pkg/42988: firefox-3.6.2 often core dumps on right click

[Thomas Klausner <wiz%NetBSD.org@localhost>]

>Number:         42988
>Category:       pkg
>Synopsis:       firefox-3.6.2 often core dumps on right click
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Mar 17 08:00:01 +0000 2010
>Originator:     Thomas Klausner
>Release:        NetBSD 5.99.24
>Organization:
Curiosity is the very basis of education and if you tell me that 
curiosity killed the cat, I say only that the cat died nobly.
- Arnold Edinborough
>Environment:
        
        
System: NetBSD yt.nih.at 5.99.24 NetBSD 5.99.24 (YT) #40: Sun Mar 14 18:41:13 
CET 2010 wiz%yt.nih.at@localhost:/archive/cvs/src/sys/arch/amd64/compile/obj/YT 
amd64
Architecture: x86_64
Machine: amd64
>Description:
firefox often core dumps when right-clicking on a link or sometimes even
in a text entry box.
The backtrace usually starts like this:

Program terminated with signal 4, Illegal instruction.
#0  0x00007f7ff32e387a in _lwp_kill () from /usr/lib/libc.so.12
(gdb) bt
#0  0x00007f7ff32e387a in _lwp_kill () from /usr/lib/libc.so.12
#1  0x00007f7ffbca8155 in XRE_LockProfileDirectory ()
   from /usr/pkg/lib/xulrunner/libxul.so
#2  <signal handler called>
#3  0x00007f7fe2402985 in ?? ()
#4  <signal handler called>
#5  0x00007f7ff326e55a in ___lwp_park50 () from /usr/lib/libc.so.12
#6  0x00007f7ffd808890 in pthread_cond_timedwait (cond=0x7f7fe95110e0,
    mutex=0x7f7ffdb9c5f0, abstime=0x7f7fe39ffcd0)
    at /archive/cvs/src/lib/libpthread/pthread_cond.c:148
#7  0x00007f7ff1201ea7 in g_cond_timed_wait_posix_impl ()
   from /usr/pkg/lib/libgthread-2.0.so.0
#8  0x00007f7ff5213f90 in g_async_queue_sort ()
   from /usr/pkg/lib/libglib-2.0.so.0
#9  0x00007f7ff5214080 in g_async_queue_timed_pop ()
   from /usr/pkg/lib/libglib-2.0.so.0
#10 0x00007f7ff5258dc7 in g_thread_pool_push ()
   from /usr/pkg/lib/libglib-2.0.so.0
#11 0x00007f7ff5257601 in g_thread_create_full ()
   from /usr/pkg/lib/libglib-2.0.so.0
#12 0x00007f7ffd80a660 in pthread__create_tramp (cookie=<value optimized out>)
    at /archive/cvs/src/lib/libpthread/pthread.c:470
#13 0x00007f7ff326e570 in ___lwp_park50 () from /usr/lib/libc.so.12
#14 0x00007f7fe3a00000 in ?? ()

>How-To-Repeat:
Open a site with links, start right-clicking.
What usually works quickly is opening a site with many links, middle-clicking
some of them to get more open tabs, and repeat the following:
0. go to new tab
1. right click on a link, save as (can be cancelled out of, doesn't matter)
2. ctrl-w to close tab, goto 0

But I've also seen it while editing a wiki and right clicking in a text
entry box (to switch language).

It also occurs in safe mode.
>Fix:
Not known.

>Unformatted: