in ?? () from /usr/lib/xulrunner-1.9.0.7/libxul.so
#16 0xb792aa14 in ?? () from /usr/lib/xulrunner-1.9.0.7/libxul.so
#17 0xb795a8ef in ?? () from /usr/lib/xulrunner-1.9.0.7/libxul.so
#18 0xb7c3b271 in ?? () from /usr/lib/libnspr4.so
#19 0xb7f814ff in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#20 0xb7dd349e in clone () from /lib/tls/i686/cmov/libc.so.6
(gdb) Quit

Too bad I removed those sqlite databases before I realized that those
could be of use.

Is there a dynamicly linked build available, with debugging symbols? If
I could reproduce this bug somehow (I can guarantee I can get 3.0.7 to
crash) that could be interesting for sqlite developers...

** Affects: firefox-3.0 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Firefox crashes on sqlite3 memcpy segfault
https://bugs.launchpad.net/bugs/341202
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox-3.0 in ubuntu.