Closed Bug 39065 Opened 25 years ago Closed 25 years ago

[crash] possible double free on memory

Categories

(Core :: XPCOM, defect, P3)

x86
Linux
defect

Tracking

()

VERIFIED WORKSFORME

People

(Reporter: jgangemi, Assigned: dp)

References

()

Details

(Keywords: crash)

moz crashes when viewing all checkins on bonsia - here's the stack trace (gdb) where #0 0x4018e849 in __pthread_lock (lock= Cannot access memory at address 0xbfe01fc8. ) at spinlock.c:41 #1 0x4018be3a in __pthread_mutex_lock (mutex=0x4031dfb0) at mutex.c:84 #2 0x402857fb in __libc_free (mem=0x8cef868) at malloc.c:2965 #3 0x40164eb0 in PR_Free () from /home/package/libnspr4.so #4 0x400b3be8 in nsAllocatorImpl::Free () from /home/package/libxpcom.so #5 0x400b3ce4 in nsAllocator::Free () from /home/package/libxpcom.so #6 0x4008d7e2 in nsXPIDLCString::operator= () from /home/package/libxpcom.so #7 0x400a01ce in nsLocalFile::InitWithPath () from /home/package/libxpcom.so #8 0x400a2816 in NS_NewLocalFile () from /home/package/libxpcom.so #9 0x408bf539 in NSGetModule () from /home/package/components/libnecko.so it was mentioned on #mozilla that it may be a double freeing of memory
*** Bug 39064 has been marked as a duplicate of this bug. ***
not a blocker
Severity: blocker → critical
Keywords: crash
this bug causes crashes on way more pages then bonsia - bonsia is just the easiest to see it on b/c it will happen right away - other times it takes a little more browsing before it occurs.
added url test case
*shrug* perhaps something was wrong w/ something on my end b/c it works now :)
marking wfm
Status: UNCONFIRMED → RESOLVED
Closed: 25 years ago
Resolution: --- → WORKSFORME
- Per last comments, age of bug, and no reopen - Marking Verified/Fixed. Please reopen if still a problem.
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.