Bug 16206

Summary: Charts in Yahoo Finance crash swfdec
Product: swfdec Reporter: Eric Smith <eric225125>
Component: libraryAssignee: swfdec ml <swfdec>
Status: RESOLVED DUPLICATE QA Contact: swfdec ml <swfdec>
Severity: critical    
Priority: medium    
Version: git   
Hardware: Other   
OS: All   
URL: http://finance.yahoo.com/echarts?s=%5EDJI#symbol=%5EDJI;range=1d
Whiteboard:
i915 platform: i915 features:
Attachments: Output from firefox

Description Eric Smith 2008-06-02 14:19:21 UTC
Crashed with latest git (06/02/08)
backtrace:

Program received signal SIGABRT, Aborted.
[Switching to Thread 0x7f7718e1a700 (LWP 18914)]
0x0000003001831185 in raise () from /lib/libc.so.6
(gdb) bt
#0  0x0000003001831185 in raise () from /lib/libc.so.6
#1  0x0000003001832630 in abort () from /lib/libc.so.6
#2  0x0000003002c5c660 in g_assertion_message () from /usr/lib/libglib-2.0.so.0
#3  0x0000003002c5cb22 in g_assertion_message_expr () from /usr/lib/libglib-2.0.so.0
#4  0x00007f770d989a54 in swfdec_movie_invalidate () from /usr/lib/libswfdec-0.7.so.0
#5  0x00007f770d98b62c in swfdec_movie_invalidate_last () from /usr/lib/libswfdec-0.7.so.0
#6  0x00007f770d9bab1c in swfdec_text_field_movie_text_changed () from /usr/lib/libswfdec-0.7.so.0
#7  0x000000300400cdca in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#8  0x00000030040211c0 in ?? () from /usr/lib/libgobject-2.0.so.0
#9  0x0000003004022d31 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#10 0x0000003004023104 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#11 0x00007f770d9b9ca3 in swfdec_text_field_movie_set_text () from /usr/lib/libswfdec-0.7.so.0
#12 0x00007f770d9bf894 in swfdec_text_field_movie_do_set_text () from /usr/lib/libswfdec-0.7.so.0
#13 0x00007f770d956691 in swfdec_as_context_run () from /usr/lib/libswfdec-0.7.so.0
#14 0x00007f770d9689a1 in swfdec_as_object_do_set () from /usr/lib/libswfdec-0.7.so.0
#15 0x00007f770d95d8a2 in swfdec_action_set_member () from /usr/lib/libswfdec-0.7.so.0
#16 0x00007f770d956973 in swfdec_as_context_run () from /usr/lib/libswfdec-0.7.so.0
#17 0x00007f770d95bb1f in swfdec_as_function_apply () from /usr/lib/libswfdec-0.7.so.0
#18 0x00007f770d956691 in swfdec_as_context_run () from /usr/lib/libswfdec-0.7.so.0
#19 0x00007f770d95bbf7 in swfdec_as_function_do_call () from /usr/lib/libswfdec-0.7.so.0
#20 0x00007f770d956691 in swfdec_as_context_run () from /usr/lib/libswfdec-0.7.so.0
#21 0x00007f770d967fdb in swfdec_as_object_call () from /usr/lib/libswfdec-0.7.so.0
#22 0x00007f770d988093 in swfdec_load_object_on_finish () from /usr/lib/libswfdec-0.7.so.0
#23 0x00007f770d98798f in swfdec_load_object_stream_target_close () from /usr/lib/libswfdec-0.7.so.0
#24 0x00007f770d9b0857 in swfdec_stream_process () from /usr/lib/libswfdec-0.7.so.0
#25 0x00007f770d99c2a3 in swfdec_player_perform_external_actions () from /usr/lib/libswfdec-0.7.so.0
#26 0x00007f770d99da18 in swfdec_player_iterate () from /usr/lib/libswfdec-0.7.so.0
#27 0x00007f770d99c4ab in swfdec_player_do_advance () from /usr/lib/libswfdec-0.7.so.0
#28 0x000000300400cdca in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#29 0x0000003004021354 in ?? () from /usr/lib/libgobject-2.0.so.0
#30 0x0000003004022d31 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#31 0x0000003004023104 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#32 0x00007f770d99750e in swfdec_player_advance () from /usr/lib/libswfdec-0.7.so.0
#33 0x00007f770e2af6b8 in swfdec_iterate_dispatch () from /usr/lib/libswfdec-gtk-0.7.so.0
#34 0x0000003002c38552 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#35 0x0000003002c3bcf5 in ?? () from /usr/lib/libglib-2.0.so.0
#36 0x0000003002c3c22c in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0
#37 0x00007f7716d1abc8 in ?? () from /usr/lib64/xulrunner-1.9/components/libwidget_gtk2.so
#38 0x00007f7716d1b08e in ?? () from /usr/lib64/xulrunner-1.9/components/libwidget_gtk2.so
#39 0x0000003000c77cdf in ?? () from /usr/lib64/xulrunner-1.9/libxpcom_core.so
#40 0x0000003000c40929 in NS_ProcessNextEvent_P () from /usr/lib64/xulrunner-1.9/libxpcom_core.so
#41 0x00007f7716d1ad53 in ?? () from /usr/lib64/xulrunner-1.9/components/libwidget_gtk2.so
#42 0x00007f7715e1f6ce in ?? () from /usr/lib64/xulrunner-1.9/components/libtoolkitcomps.so
#43 0x0000003001019f00 in XRE_main () from /usr/lib64/xulrunner-1.9/libxul.so
#44 0x0000000000401611 in ?? ()
#45 0x000000300181e1f4 in __libc_start_main () from /lib/libc.so.6
#46 0x0000000000401189 in ?? ()
#47 0x00007fff20e37db8 in ?? ()
#48 0x0000000000000000 in ?? ()
Comment 1 Eric Smith 2008-06-02 14:20:10 UTC
Created attachment 16878 [details]
Output from firefox
Comment 2 Riccardo Magliocchetti 2008-06-08 02:14:34 UTC
Eric can you post the full backtrace (bt full)? i'm tempted to close this as duplicate of bug 16241.
Comment 3 Eric Smith 2008-06-16 09:05:14 UTC
I only recompiled swfdec with debug info. Do you need the symbols from any other packages?

Program received signal SIGABRT, Aborted.
0x00007fa23d199535 in raise () from /lib/libc.so.6
(gdb) bt full
#0  0x00007fa23d199535 in raise () from /lib/libc.so.6
No symbol table info available.
#1  0x00007fa23d19a9e0 in abort () from /lib/libc.so.6
No symbol table info available.
#2  0x0000003002c5c660 in g_assertion_message () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#3  0x0000003002c5cb22 in g_assertion_message_expr ()
   from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#4  0x00007fa22b8e220b in swfdec_movie_invalidate (movie=0x3496c70, 
    parent_to_global=0x7fff45df2a50, new_contents=0) at swfdec_movie.c:118
	matrix = {xx = 6.9532015253573652e-310, yx = 6.9334451687708668e-310, 
  xy = 2.121996802811715e-314, yy = 1.4268176942947556e-312, 
  x0 = 5.4544847300873618e-321, y0 = 2.2911405007725294e-316}
	__PRETTY_FUNCTION__ = "swfdec_movie_invalidate"
#5  0x00007fa22b8e4393 in swfdec_movie_invalidate_last (movie=0x3496c70)
    at swfdec_movie.c:147
	matrix = {xx = 1, yx = 0, xy = 0, yy = 1, x0 = 0, y0 = 0}
	__PRETTY_FUNCTION__ = "swfdec_movie_invalidate_last"
#6  0x00007fa22b91696c in swfdec_text_field_movie_text_changed (
    buffer=<value optimized out>, text=0x3496c70)
    at swfdec_text_field_movie.c:778
No locals.
---Type <return> to continue, or q <return> to quit---
#7  0x000000300400cdca in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#8  0x00000030040211c0 in ?? () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#9  0x0000003004022d31 in g_signal_emit_valist ()
   from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#10 0x0000003004023104 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#11 0x00007fa22b9159af in swfdec_text_field_movie_set_text (text=0x3496c70, 
    str=0x2e3a341 "�� 2008 Yahoo! Inc.", html=0)
    at swfdec_text_field_movie.c:1003
	length = 0
	__PRETTY_FUNCTION__ = "swfdec_text_field_movie_set_text"
#12 0x00007fa22b91b6c9 in swfdec_text_field_movie_do_set_text (cx=0x2625040, 
    object=0x3496c70, argc=1, argv=0x2b3e170, ret=<value optimized out>)
    at swfdec_text_field_movie_as.c:93
	text = (SwfdecTextFieldMovie *) 0x3496c70
	value = 0x2e3a341 "�� 2008 Yahoo! Inc."
#13 0x00007fa22b8ab70a in swfdec_as_context_run (context=0x2625040)
    at swfdec_as_context.c:887
	argv = (SwfdecAsValue *) 0x2b3e170
	native = (SwfdecAsNativeFunction *) 0x40ec340
---Type <return> to continue, or q <return> to quit---
	rval = {type = SWFDEC_AS_TYPE_UNDEFINED, value = {boolean = 0, 
    number = 0, string = 0x0, object = 0x0}}
	frame = (SwfdecAsFrame *) 0x40fddd0
	last_frame = (SwfdecAsFrame *) 0x3115b30
	spec = <value optimized out>
	startpc = (const guint8 *) 0x7fa22b937720 "\002"
	pc = <value optimized out>
	endpc = (const guint8 *) 0x7fa22b8bd3fc "H\213��"
	nextpc = (const guint8 *) 0x40fddd0 ""
	exitpc = (const guint8 *) 0x2625040 "�\220�\001"
	check = (SwfdecAsValue *) 0x2b3e170
	action = 731084576
	len = 0
	data = (
    const guint8 *) 0x7fa22b8c169c "1�A\203~p\005L\211cXI\017G�H\211C`�S���fff.\017\037\204"
	original_version = 8
	step = (void (*)(SwfdecAsDebugger *, SwfdecAsContext *)) 0
	check_block = 731084576
	__PRETTY_FUNCTION__ = "swfdec_as_context_run"
#14 0x00007fa22b8be3a4 in swfdec_as_object_do_set (object=0x3496c70, 
    variable=0x7fa22b93865e "text", val=0x2b3e170, flags=<value optimized out>)
    at swfdec_as_object.c:496
---Type <return> to continue, or q <return> to quit---
	tmp = {type = SWFDEC_AS_TYPE_UNDEFINED, value = {boolean = 68147872, 
    number = 3.3669522392386602e-316, string = 0x40fdaa0 "", 
    object = 0x40fdaa0}}
	var = (SwfdecAsVariable *) 0x294c4f0
	watch = <value optimized out>
	proto = (SwfdecAsObject *) 0x2b77f60
	__PRETTY_FUNCTION__ = "swfdec_as_object_do_set"
#15 0x00007fa22b8b2a02 in swfdec_action_set_member (cx=0x2625040, 
    action=<value optimized out>, data=<value optimized out>, 
    len=<value optimized out>) at swfdec_as_interpret.c:740
	name = 0x30dc <Address 0x30dc out of bounds>
#16 0x00007fa22b8ab5fe in swfdec_as_context_run (context=0x2625040)
    at swfdec_as_context.c:995
	frame = (SwfdecAsFrame *) 0x40fdaa0
	last_frame = (SwfdecAsFrame *) 0x3115910
	spec = (const SwfdecActionSpec *) 0x7fa22bb79458
	startpc = (const guint8 *) 0x2a329a0 "CWS\b(S\006"
	pc = (const guint8 *) 0x2a76e8e "O\226\004"
	endpc = (const guint8 *) 0x2a97cc8 "\021\002"
	nextpc = (const guint8 *) 0x2a76e8f "\226\004"
	exitpc = (const guint8 *) 0x2a76eeb "O\226\004"
	check = (SwfdecAsValue *) 0x2b3e150
	action = 79
---Type <return> to continue, or q <return> to quit---
	len = 0
	data = (const guint8 *) 0x0
	original_version = 8
	step = (void (*)(SwfdecAsDebugger *, SwfdecAsContext *)) 0
	check_block = <value optimized out>
	__PRETTY_FUNCTION__ = "swfdec_as_context_run"
#17 0x00007fa22b8b0abc in swfdec_as_function_apply (cx=0x2625040, 
    object=<value optimized out>, argc=<value optimized out>, 
    argv=<value optimized out>, ret=0x7fff45df3500) at swfdec_as_function.c:240
	argv_pass = <value optimized out>
	length = 4
	fun = (SwfdecAsFunction *) 0x2e64600
	thisp = (SwfdecAsObject *) 0x3c4fcc0
#18 0x00007fa22b8ab70a in swfdec_as_context_run (context=0x2625040)
    at swfdec_as_context.c:887
	argv = (SwfdecAsValue *) 0x164fc20
	native = (SwfdecAsNativeFunction *) 0x21584f0
	rval = {type = SWFDEC_AS_TYPE_UNDEFINED, value = {boolean = 0, 
    number = 0, string = 0x0, object = 0x0}}
	frame = (SwfdecAsFrame *) 0x3115b30
	last_frame = (SwfdecAsFrame *) 0x0
	spec = <value optimized out>
	startpc = (const guint8 *) 0x2a329a0 "CWS\b(S\006"
---Type <return> to continue, or q <return> to quit---
	pc = <value optimized out>
	endpc = (const guint8 *) 0x2a97cc8 "\021\002"
	nextpc = (const guint8 *) 0x2a8074b ">\207\001"
	exitpc = (const guint8 *) 0x2a8074c "\207\001"
	check = (SwfdecAsValue *) 0x0
	action = 16
	len = 0
	data = (const guint8 *) 0x0
	original_version = 8
	step = (void (*)(SwfdecAsDebugger *, SwfdecAsContext *)) 0
	check_block = 16
	__PRETTY_FUNCTION__ = "swfdec_as_context_run"
#19 0x00007fa22b8b0b94 in swfdec_as_function_do_call (cx=0x2625040, 
    object=0x3c5e320, argc=<value optimized out>, argv=<value optimized out>, 
    ret=0x7fff45df3620) at swfdec_as_function.c:193
	fun = (SwfdecAsFunction *) 0x3c5e320
	thisp = (SwfdecAsObject *) 0x3c6a5e0
#20 0x00007fa22b8ab70a in swfdec_as_context_run (context=0x2625040)
    at swfdec_as_context.c:887
	argv = (SwfdecAsValue *) 0x22a88e0
	native = (SwfdecAsNativeFunction *) 0xf89330
	rval = {type = SWFDEC_AS_TYPE_UNDEFINED, value = {boolean = 0, 
    number = 0, string = 0x0, object = 0x0}}
---Type <return> to continue, or q <return> to quit---
	frame = (SwfdecAsFrame *) 0x3115910
	last_frame = (SwfdecAsFrame *) 0x0
	spec = <value optimized out>
	startpc = (const guint8 *) 0x2a329a0 "CWS\b(S\006"
	pc = <value optimized out>
	endpc = (const guint8 *) 0x2a97cc8 "\021\002"
	nextpc = (const guint8 *) 0x2a79f4c "\027\226\002"
	exitpc = (const guint8 *) 0x2a79f78 "O\226\r"
	check = (SwfdecAsValue *) 0x0
	action = 64
	len = 0
	data = (const guint8 *) 0x0
	original_version = 4294967295
	step = (void (*)(SwfdecAsDebugger *, SwfdecAsContext *)) 0
	check_block = 64
	__PRETTY_FUNCTION__ = "swfdec_as_context_run"
#21 0x00007fa22b8bc832 in swfdec_as_object_call (object=0x3c5c980, 
    name=<value optimized out>, argc=1, argv=0x7fff45df36c0, 
    return_value=<value optimized out>) at swfdec_as_object.c:1255
	tmp = {type = SWFDEC_AS_TYPE_UNDEFINED, value = {boolean = 63347760, 
    number = 3.1297951956996284e-316, string = 0x3c69c30 "\220\220�\002", 
    object = 0x3c69c30}}
	fun = (SwfdecAsFunction *) 0x3c69c30
---Type <return> to continue, or q <return> to quit---
	__PRETTY_FUNCTION__ = "swfdec_as_object_call"
#22 0x00007fa22b8dfac3 in swfdec_load_object_on_finish (target=0x30dc, 
    text=<value optimized out>) at swfdec_load_object_as.c:44
	val = {type = SWFDEC_AS_TYPE_STRING, value = {boolean = 28844545, 
    number = 1.4251098754421899e-316, 
    string = 0x1b82201 "uri:/instrument/1.0/^dji/chartdata;type=quote;range=1d/csv/\nticker:^dji\nunit:MIN\ntimezone:EDT\ngmtoffset:-14400\nprevious_close:12307.3496\nTimestamp:1213623000,1213646400\nlabels:1213624800,1213628400,12"..., 
    object = 0x1b82201}}
#23 0x00007fa22b8df17f in swfdec_load_object_stream_target_close (
    target=<value optimized out>, stream=<value optimized out>)
    at swfdec_load_object.c:99
	load_object = <value optimized out>
	text = 0x1bc2200 ""
#24 0x00007fa22b90bee8 in swfdec_stream_process (streamp=0x3c746e0, 
    unused=<value optimized out>) at swfdec_stream.c:220
	stream = (SwfdecStream *) 0x30dc
	priv = (SwfdecStreamPrivate *) 0x3c74740
	__PRETTY_FUNCTION__ = "swfdec_stream_process"
#25 0x00007fa22b8f5ccb in swfdec_player_perform_external_actions (
    player=0x2625040) at swfdec_player.c:550
	priv = (SwfdecPlayerPrivate *) 0x26251b0
	i = <value optimized out>
---Type <return> to continue, or q <return> to quit---
	__PRETTY_FUNCTION__ = "swfdec_player_perform_external_actions"
#26 0x00007fa22b8f75d5 in swfdec_player_iterate (timeout=<value optimized out>)
    at swfdec_player.c:1746
	priv = (SwfdecPlayerPrivate *) 0x26251b0
	player = (SwfdecPlayer *) 0x2625040
	walk = <value optimized out>
	__PRETTY_FUNCTION__ = "swfdec_player_iterate"
#27 0x00007fa22b8f5f3f in swfdec_player_do_advance (player=0x2625040, 
    msecs=<value optimized out>, audio_samples=<value optimized out>)
    at swfdec_player.c:1815
	priv = (SwfdecPlayerPrivate *) 0x26251b0
	timeout = (SwfdecTimeout *) 0x2625440
	target_time = 392652288
	__PRETTY_FUNCTION__ = "swfdec_player_do_advance"
#28 0x000000300400cdca in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#29 0x0000003004021354 in ?? () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#30 0x0000003004022d31 in g_signal_emit_valist ()
   from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#31 0x0000003004023104 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
---Type <return> to continue, or q <return> to quit---
#32 0x00007fa22b8f0841 in swfdec_player_advance (player=0x2625040, msecs=25)
    at swfdec_player.c:3140
	max = <value optimized out>
	__PRETTY_FUNCTION__ = "swfdec_player_advance"
#33 0x00007fa22bdf7a18 in swfdec_iterate_dispatch (source_=0x2cd85e0, 
    callback=<value optimized out>, user_data=<value optimized out>)
    at swfdec_source.c:109
	diff = -1
#34 0x0000003002c38552 in g_main_context_dispatch ()
   from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#35 0x0000003002c3bcf5 in ?? () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#36 0x0000003002c3c22c in g_main_context_iteration ()
   from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#37 0x00007fa238509d38 in ?? ()
   from /usr/lib64/xulrunner-1.9/components/libwidget_gtk2.so
No symbol table info available.
#38 0x00007fa238509fc7 in ?? ()
   from /usr/lib64/xulrunner-1.9/components/libwidget_gtk2.so
No symbol table info available.
#39 0x00007fa23ca7efcf in ?? () from /usr/lib64/xulrunner-1.9/libxpcom_core.so
---Type <return> to continue, or q <return> to quit---
No symbol table info available.
#40 0x00007fa23ca46cc9 in NS_ProcessNextEvent_P ()
   from /usr/lib64/xulrunner-1.9/libxpcom_core.so
No symbol table info available.
#41 0x00007fa23850a0c5 in ?? ()
   from /usr/lib64/xulrunner-1.9/components/libwidget_gtk2.so
No symbol table info available.
#42 0x00007fa23784653e in ?? ()
   from /usr/lib64/xulrunner-1.9/components/libtoolkitcomps.so
No symbol table info available.
#43 0x00007fa23b5324d1 in XRE_main () from /usr/lib64/xulrunner-1.9/libxul.so
No symbol table info available.
#44 0x0000000000401659 in ?? ()
No symbol table info available.
#45 0x00007fa23d1864a4 in __libc_start_main () from /lib/libc.so.6
No symbol table info available.
#46 0x0000000000401189 in ?? ()
No symbol table info available.
#47 0x00007fff45df5728 in ?? ()
No symbol table info available.
#48 0x0000000000000000 in ?? ()
No symbol table info available.
(gdb) 
Comment 4 Riccardo Magliocchetti 2008-06-17 02:32:24 UTC
Thanks Eric for the full backtrace this is a known issue. Closing as duplicate. 

*** This bug has been marked as a duplicate of bug 16241 ***

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.