I have same(I hope) problem with iceweasel's crashes. After closing of several tabs, browser crashes.
After some testing, I think it might be connected with libcario2 1.9.4-1 from experimental. Downgrading libcario2 to version from unstable(1.8.8-2) fixed(?) problem. Testing will be appreciated. Output from gdb is attached. Iceweasel was started with --sync option.
(gdb) b gdk_x_error Breakpoint 1 at 0x7ff0b7f544d0: file /tmp/buildd/gtk+2.0-2.18.3/gdk/x11/gdkmain-x11.c, line 438. Current language: auto The current source language is "auto; currently c". (gdb) c Continuing. [Thread 0x7ff09dfff910 (LWP 2991) exited] [New Thread 0x7ff09dfff910 (LWP 7151)] [Thread 0x7ff09dfff910 (LWP 7151) exited] [Thread 0x7ff09efff910 (LWP 2986) exited] [Thread 0x7ff0996ff910 (LWP 2994) exited] [Thread 0x7ff09a2ff910 (LWP 2995) exited] [Thread 0x7ff09aeff910 (LWP 2992) exited] [Thread 0x7ff09fdf8910 (LWP 2985) exited] [Thread 0x7ff0989ff910 (LWP 2996) exited] [New Thread 0x7ff0989ff910 (LWP 8285)] [New Thread 0x7ff09fdf8910 (LWP 8286)] Breakpoint 1, gdk_x_error (display=0x7ff0bd5b0000, error=0x7fffd6caf550) at /tmp/buildd/gtk+2.0-2.18.3/gdk/x11/gdkmain-x11.c:438 438 /tmp/buildd/gtk+2.0-2.18.3/gdk/x11/gdkmain-x11.c: Nie ma takiego pliku ani katalogu. in /tmp/buildd/gtk+2.0-2.18.3/gdk/x11/gdkmain-x11.c (gdb) bt #0 gdk_x_error (display=0x7ff0bd5b0000, error=0x7fffd6caf550) at /tmp/buildd/gtk+2.0-2.18.3/gdk/x11/gdkmain-x11.c:438 #1 0x00007ff0ba06a98c in _XError (dpy=0x7ff0bd5b0000, rep=0x7ff0885c1f70) at XlibInt.c:3103 #2 0x00007ff0ba071a14 in process_responses (dpy=0x7ff0bd5b0000, wait_for_first_event=0, current_error=0x7fffd6caf6a8, current_request=2451320) at xcb_io.c:214 #3 0x00007ff0ba0720f0 in _XReply (dpy=0x7ff0bd5b0000, rep=0x7fffd6caf6f0, extra=0, discard=1) at xcb_io.c:464 #4 0x00007ff0ba066183 in XSync (dpy=0x7ff0bd5b0000, discard=0) at Sync.c:48 #5 0x00007ff0ba06633b in _XSyncFunction (dpy=0x7ff0bd5b0000) at Synchro.c:37 #6 0x00007ff0baa7c18c in _cairo_xlib_surface_finish (abstract_surface=<value optimized out>) at /tmp/buildd/cairo-1.9.4/src/cairo-xlib-surface.c:402 #7 0x00007ff0baa5ac57 in *INT_cairo_surface_finish (surface=0x7ff08a96bc00) at /tmp/buildd/cairo-1.9.4/src/cairo-surface.c:652 #8 0x00007ff0baa5acf5 in *INT_cairo_surface_destroy (surface=0x7ff0bd5b0000) at /tmp/buildd/cairo-1.9.4/src/cairo-surface.c:584 #9 0x00007ff0bcc4b7a1 in gfxASurface::Release (this=0x7ff0892d2bc0) at gfxASurface.cpp:104 #10 0x00007ff0bcb673a7 in nsRefPtr<gfxASurface>::assign_assuming_AddRef (this=0x7ff0891eff10, rhs=0x0) at ../../../dist/include/xpcom/nsAutoPtr.h:944 #11 nsRefPtr<gfxASurface>::assign_with_AddRef (this=0x7ff0891eff10, rhs=0x0) at ../../../dist/include/xpcom/nsAutoPtr.h:928 #12 nsRefPtr<gfxASurface>::operator= (this=0x7ff0891eff10, rhs=0x0) at ../../../dist/include/xpcom/nsAutoPtr.h:1003 #13 0x00007ff0bcb64406 in nsWindow::Destroy (this=0x7ff0891efe00) at nsWindow.cpp:787 #14 0x00007ff0bc81a857 in ~nsView (this=0x7ff0881d4b00, __in_chrg=<value optimized out>) at nsView.cpp:272 #15 0x00007ff0bc5f4bec in nsFrame::Destroy (this=0x7ff0885aeae0) at nsFrame.cpp:535 #16 0x00007ff0bc5ea645 in nsContainerFrame::Destroy (this=0x7ff0885aeae0) at nsContainerFrame.cpp:305 #17 0x00007ff0bc5bfe08 in nsFrameManager::Destroy (this=0x7ff08ccdf838) at nsFrameManager.cpp:292 #18 0x00007ff0bc5d3c8e in PresShell::Destroy (this=0x7ff08ccdf800) at nsPresShell.cpp:1949 #19 0x00007ff0bc5b8837 in DocumentViewerImpl::DestroyPresShell (this=0x7ff0892f6340) at nsDocumentViewer.cpp:4260 #20 0x00007ff0bc5bc3d5 in DocumentViewerImpl::Destroy (this=0x7ff0892f6340) at nsDocumentViewer.cpp:1534 #21 0x00007ff0bca11c34 in nsSHistory::EvictContentViewersInRange (this=<value optimized out>, aStart=4, aEnd=8) at nsSHistory.cpp:881 #22 0x00007ff0bca11cf6 in nsSHistory::EvictAllContentViewers (this=0x7ff0bd5b0000) at nsSHistory.cpp:672 #23 0x00007ff0bc9eb63f in nsDocShell::Destroy (this=0x7ff0881c1000) at nsDocShell.cpp:3950 #24 0x00007ff0bc708360 in nsFrameLoader::Finalize (this=0x7ff0895339d0) at nsFrameLoader.cpp:291 #25 0x00007ff0bc6fa58f in nsDocument::MaybeInitializeFinalizeFrameLoaders (this=<value optimized out>) at nsDocument.cpp:5277 #26 0x00007ff0bc6fc953 in nsDocument::EndUpdate (this=0x7ff09f472000, aUpdateType=1) at nsDocument.cpp:3758 #27 0x00007ff0bc811ff5 in nsXULDocument::EndUpdate (this=0x7ff0bd5b0000, aUpdateType=3603625296) at nsXULDocument.cpp:3358 #28 0x00007ff0bc66bb2e in ~mozAutoDocUpdate (this=0x7fffd6cafc20, __in_chrg=<value optimized out>) at ./../../content/base/src/mozAutoDocUpdate.h:66 #29 0x00007ff0bc71178e in nsGenericElement::doRemoveChildAt (aIndex=0, aNotify=1, aKid=0x7ff0881f0790, aParent=<value optimized out>, aDocument=0x7ff09f472000, aChildArray=...) at nsGenericElement.cpp:3380 #30 0x00007ff0bc711907 in nsGenericElement::RemoveChildAt (this=0x7ff09e445290, aIndex=0, aNotify=1) at nsGenericElement.cpp:3305 #31 0x00007ff0bc8ef180 in nsXULElement::RemoveChildAt (this=0x7ff09e445290, aIndex=0, aNotify=1) at nsXULElement.cpp:962 #32 0x00007ff0bc70e292 in nsGenericElement::doRemoveChild (aOldChild=0x7ff0881f07c8, aParent=<value optimized out>, aDocument=<value optimized out>, aReturn=0x7fffd6caffa0) at nsGenericElement.cpp:3979 #33 0x00007ff0bc494bed in nsIDOMNode_RemoveChild (cx=0x7ff0a13c4000, argc=1, vp=0x7ff0883962b8) at dom_quickstubs.cpp:2934 #34 0x00007ff0bb67c510 in ?? () from /usr/lib/libmozjs.so.2d #35 0x00007ff0bb682de1 in js_Invoke () from /usr/lib/libmozjs.so.2d #36 0x00007ff0bb683136 in ?? () from /usr/lib/libmozjs.so.2d #37 0x00007ff0bb64a80e in JS_CallFunctionValue () from /usr/lib/libmozjs.so.2d #38 0x00007ff0bc8262a9 in nsJSContext::CallEventHandler (this=0x7ff0a13bc920, aTarget=<value optimized out>, aScope=<value optimized out>, aHandler=0x7ff0890c4140, aargv=<value optimized out>, arv=0x7fffd6cb06e0) at nsJSEnvironment.cpp:2035 #39 0x00007ff0bc8584f6 in nsJSEventListener::HandleEvent (this=0x7ff0884eb980, aEvent=0x7ff0882e37f0) at nsJSEventListener.cpp:247 #40 0x00007ff0bc8029f3 in nsXBLPrototypeHandler::ExecuteHandler (this=<value optimized out>, aTarget=0x7ff088176240, aEvent=0x7ff0882e37f0) at nsXBLPrototypeHandler.cpp:341 #41 0x00007ff0bc7ff5b8 in nsXBLEventHandler::HandleEvent (this=0x7ff0a44911a0, aEvent=0x7ff0882e37f0) at nsXBLEventHandler.cpp:88 #42 0x00007ff0bc745ffa in nsEventListenerManager::HandleEventSubType (this=0x7ff088237de0, aListenerStruct=0x7ff088371118, aListener=0x7ff0a44911a0, ---Type <return> to continue, or q <return> to quit--- aDOMEvent=0x7ff0882e37f0, aCurrentTarget=0x7ff088176240, aPhaseFlags=2977) at nsEventListenerManager.cpp:1098 #43 0x00007ff0bc746610 in nsEventListenerManager::HandleEvent (this=0x7ff088237de0, aPresContext=0x7ff09f4f1400, aEvent=0x7fffd6cb1030, aDOMEvent=0x7fffd6cb0e80, aCurrentTarget=0x7ff088176240, aFlags=6, aEventStatus=0x7fffd6cb0e88) at nsEventListenerManager.cpp:1206 #44 0x00007ff0bc75fe24 in nsEventTargetChainItem::HandleEvent (this=0x7ff08821c038, aVisitor=..., aFlags=6, aMayHaveNewListenerManagers=<value optimized out>) at nsEventDispatcher.cpp:236 #45 0x00007ff0bc75ff82 in nsEventTargetChainItem::HandleEventTargetChain (this=0x7ff08821c3b8, aVisitor=..., aFlags=6, aCallback=0x7fffd6cb0f20, aMayHaveNewListenerManagers=1) at nsEventDispatcher.cpp:300 #46 0x00007ff0bc76044d in nsEventDispatcher::Dispatch (aTarget=<value optimized out>, aPresContext=<value optimized out>, aEvent=0x7fffd6cb1030, aDOMEvent=0x0, aEventStatus=0x7fffd6cb14ac, aCallback=0x7fffd6cb0f20) at nsEventDispatcher.cpp:514 #47 0x00007ff0bc5cc82a in PresShell::HandleEventInternal (this=0x7ff09f474000, aEvent=0x7fffd6cb1030, aView=0x0, aStatus=0x7fffd6cb14ac) at nsPresShell.cpp:6317 #48 0x00007ff0bc5cce77 in PresShell::HandleEventWithTarget (this=0x7ff09f474000, aEvent=0x7fffd6cb1030, aFrame=<value optimized out>, aContent=<value optimized out>, aStatus=0x7fffd6cb14ac) at nsPresShell.cpp:6222 #49 0x00007ff0bc7491b2 in nsEventStateManager::CheckForAndDispatchClick (this=0x7ff0a0ee5cc0, aPresContext=<value optimized out>, aEvent=0x7fffd6cb15d0, aStatus=0x7fffd6cb14ac) at nsEventStateManager.cpp:4073 #50 0x00007ff0bc750a6e in nsEventStateManager::PostHandleEvent (this=0x7ff0a0ee5cc0, aPresContext=0x7ff09f4f1400, aEvent=0x7fffd6cb15d0, aTargetFrame=0x7ff088b6c668, aStatus=0x7fffd6cb14ac, aView=0x7ff09f307700) at nsEventStateManager.cpp:3036 #51 0x00007ff0bc5cc883 in PresShell::HandleEventInternal (this=0x7ff09f474000, aEvent=0x7fffd6cb15d0, aView=<value optimized out>, aStatus=0x7fffd6cb14ac) at nsPresShell.cpp:6338 #52 0x00007ff0bc5ccf73 in PresShell::HandlePositionedEvent (this=0x7ff09f474000, aView=0x7ff09f307700, aTargetFrame=<value optimized out>, aEvent=0x7fffd6cb15d0, aEventStatus=0x7fffd6cb14ac) at nsPresShell.cpp:6205 #53 0x00007ff0bc5cd6af in PresShell::HandleEvent (this=0x7ff09f474000, aView=0x7ff09f307700, aEvent=0x7fffd6cb15d0, aEventStatus=0x7fffd6cb14ac) at nsPresShell.cpp:6065 #54 0x00007ff0bc81cdcf in nsViewManager::HandleEvent (this=<value optimized out>, aView=0x7ff09f307700, aPoint=<value optimized out>, aEvent=0x7fffd6cb15d0, aCaptured=0) at nsViewManager.cpp:1400 #55 0x00007ff0bc81ec36 in nsViewManager::DispatchEvent (this=0x7ff0a0af7b80, aEvent=0x7fffd6cb15d0, aStatus=0x7fffd6cb159c) at nsViewManager.cpp:1359 #56 0x00007ff0bc819e84 in HandleEvent (aEvent=0x7fffd6cb15d0) at nsView.cpp:168 #57 0x00007ff0bcb5c18d in nsWindow::DispatchEvent (this=0x7ff09f30ac80, aEvent=0x7fffd6cb15d0, astat...@0x7fffd6cb164c) at nsWindow.cpp:577 #58 0x00007ff0bcb5c97a in nsWindow::OnButtonReleaseEvent (this=0x7ff09f30ac80, aWidget=<value optimized out>, aEvent=0x7ff088913f90) at nsWindow.cpp:2981 #59 0x00007ff0bcb618d2 in button_release_event_cb (widget=0x7ff0a13d9880, event=0x7ff088913f90) at nsWindow.cpp:5555 #60 0x00007ff0b8500218 in _gtk_marshal_BOOLEAN__BOXED (closure=0x7ff0a0fac0a0, return_value=0x7fffd6cb1850, n_param_values=<value optimized out>, param_values=0x7ff088115130, invocation_hint=<value optimized out>, marshal_data=0x7ff0bcb618a8) at /tmp/buildd/gtk+2.0-2.18.3/gtk/gtkmarshalers.c:84 #61 0x00007ff0b910f3ed in IA__g_closure_invoke (closure=0x7ff0a0fac0a0, return_value=0x7fffd6cb1850, n_param_values=2, param_values=0x7ff088115130, invocation_hint=0x7fffd6cb1810) at /tmp/buildd/glib2.0-2.22.2/gobject/gclosure.c:767 #62 0x00007ff0b9122cdb in signal_emit_unlocked_R (node=0x7ff0bd5f1a10, detail=0, instance=0x7ff0a13d9880, emission_return=0x7fffd6cb1990, instance_and_params=0x7ff088115130) at /tmp/buildd/glib2.0-2.22.2/gobject/gsignal.c:3247 #63 0x00007ff0b9123f18 in IA__g_signal_emit_valist (instance=0x7ff0a13d9880, signal_id=<value optimized out>, detail=0, var_args=0x7fffd6cb19f0) at /tmp/buildd/glib2.0-2.22.2/gobject/gsignal.c:2990 #64 0x00007ff0b9124553 in IA__g_signal_emit (instance=0x7ff0bd5b0000, signal_id=3603625296, detail=2451319) at /tmp/buildd/glib2.0-2.22.2/gobject/gsignal.c:3037 #65 0x00007ff0b86092de in gtk_widget_event_internal (widget=0x7ff0a13d9880, event=0x7ff088913f90) at /tmp/buildd/gtk+2.0-2.18.3/gtk/gtkwidget.c:4767 #66 0x00007ff0b84f87d3 in IA__gtk_propagate_event (widget=0x7ff0a13d9880, event=0x7ff088913f90) at /tmp/buildd/gtk+2.0-2.18.3/gtk/gtkmain.c:2417 #67 0x00007ff0b84f98ab in IA__gtk_main_do_event (event=0x7ff088913f90) at /tmp/buildd/gtk+2.0-2.18.3/gtk/gtkmain.c:1622 #68 0x00007ff0b7f4d1cc in gdk_event_dispatch (source=<value optimized out>, callback=<value optimized out>, user_data=<value optimized out>) at /tmp/buildd/gtk+2.0-2.18.3/gdk/x11/gdkevents-x11.c:2369 #69 0x00007ff0b8e7812a in g_main_dispatch (context=0x7ff0bd549a10) at /tmp/buildd/glib2.0-2.22.2/glib/gmain.c:1960 #70 IA__g_main_context_dispatch (context=0x7ff0bd549a10) at /tmp/buildd/glib2.0-2.22.2/glib/gmain.c:2513 #71 0x00007ff0b8e7b988 in g_main_context_iterate (context=0x7ff0bd549a10, block=1, dispatch=1, self=<value optimized out>) at /tmp/buildd/glib2.0-2.22.2/glib/gmain.c:2591 ---Type <return> to continue, or q <return> to quit--- #72 0x00007ff0b8e7bb3c in IA__g_main_context_iteration (context=0x7ff0bd549a10, may_block=1) at /tmp/buildd/glib2.0-2.22.2/glib/gmain.c:2654 #73 0x00007ff0bcb7a7e9 in nsBaseAppShell::DoProcessNextNativeEvent (this=0x7ff0bd5b0000, mayWait=-691342000) at nsBaseAppShell.cpp:151 #74 0x00007ff0bcb7a937 in nsBaseAppShell::OnProcessNextEvent (this=0x7ff0abd48520, thr=0x7ff0bd44b3e0, mayWait=1, recursionDepth=<value optimized out>) at nsBaseAppShell.cpp:296 #75 0x00007ff0bcc206f5 in nsThread::ProcessNextEvent (this=0x7ff0bd44b3e0, mayWait=1, result=0x7fffd6cb1d9c) at nsThread.cpp:497 #76 0x00007ff0bcbf67da in NS_ProcessNextEvent_P (thread=0x7ff0bd5b0000, mayWait=1) at nsThreadUtils.cpp:230 #77 0x00007ff0bcb7aa55 in nsBaseAppShell::Run (this=0x7ff0abd48520) at nsBaseAppShell.cpp:170 #78 0x00007ff0bca52855 in nsAppStartup::Run (this=0x7ff0abdb2500) at nsAppStartup.cpp:193 #79 0x00007ff0bc43edd1 in XRE_main (argc=<value optimized out>, argv=<value optimized out>, aAppData=<value optimized out>) at nsAppRunner.cpp:3331 #80 0x00000000004020ef in main (argc=4, argv=0x7fffd6cb6718) at nsXULStub.cpp:493
-- X was an interactive protocol: alpha blending a full-screen image looked like slugs racing down the monitor. http://www.keithp.com/~keithp/talks/usenix2000/render.html