Closed Bug 563341 Opened 14 years ago Closed 14 years ago

Firefox Crash [@ nssutil3.dll@0x43 ]

Categories

(External Software Affecting Firefox Graveyard :: Flash (Adobe), defect)

Product:
External Software Affecting Firefox Graveyard
Component:
Flash (Adobe)
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: chofmann, Unassigned)

Details

(Keywords: crash, Whiteboard: [sg:vector-critical (Adobe)][fixed in Flash 10,1,53,38])

Crash Data

currently the #15 top non-flash non-hang crash on 3.6.4 beta, but it looks like it might be a flash problem, maybe similar to Bug 558860

http://crash-stats.mozilla.com/report/index/07837214-97f9-4ee3-a89a-8dd6d2100502

Frame  	Module  	Signature [Expand]  	Source
0 	nssutil3.dll 	nssutil3.dll@0x43 	
1 	NPSWF32.dll 	NPSWF32.dll@0xab0ab 	
2 	NPSWF32.dll 	NPSWF32.dll@0xed421 	
3 	NPSWF32.dll 	NPSWF32.dll@0x1392a6 	
4 	NPSWF32.dll 	NPSWF32.dll@0x139836 	
5 	xul.dll 	mozilla::plugins::PluginModuleChild::NPP_Destroy 	dom/plugins/PluginModuleChild.h:290
6 	xul.dll 	mozilla::plugins::PluginInstanceChild::AnswerNPP_Destroy 	dom/plugins/PluginInstanceChild.cpp:1640
7 	xul.dll 	mozilla::plugins::PPluginInstanceChild::OnCallReceived 	obj-firefox/ipc/ipdl/PPluginInstanceChild.cpp:1259
8 	xul.dll 	mozilla::plugins::PPluginModuleChild::OnCallReceived 	obj-firefox/ipc/ipdl/PPluginModuleChild.cpp:380
9 	xul.dll 	mozilla::ipc::RPCChannel::DispatchIncall 	ipc/glue/RPCChannel.cpp:485
10 	xul.dll 	mozilla::ipc::RPCChannel::Incall 	ipc/glue/RPCChannel.cpp:471
11 	xul.dll 	mozilla::ipc::RPCChannel::OnMaybeDequeueOne 	ipc/glue/RPCChannel.cpp:413
12 	xul.dll 	MessageLoop::RunTask 	ipc/chromium/src/base/message_loop.cc:336
13 	xul.dll 	MessageLoop::DeferOrRunPendingTask 	ipc/chromium/src/base/message_loop.cc:344
14 	xul.dll 	MessageLoop::DoWork 	ipc/chromium/src/base/message_loop.cc:444
15 	xul.dll 	base::MessagePumpForUI::DoRunLoop 	ipc/chromium/src/base/message_pump_win.cc:209
16 	xul.dll 	base::MessagePumpWin::RunWithDispatcher 	ipc/chromium/src/base/message_pump_win.cc:52
17 	xul.dll 	base::MessagePumpWin::Run 	ipc/chromium/src/base/message_pump_win.h:78
18 	xul.dll 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:216
19 	xul.dll 	MessageLoop::RunHandler 	
20 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:173
21 	xul.dll 	base::Thread::ThreadMain 	ipc/chromium/src/base/thread.cc:165
22 	xul.dll 	`anonymous namespace'::ThreadFunc 	ipc/chromium/src/base/platform_thread_win.cc:26
23 	kernel32.dll 	BaseThreadStart

more reports at 
http://crash-stats.mozilla.com/report/list?version=Firefox%3A3.6.4&signature=nssutil3.dll@0x43


checking --- nssutil3.dll@0x43 20100502-crashdata.csv
found in: 3.6.3 3.6.4 3.5.9 3.6
release total-crashes
              nssutil3.dll@0x43 crashes
                         pct.
all     364268  86      0.00023609
3.6.3   255580  58      0.000226935
3.6.4   15611   19      0.00121709
3.5.9   34026   6       0.000176336
3.6     14089   3       0.000212932

os breakdown
nssutil3.dll@0x43Total 86
Win5.1  0.99
Win6.0  0.00
Win6.1  0.01

flash versions around at time of crash
  47 10.0.45.2
  25 10.0.32.18
  12 10.0.42.34
   1 10.0.22.87
   1 10.0.12.36
Keywords: crash
This looks suspiciously like a bug that was fixed in 10.1 a month or so ago -- I'll try to dig up the bugzilla but I strongly suspect this is now fixed.
See https://bugzilla.mozilla.org/show_bug.cgi?id=558860 -- the crashing callstack that goes from NPP_Destroy, into NPSWF32.DLL, and back into Firefox, is almost certainly the same bug (already fixed in 10.1)
I looked back through all the crash reports matching this signature and flash 10.1.

This was the only report

http://crash-stats.mozilla.com/report/index/96c4f414-99a1-4eaa83a5-b48fd2100420	
nssutil3.dll@0x43	
http://sportversenyek.hu/sporthirek/megkezdodott-a-kuzdelem-a-divizio-i-es-jegkorong-vilagbajnoksag-a-csoportjaban/21361/	
Firefox	3.6.3 5.1.2600
hg:hg.mozilla.org/releases/mozilla-1.9.2:nsprpub/pr/src/misc/prdtoa.c:28ef231a65a3
Flash 10.1.53.7
The fix was present as of build 10,1,53,28 -- if we see crashes after this version then we should reopen
Whiteboard: [sg:vector-critical]
Whiteboard: [sg:vector-critical] → [sg:vector-critical (Adobe)][fixed in Flash 10,1,53,28]
I'll follow up with our next refresh to let you guys know when that fix it out in the wild.
The fix is in the wild at this point.  Chris do you have data to confirm no crashes on or after build 10.1.53.38?
for all of may here is the breakdown on this signature.

1275 10.0.45.2
 192 10.0.42.34
 185 10.0.32.18
  72 10.0.22.87
  48 10.0.12.36
  21 10.0.2.54
   3 [blank]
   2 10.0.1.218
   1 10.0.12.10

no crashes on any 10.1.x version.
and in april we only had one 10.1 crash, that being on 10.1.53.7

 611 10.0.45.2
 364 
 322 \N
 128 10.0.42.34
 105 10.0.32.18
  38 10.0.22.87
  19 10.0.12.36
   6 10.0.2.54
   1 10.1.53.7
   1 10.0.1.218
looks good.  I'll close.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
Whiteboard: [sg:vector-critical (Adobe)][fixed in Flash 10,1,53,28] → [sg:vector-critical (Adobe)][fixed in Flash 10,1,53,38]
Crash Signature: [@ nssutil3.dll@0x43 ]
Group: core-security → core-security-release
Group: core-security-release
Product: External Software Affecting Firefox → External Software Affecting Firefox Graveyard
You need to log in before you can comment on or make changes to this bug.