330832 - crash [@ nsObjectFrame::Instantiate] with finicky Java applet

Status: RESOLVED WONTFIX

(Core Graveyard :: Plug-ins, defect)

Description

[timeless]

Build was from Jan 10 2006

TB16495168K

i know bug 309529 chaned this code, but i'm not sure it fixed whatever went wrong.

Date/Time:      2006-03-17 08:34:47 -0800
OS Version:     10.3.9 (Build 7W98)
Report Version: 2

Command: Camino
Path:    /Applications/Browsers/Camino 15.app/Contents/MacOS/Camino
Version: 1.0+ (1.0+)
PID:     21005
Thread:  0

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000000

Thread 0 Crashed:
0   <<00000000>> 	0x00000000 0 + 0
1   org.mozilla.camino             	0x005432a0 nsObjectFrame::Instantiate(char const*, nsIURI*) + 0xb4
2   org.mozilla.camino             	0x00607ee8 nsObjectLoadingContent::Instantiate(nsACString_internal const&, nsIURI*) + 0x290
3   org.mozilla.camino             	0x006060fc nsObjectLoadingContent::EnsureInstantiation(nsIPluginInstance**) + 0x1f0
4   org.mozilla.camino             	0x003e4108 nsHTMLExternalObjSH::GetPluginInstance(nsIXPConnectWrappedNative*, nsIPluginInstance**) + 0x88
5   org.mozilla.camino             	0x003e41e4 nsHTMLExternalObjSH::PostCreate(nsIXPConnectWrappedNative*, JSContext*, JSObject*) + 0x54
6   org.mozilla.camino             	0x00160bd4 XPCWrappedNative::GetNewOrUsed(XPCCallContext&, nsISupports*, XPCWrappedNativeScope*, XPCNativeInterface*, XPCWrappedNative**) + 0x1088
7   org.mozilla.camino             	0x00158a20 XPCConvert::NativeInterface2JSObject(XPCCallContext&, nsIXPConnectJSObjectHolder**, nsISupports*, nsID const*, JSObject*, int, unsigned int*) + 0x11c
8   org.mozilla.camino             	0x0013e0d4 nsXPConnect::WrapNative(JSContext*, JSObject*, nsISupports*, nsID const&, nsIXPConnectJSObjectHolder**) + 0x94
9   org.mozilla.camino             	0x003d1960 nsDOMClassInfo::WrapNative(JSContext*, JSObject*, nsISupports*, nsID const&, long*, nsIXPConnectJSObjectHolder**) + 0xac
10  org.mozilla.camino             	0x003e2fe4 nsHTMLDocumentSH::GetProperty(nsIXPConnectWrappedNative*, JSContext*, JSObject*, long, long*, int*) + 0xd8
11  org.mozilla.camino             	0x00155d48 GetIdentityObject(JSContext*, JSObject*) + 0x62c
12  libmozjs.dylib                 	0x01be375c js_GetProperty + 0x3e8
13  libmozjs.dylib                 	0x01bd30e4 js_Interpret + 0x783c
14  libmozjs.dylib                 	0x01bcaf2c js_Execute + 0x240
15  libmozjs.dylib                 	0x01ba507c JS_EvaluateUCScriptForPrincipals + 0x58
16  org.mozilla.camino             	0x003fcaa8 nsJSContext::EvaluateString(nsAString_internal const&, void*, nsIPrincipal*, char const*, unsigned int, char const*, nsAString_internal*, int*) + 0x2e8
17  org.mozilla.camino             	0x004965a4 nsScriptLoader::EvaluateScript(nsScriptLoadRequest*, nsString const&) + 0x224
18  org.mozilla.camino             	0x00496198 nsScriptLoader::ProcessRequest(nsScriptLoadRequest*) + 0xb4
19  org.mozilla.camino             	0x00496f48 nsScriptLoader::OnStreamComplete(nsIStreamLoader*, nsISupports*, unsigned int, unsigned int, unsigned char const*) + 0x378
20  org.mozilla.camino             	0x000c8acc nsStreamLoader::OnStopRequest(nsIRequest*, nsISupports*, unsigned int) + 0x64
21  org.mozilla.camino             	0x000fd788 nsHttpChannel::OnStopRequest(nsIRequest*, nsISupports*, unsigned int) + 0x2a8
22  org.mozilla.camino             	0x000d807c nsInputStreamPump::OnStateStop() + 0xa0
23  org.mozilla.camino             	0x000d7c20 nsInputStreamPump::OnInputStreamReady(nsIAsyncInputStream*) + 0x80
24  libxpcom_core.dylib            	0x01889898 0x1808000 + 0x81898
25  libxpcom_core.dylib            	0x0184cb4c PL_HandleEvent + 0x24
26  libxpcom_core.dylib            	0x0184ca70 PL_ProcessPendingEvents + 0x80
27  com.apple.CoreFoundation       	0x901c3b90 __CFRunLoopDoSources0 + 0x1fc
28  com.apple.CoreFoundation       	0x901c1448 __CFRunLoopRun + 0x1b0
29  com.apple.CoreFoundation       	0x901c5d74 CFRunLoopRunSpecific + 0x148
30  com.apple.HIToolbox            	0x92886e10 RunCurrentEventLoopInMode + 0xac
31  com.apple.HIToolbox            	0x9288d4b4 ReceiveNextEventCommon + 0xf4
32  com.apple.HIToolbox            	0x928af638 BlockUntilNextEventMatchingListInMode + 0x60
33  com.apple.AppKit               	0x92e822ac _DPSNextEvent + 0x180
34  com.apple.AppKit               	0x92e98d2c -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 0x74
35  ???                            	0x06c88cc0 0x6c87000 + 0x1cc0
36  com.apple.AppKit               	0x92ead0ac -[NSApplication run] + 0x21c
37  com.apple.AppKit               	0x92f697bc NSApplicationMain + 0x1d0
38  org.mozilla.camino             	0x0000aa64 start + 0x1b0
39  org.mozilla.camino             	0x0000a8e4 start + 0x30

Comment 1

[timeless]

well, the url http://publib.boulder.ibm.com/html/as400/v4r5/ic2924/index.htm?info/db2/rbafzmstcrtcoll.htm killed safari (error 12 loading libhotspot) so i conclude it is relevant.

note that it only killed safari once, which means there's probably an os update that hasn't happened which caused safari to be unhappy. (i could be wrong)

Comment 2

[Hermann Schwab]

Same URL as Bug 330798 URL makes FF lag into oblivion by CLNavBar Java applet

Comment 3

[Hermann Schwab]

comment #2 not quite right, URLs are slightly different
http://publib.boulder.ibm.com/html/as400/v4r5/ic2924/index.htm?info/db2/rbafzmstcrtcoll.htm
http://publib.boulder.ibm.com/html/as400/v4r5/ic2924/info/db2/rbafzmstcrtcoll.htm

Comment 4

[Steven Michaud [:smichaud] (Retired)]

Attachment: Camino and Safari crash logs

I found it pretty easy to crash both Camino and Safari on OS X 10.3.9
(I haven't yet tried Firefox).  I suspect the applet itself is mainly
to blame for these problems ... though there must also be bugs in
Apple's JVM.

My guess is that there's an enormous amount of data flowing back and
forth between the applet and its server, and that the applet is very
intolerant of delays.

(I didn't include a copy of ~/Library/Logs/Java Console.log for the
Camino crash -- it's 150K and almost all of it is thousands of repeats
of "NavBar: null pointer exception occurred in paint".)

Comment 5

[Virtual_ManPL [:Virtual] 🇵🇱 - (please needinfo? me - so I will see your comment/reply/question/etc.)]

I'm marking this bug as WONTFIX per bug #1269807.

For more information see - https://blog.mozilla.org/futurereleases/2015/10/08/npapi-plugins-in-firefox/