[Bug 403659] New: Firefox 3 reports free(): invalid pointer and hangs
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=403659 Summary: Firefox 3 reports free(): invalid pointer and hangs Product: openSUSE 11.0 Version: Final Platform: i686 OS/Version: openSUSE 11.0 Status: NEW Severity: Major Priority: P5 - None Component: Firefox AssignedTo: bnc-team-mozilla@forge.provo.novell.com ReportedBy: Markus.Kuhn@cl.cam.ac.uk QAContact: qa@suse.de Found By: Other I just received on a freshly updated openSUSE 11 (final) the online update to MozillaFirefox-3.0-0.1: Mozilla Firefox Web Browser MozillaFirefox-translations-3.0-0.1: Translations for MozillaFirefox I also have installed mozilla-xulrunner190-1.9.0-0.1: Mozilla Runtime Environment 1.9 mozilla-xulrunner190-gnomevfs-1.9.0-0.1: XULRunner components depending on gnome-vfs mozilla-xulrunner181-1.8.1.13-22.1: Mozilla Runtime Environment 1.8.1.x mozilla-xulrunner190-translations-1.9.0-0.1: Translations for XULRunner 1.9 While the previous beta version that came with the original openSUSE 11 distribution ran fine, the online-updated final Firefox 3 asks me only in a pop-up window whether I want to restore the previous session or start a new one, and when I click either option, it writes to stdout the following "glibc detected" message and then hangs (no main window opens): $ firefox New crash observer App startup [1214390495925] (4): Skipping no location: chrome://global/content/commonDialog.xul new doRestore [1214390504754] (4): Skipping no location: chrome://browser/content/browser.xul *** glibc detected *** /usr/lib/firefox/firefox: free(): invalid pointer: 0xb7f3a028 *** ======= Backtrace: ========= /lib/libc.so.6[0xb7d21fc4] /lib/libc.so.6(cfree+0x9c)[0xb7d2395c] /lib/ld-linux.so.2[0xb7f41379] /lib/ld-linux.so.2[0xb7f43772] /lib/ld-linux.so.2[0xb7f4d027] /lib/ld-linux.so.2[0xb7f48e26] /lib/ld-linux.so.2[0xb7f4ca2c] /lib/libc.so.6[0xb7dba232] /lib/ld-linux.so.2[0xb7f48e26] /lib/libc.so.6[0xb7dba331] /lib/libc.so.6(__libc_dlopen_mode+0x3b)[0xb7dba45b] /lib/libc.so.6(__nss_lookup_function+0x2a5)[0xb7d93df5] /lib/libc.so.6[0xb7d6ae22] /lib/libc.so.6(getaddrinfo+0x19c)[0xb7d6d04c] /usr/lib/libnspr4.so(PR_GetAddrInfoByName+0x129)[0xb7bfc009] /usr/lib/xulrunner-1.9.0/libxul.so[0xb71d05cc] /usr/lib/libnspr4.so[0xb7c09ad1] /lib/libpthread.so.0[0xb7f28175] /lib/libc.so.6(clone+0x5e)[0xb7d83dce] ======= Memory map: ======== 08048000-0804f000 r-xp 00000000 08:01 86650 /usr/lib/firefox/firefox 0804f000-08050000 r--p 00006000 08:01 86650 /usr/lib/firefox/firefox 08050000-08051000 rw-p 00007000 08:01 86650 /usr/lib/firefox/firefox 08051000-08e5d000 rw-p 08051000 00:00 0 [heap] b1e00000-b1e21000 rw-p b1e00000 00:00 0 b1e21000-b1f00000 ---p b1e21000 00:00 0 b1f0d000-b1f0e000 ---p b1f0d000 00:00 0 b1f0e000-b270e000 rw-p b1f0e000 00:00 0 b270e000-b270f000 ---p b270e000 00:00 0 b270f000-b2f0f000 rw-p b270f000 00:00 0 b2f0f000-b2f16000 r-xp 00000000 08:01 327856 /usr/lib/xulrunner-1.9.0/components/libnkgnomevfs.so b2f16000-b2f17000 r--p 00007000 08:01 327856 /usr/lib/xulrunner-1.9.0/components/libnkgnomevfs.so b2f17000-b2f18000 rw-p 00008000 08:01 327856 /usr/lib/xulrunner-1.9.0/components/libnkgnomevfs.so b2f18000-b2f20000 r-xp 00000000 08:01 22107 /usr/lib/libfam.so.0.0.0 b2f20000-b2f21000 r--p 00007000 08:01 22107 /usr/lib/libfam.so.0.0.0 b2f21000-b2f22000 rw-p 00008000 08:01 22107 /usr/lib/libfam.so.0.0.0 b2f22000-b2f28000 r-xp 00000000 08:01 17158 /lib/libacl.so.1.1.0 b2f28000-b2f29000 r--p 00005000 08:01 17158 /lib/libacl.so.1.1.0 b2f29000-b2f2a000 rw-p 00006000 08:01 17158 /lib/libacl.so.1.1.0 b2f2a000-b2f2e000 r-xp 00000000 08:01 15382 /lib/libattr.so.1.1.0 b2f2e000-b2f2f000 r--p 00003000 08:01 15382 /lib/libattr.so.1.1.0 b2f2f000-b2f30000 rw-p 00004000 08:01 15382 /lib/libattr.so.1.1.0 b2f30000-b2f3c000 r-xp 00000000 08:01 759374 /usr/lib/gnome-vfs-2.0/modules/libfile.so b2f3c000-b2f3d000 r--p 0000b000 08:01 759374 /usr/lib/gnome-vfs-2.0/modules/libfile.so b2f3d000-b2f3e000 rw-p 0000c000 08:01 759374 /usr/lib/gnome-vfs-2.0/modules/libfile.so b2f3e000-b2f51000 r--s 00000000 08:01 100970 /usr/share/mime/mime.cache b2f51000-b2f58000 r-xp 00000000 08:01 41112 /usr/lib/xulrunner-1.9.0/components/libmozgnome.so b2f58000-b2f59000 r--p 00007000 08:01 41112 /usr/lib/xulrunner-1.9.0/components/libmozgnome.so b2f59000-b2f5a000 rw-p 00008000 08:01 41112 /usr/lib/xulrunner-1.9.0/components/libmozgnome.so b2f5a000-b2f9e000 r--p 00000000 08:01 211501 /usr/share/fonts/truetype/arial.ttf b2f9e000-b2fe4000 r--p 00000000 08:01 211088 /usr/share/fonts/truetype/arialbd.ttf b2fe4000-b2fed000 r-xp 00000000 08:01 802115 /usr/lib/xulrunner-1.9.0/components/libimgicon.so b2fed000-b2fee000 r--p 00009000 08:01 802115 /usr/lib/xulrunner-1.9.0/components/libimgicon.so b2fee000-b2fef000 rw-p 0000a000 08:01 802115 /usr/lib/xulrunner-1.9.0/components/libimgicon.so b2fef000-b2ff1000 r-xp 00000000 08:01 801483 /usr/lib/pango/1.6.0/modules/pango-basic-fc.so b2ff1000-b2ff2000 r--p 00001000 08:01 801483 /usr/lib/pango/1.6.0/modules/pango-basic-fc.so b2ff2000-b2ff3000 rw-p 00002000 08:01 801483 /usr/lib/pango/1.6.0/modules/pango-basic-fc.so b2ff3000-b3037000 r--p 00000000 08:01 211501 /usr/share/fonts/truetype/arial.ttf b3037000-b305c000 r-xp 00000000 08:01 86595 /usr/lib/firefox/components/libbrowsercomps.so b305c000-b305d000 r--p 00025000 08:01 86595 /usr/lib/firefox/components/libbrowsercomps.so b305d000-b305e000 rw-p 00026000 08:01 86595 /usr/lib/firefox/components/libbrowsercomps.so b305e000-b30a3000 r-xp 00000000 08:01 6855 /usr/lib/libnssckbi.so b30a3000-b30aa000 r--p 00045000 08:01 6855 /usr/lib/libnssckbi.so b30aa000-b30ae000 rw-p 0004c000 08:01 6855 /usr/lib/libnssckbi.so b30ae000-b30f3000 r-xp 00000000 08:01 227677 /usr/lib/libfreebl3.so b30f3000-b30f4000 r--p 00044000 08:01 227677 /usr/lib/libfreebl3.so b30f4000-b30f5000 rw-p 00045000 08:01 227677 /usr/lib/libfreebl3.s When I do an strace, the last few system calls before the glibc free() error message is displayed are: [pid 10068] stat64("/usr/lib/mozilla-xulrunner190-1.9.0/sse2", 0xb300779c) = -1 ENOENT (No such file or directory) [pid 10068] open("/usr/lib/mozilla-xulrunner190-1.9.0/libnss_lwres.so.2", O_RDONLY) = -1 ENOENT (No such file or directory) [pid 10068] stat64("/usr/lib/mozilla-xulrunner190-1.9.0", 0xb300779c) = -1 ENOENT (No such file or directory) [pid 10068] open("/dev/tty", O_RDWR|O_NOCTTY|O_NONBLOCK) = 48 [pid 10068] writev(48, [{"*** glibc detected *** ", 23}, {"/usr/lib/firefox/firefox", 24}, {": ", 2}, {"free(): invalid pointer", 23}, {": 0x", 4}, {"b8034028", 8}, {" ***\n", 5}], 7*** glibc detected *** /usr/lib/firefox/firefox: free(): invalid pointer: 0xb8034028 *** ) = 89 Any ideas? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=403659
User Markus.Kuhn@cl.cam.ac.uk added comment
https://bugzilla.novell.com/show_bug.cgi?id=403659#c1
Markus Kuhn
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
https://bugzilla.novell.com/show_bug.cgi?id=403659
User Markus.Kuhn@cl.cam.ac.uk added comment
https://bugzilla.novell.com/show_bug.cgi?id=403659#c2
--- Comment #2 from Markus Kuhn
participants (1)
-
bugzilla_noreply@novell.com