Firefox crashes (Linux x64, JavaScript-related?)
Since version 40 I've been experiencing apparently random crashes in Firefox, typically when opening a link in a new tab. I've rebuilt it with debug symbols and produced a couple of ~1.5GB core files. Backtraces from gdb as follows:
Core was generated by `firefox'. Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007f21369475f9 in raise () from /lib64/libpthread.so.0 [Current thread is 1 (Thread 0x7f2136d12780 (LWP 28895))] (gdb) bt #0 0x00007f21369475f9 in raise () from /lib64/libpthread.so.0 #1 0x00007f21339083db in nsProfileLock::FatalSignalHandler(int, siginfo_t*, void*) () from /usr/lib64/firefox/libxul.so #2 0x00007f2133bdcf41 in AsmJSFaultHandler(int, siginfo_t*, void*) () from /usr/lib64/firefox/libxul.so #3 <signal handler called> #4 0x00007f2133c76def in void js::TraceManuallyBarrieredEdge<js::jit::JitCode*>(JSTracer*, js::jit::JitCode**, char const*) () from /usr/lib64/firefox/libxul.so #5 0x00007f2133f4f34b in js::jit::ICStub::trace(JSTracer*) () from /usr/lib64/firefox/libxul.so #6 0x00007f2133e1fdbb in js::jit::BaselineScript::trace(JSTracer*) () from /usr/lib64/firefox/libxul.so #7 0x00007f2133c765f9 in void js::TraceManuallyBarrieredEdge<JSScript*>(JSTracer*, JSScript**, char const*) () from /usr/lib64/firefox/libxul.so #8 0x00007f213400e7f8 in fun_trace(JSTracer*, JSObject*) () from /usr/lib64/firefox/libxul.so #9 0x00007f2133c5328b in js::GCMarker::drainMarkStack(js::SliceBudget&) () from /usr/lib64/firefox/libxul.so #10 0x00007f21340262e3 in js::gc::GCRuntime::drainMarkStack(js::SliceBudget&, js::gcstats::Phase) () from /usr/lib64/firefox/libxul.so #11 0x00007f21340664d8 in js::gc::GCRuntime::incrementalCollectSlice(js::SliceBudget&, JS::gcreason::Reason) () from /usr/lib64/firefox/libxul.so #12 0x00007f2134067149 in js::gc::GCRuntime::gcCycle(bool, js::SliceBudget&, JS::gcreason::Reason) () from /usr/lib64/firefox/libxul.so #13 0x00007f21340673dd in js::gc::GCRuntime::collect(bool, js::SliceBudget, JS::gcreason::Reason) () from /usr/lib64/firefox/libxul.so #14 0x00007f213406871b in JS::NotifyDidPaint(JSRuntime*) () from /usr/lib64/firefox/libxul.so #15 0x00007f2132523ee6 in nsXPConnect::NotifyDidPaint() () from /usr/lib64/firefox/libxul.so #16 0x00007f213344e026 in nsRefreshDriver::Tick(long, mozilla::TimeStamp) () from /usr/lib64/firefox/libxul.so #17 0x00007f213344f429 in mozilla::RefreshDriverTimer::Tick(long, mozilla::TimeStamp) () from /usr/lib64/firefox/libxul.so #18 0x00007f213344f55a in mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::TickRefreshDriver(mozilla::TimeStamp) () from /usr/lib64/firefox/libxul.so #19 0x00007f213344e60a in nsRunnableMethodImpl<void (mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::*)(mozilla::TimeStamp), true, mozilla::TimeStamp>::Run() () from /usr/lib64/firefox/libxul.so #20 0x00007f21320a6eef in nsThread::ProcessNextEvent(bool, bool*) () from /usr/lib64/firefox/libxul.so #21 0x00007f21320c1c82 in NS_ProcessNextEvent(nsIThread*, bool) () from /usr/lib64/firefox/libxul.so #22 0x00007f21322998d4 in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) () from /usr/lib64/firefox/libxul.so #23 0x00007f213227b7ff in MessageLoop::Run() () from /usr/lib64/firefox/libxul.so ---Type <return> to continue, or q <return> to quit--- #24 0x00007f213330fc6c in nsBaseAppShell::Run() () from /usr/lib64/firefox/libxul.so #25 0x00007f21338d510f in nsAppStartup::Run() () from /usr/lib64/firefox/libxul.so #26 0x00007f213390e2e0 in XREMain::XRE_mainRun() () from /usr/lib64/firefox/libxul.so #27 0x00007f213390e5ce in XREMain::XRE_main(int, char**, nsXREAppData const*) () from /usr/lib64/firefox/libxul.so #28 0x00007f213390e7f9 in XRE_main () from /usr/lib64/firefox/libxul.so #29 0x0000000000405943 in do_main(int, char**, nsIFile*) () #30 0x0000000000405106 in main () Core was generated by `firefox'. Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007f4ac44405f9 in raise () from /lib64/libpthread.so.0 #1 0x00007f4ac14083db in nsProfileLock::FatalSignalHandler(int, siginfo_t*, void*) () from /usr/lib64/firefox/libxul.so #2 0x00007f4ac16dcf41 in AsmJSFaultHandler(int, siginfo_t*, void*) () from /usr/lib64/firefox/libxul.so #3 <signal handler called> #4 0x00007f4ac34a49c0 in ?? () #5 0x00007f4ac1899260 in js::ConstraintTypeSet::sweep(JS::Zone*, js::AutoClearTypeInferenceStateOnOOM&) () from /usr/lib64/firefox/libxul.so #6 0x00007f4ac187d021 in JSScript::maybeSweepTypes(js::AutoClearTypeInferenceStateOnOOM*) () from /usr/lib64/firefox/libxul.so #7 0x00007f4ac1b65e03 in js::gc::GCRuntime::sweepPhase(js::SliceBudget&) () from /usr/lib64/firefox/libxul.so #8 0x00007f4ac1b66520 in js::gc::GCRuntime::incrementalCollectSlice(js::SliceBudget&, JS::gcreason::Reason) () from /usr/lib64/firefox/libxul.so #9 0x00007f4ac1b67149 in js::gc::GCRuntime::gcCycle(bool, js::SliceBudget&, JS::gcreason::Reason) () from /usr/lib64/firefox/libxul.so #10 0x00007f4ac1b673dd in js::gc::GCRuntime::collect(bool, js::SliceBudget, JS::gcreason::Reason) () from /usr/lib64/firefox/libxul.so #11 0x00007f4ac1b688ee in JS::IncrementalGCSlice(JSRuntime*, JS::gcreason::Reason, long) () from /usr/lib64/firefox/libxul.so #12 0x00007f4ac03b8520 in nsJSContext::GarbageCollectNow(JS::gcreason::Reason, nsJSContext::IsIncremental, nsJSContext::IsShrinking, long) () from /usr/lib64/firefox/libxul.so #13 0x00007f4abfba84b6 in nsTimerImpl::Fire() () from /usr/lib64/firefox/libxul.so #14 0x00007f4abfba87b3 in nsTimerEvent::Run() () from /usr/lib64/firefox/libxul.so #15 0x00007f4abfba6eef in nsThread::ProcessNextEvent(bool, bool*) () from /usr/lib64/firefox/libxul.so #16 0x00007f4abfbc1c82 in NS_ProcessNextEvent(nsIThread*, bool) () from /usr/lib64/firefox/libxul.so #17 0x00007f4abfd998d4 in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) () from /usr/lib64/firefox/libxul.so #18 0x00007f4abfd7b7ff in MessageLoop::Run() () from /usr/lib64/firefox/libxul.so #19 0x00007f4ac0e0fc6c in nsBaseAppShell::Run() () from /usr/lib64/firefox/libxul.so #20 0x00007f4ac13d510f in nsAppStartup::Run() () from /usr/lib64/firefox/libxul.so #21 0x00007f4ac140e2e0 in XREMain::XRE_mainRun() () from /usr/lib64/firefox/libxul.so #22 0x00007f4ac140e5ce in XREMain::XRE_main(int, char**, nsXREAppData const*) () from /usr/lib64/firefox/libxul.so #23 0x00007f4ac140e7f9 in XRE_main () from /usr/lib64/firefox/libxul.so #24 0x0000000000405943 in do_main(int, char**, nsIFile*) () #25 0x0000000000405106 in main ()
I'm running Gentoo Linux x86-64 using gcc 4.9.3 (no crazy optimization flags). No real experience using gdb, but happy to try and extract any further information given a suitable incantation.
May be related to https://bugzilla.mozilla.org/show_bug.cgi?id=1174997
この投稿は cor-el により
すべての返信 (2)
It does not look like the previous latest version is stable either:
That is just on place the packages it for your operating system. Currently Firefox for Linux is packaged by one version.
If you have submitted crash reports then please post the IDs of one or more recent crash reports that start with "bp-":
- bp-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
You can find the report ID of recent crash reports on the "Help > Troubleshooting Information" page (about:support).
- click the "All Crash Reports" button on this page to open the about:crashes page and see all crash reports.
Alternatively you can open about:crashes via the location/address bar.
See also:
- http://kb.mozillazine.org/Mozilla_Crash_Reporter
- https://support.mozilla.org/kb/Mozilla+Crash+Reporter
You can check for issues caused by plugins and set plugins to "Ask to Activate" on the "Firefox menu button/Tools > Add-ons > Plugins" page.
- plugins are not affected by Firefox Safe Mode