Closed Bug 941240 Opened 11 years ago Closed 8 years ago

Firefox crash in mozilla::plugins::child::_hasmethod (Norton Internet Security

Categories

(Core Graveyard :: Plug-ins, defect)

25 Branch
All
macOS
defect
Not set
critical

Tracking

(firefox47 affected)

RESOLVED INCOMPLETE
Tracking Status
firefox47 --- affected

People

(Reporter: marcia, Unassigned)

References

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-d983a83f-18d2-46ba-8284-1e15f2131120.
=============================================================

Seen while looking at the 10.9 report - happens in 10.7 and 10.8 as well. Fairly low volume Mac specific crash affecting FF 25 and 25.0.1 users: https://crash-stats.mozilla.com/report/list?product=Firefox&signature=mozilla::plugins::child::_hasmethod  


Frame 	Module 	Signature 	Source
0 		@0xe00000002 	
1 	XUL 	mozilla::plugins::child::_hasmethod 	dom/plugins/ipc/PluginModuleChild.cpp
2 	NortonInternetSecurityBF 	NortonInternetSecurityBF@0x20c7 	
3 	NortonInternetSecurityBF 	NortonInternetSecurityBF@0x10ae2 	
4 	NortonInternetSecurityBF 	NortonInternetSecurityBF@0x10fe0 	
5 	CoreFoundation 	CoreFoundation@0x5a8c 	
6 	CoreFoundation 	CoreFoundation@0x16073 	
7 	CoreFoundation 	CoreFoundation@0x1f003 	
8 	CoreFoundation 	CoreFoundation@0xad18 	
9 	libsystem_c.dylib 	libsystem_c.dylib@0x11273 	
10 	CFNetwork 	CFNetwork@0x31da 	
11 	CoreFoundation 	CoreFoundation@0x1f003 	
12 	CoreFoundation 	CoreFoundation@0xad18 	
13 	CoreFoundation 	CoreFoundation@0x66400 	
14 	CoreFoundation 	CoreFoundation@0x64cc1 	
15 	CoreFoundation 	CoreFoundation@0x33e9e 	
16 	NortonInternetSecurityBF 	NortonInternetSecurityBF@0x138c0 	
17 	NortonSafeSurfing 	NortonSafeSurfing@0x17a5b 	
18 	libmozglue.dylib 	ozone_size 	memory/mozjemalloc/jemalloc.c
19 	NortonSafeSurfing 	NortonSafeSurfing@0x1e61f 	
20 	CoreFoundation 	CoreFoundation@0x503d 	
21 	NortonSafeSurfing 	NortonSafeSurfing@0x1275e 	
22 	CoreFoundation 	CoreFoundation@0x1ebe1 	
23 	libsystem_malloc.dylib 	libsystem_malloc.dylib@0x1087c 	
24 	libsystem_malloc.dylib 	libsystem_malloc.dylib@0x10f38 	
25 	libstdc++.6.dylib 	libstdc++.6.dylib@0x2d7b1 	
26 	libstdc++.6.dylib 	libstdc++.6.dylib@0x2ed47 	
27 	libshastacomm.dylib 	libshastacomm.dylib@0xd2b2 	
28 	NortonSafeSurfing 	NortonSafeSurfing@0x1657c 	
29 	libsystem_malloc.dylib 	libsystem_malloc.dylib@0x112de 	
30 	libmozglue.dylib 	arena_dalloc 	memory/mozjemalloc/jemalloc.c
31 	libmozglue.dylib 	arena_malloc 	memory/mozjemalloc/jemalloc.c
32 		@0x103184000 	
33 	libmozglue.dylib 	je_malloc 	memory/mozjemalloc/jemalloc.c
34 		@0x107404e20 	
35 	libmozglue.dylib 	arena_malloc 	memory/mozjemalloc/jemalloc.c
36 	libmozglue.dylib 	je_malloc 	memory/mozjemalloc/jemalloc.c
37 	libsystem_malloc.dylib 	libsystem_malloc.dylib@0x1087c 	
38 	libstdc++.6.dylib 	libstdc++.6.dylib@0x2d56c 	
39 	libmozglue.dylib 	arena_malloc 	memory/mozjemalloc/jemalloc.c
40 	libmozglue.dylib 	je_malloc 	memory/mozjemalloc/jemalloc.c
41 	libsystem_malloc.dylib 	libsystem_malloc.dylib@0x1087c 	
42 	libmozglue.dylib 	arena_malloc 	memory/mozjemalloc/jemalloc.c
43 	libmozglue.dylib 	je_malloc 	memory/mozjemalloc/jemalloc.c
44 	libsystem_malloc.dylib 	libsystem_malloc.dylib@0x1087c 	
45 	libsystem_malloc.dylib 	libsystem_malloc.dylib@0x11290 	
46 	libsystem_kernel.dylib 	libsystem_kernel.dylib@0x11bd9 	
47 	libmozglue.dylib 	ozone_size 	memory/mozjemalloc/jemalloc.c
48 		@0x103184000 	
49 	libmozglue.dylib 	ozone_size 	memory/mozjemalloc/jemalloc.c
50 	libsystem_malloc.dylib 	libsystem_malloc.dylib@0x10f38 	
51 	libmozglue.dylib 	arena_dalloc 	memory/mozjemalloc/jemalloc.c
52 		@0x103184000 	
53 	libmozglue.dylib 	ozone_size 	memory/mozjemalloc/jemalloc.c
54 		@0x103184000 	
55 	libmozglue.dylib 	ozone_size 	memory/mozjemalloc/jemalloc.c
56 	libsystem_malloc.dylib 	libsystem_malloc.dylib@0x10f38 	
57 	libmozglue.dylib 	ozone_size 	memory/mozjemalloc/jemalloc.c
58 	libsystem_malloc.dylib 	libsystem_malloc.dylib@0x10f38 	
59 	libmozglue.dylib 	ozone_size 	memory/mozjemalloc/jemalloc.c
60 	libmozglue.dylib 	ozone_size 	memory/mozjemalloc/jemalloc.c
61 	libsystem_malloc.dylib 	libsystem_malloc.dylib@0x10f38 	
62 	libmozglue.dylib 	ozone_size 	memory/mozjemalloc/jemalloc.c
63 	libsystem_malloc.dylib 	libsystem_malloc.dylib@0x10f38 	
64 	libmozglue.dylib 	arena_dalloc 	memory/mozjemalloc/jemalloc.c
65 		@0x16 	
66 	NortonSafeSurfing 	NortonSafeSurfing@0x17945 	
67 	NortonSafeSurfing 	NortonSafeSurfing@0x179a5 	
68 	libshastacomm.dylib 	libshastacomm.dylib@0xf942 	
69 	libshastacomm.dylib 	libshastacomm.dylib@0xf94a 	
70 	libshastacomm.dylib 	libshastacomm.dylib@0x64f0 	
71 	libshastacomm.dylib 	libshastacomm.dylib@0x4a21 	
72 	libshastacomm.dylib 	libshastacomm.dylib@0xa677 	
73 	SymBase 	SymBase@0x120f0 	
74 	SymBase 	SymBase@0x10244 	
75 	libdispatch.dylib 	libdispatch.dylib@0x12ad 	
76 	libdispatch.dylib 	libdispatch.dylib@0x2166 	
77 	SymBase 	SymBase@0x12f65 	
78 	SymBase 	SymBase@0x10244 	
79 	CFNetwork 	CFNetwork@0x1417c5 	
80 	CoreFoundation 	CoreFoundation@0x19789 	
81 	CoreFoundation 	CoreFoundation@0x5ac58 	
82 	libshastacomm.dylib 	libshastacomm.dylib@0x9e52 	
83 	libshastacomm.dylib 	libshastacomm.dylib@0xa6f6 	
84 	libshastacomm.dylib 	libshastacomm.dylib@0xafef 	
85 	libshastacomm.dylib 	libshastacomm.dylib@0xb0b0 	
86 	libsystem_malloc.dylib 	libsystem_malloc.dylib@0x1087c 	
87 	libobjc.A.dylib 	libobjc.A.dylib@0x715b 	
88 	CoreFoundation 	CoreFoundation@0x38b7e 	
89 	libsystem_c.dylib 	libsystem_c.dylib@0x53007 	
149 	libobjc.A.dylib 	libobjc.A.dylib@0x1d61b 	
150 	libobjc.A.dylib 	libobjc.A.dylib@0x1d61b 	
151 	CoreFoundation 	CoreFoundation@0x6f92 	
152 	CoreFoundation 	CoreFoundation@0x1b72c5 	
153 	CoreFoundation 	CoreFoundation@0xbff11 	
154 	libshastacomm.dylib 	libshastacomm.dylib@0xb01e 	
155 	CoreFoundation 	CoreFoundation@0xfeadd 	
156 	CoreFoundation 	CoreFoundation@0x7f8f1 	
157 	CoreFoundation 	CoreFoundation@0x71062 	
158 	CoreFoundation 	CoreFoundation@0x707ef
Norton Confidential (http://en.wikipedia.org/wiki/Norton_Confidential) is now a part of Norton Internet Security (en.wikipedia.org/wiki/Norton_Internet_Security, http://us.norton.com/macintosh-internet-security/#).

I can't find any information about what versions of Norton Confidential now available.  But all the crash reports I looked at show this extension:  nortonconfidential@symantec.com 1.7.0f37.  I also can't find any crash reports older than 2013-11-08.  I strongly suspect that's when version 1.7.0f37 was released.

Do we have a contact at Norton/Symantec?
> I also can't find any crash reports older than 2013-11-08.

Oops this is wrong.  More info in a bit.
The earliest report I can find is dated 2013-10-03, for nortonconfidential@symantec.com 1.7.0f19:

bp-aa49851e-b363-4f1a-b82b-c23452131003

Then there are a few dated 2013-10-09, for most of which the nortonconfidential@symantec.com version is 6.0f539.

bp-48e2a126-ba15-465a-9445-4c6522131009
bp-0382a484-e964-4140-bf8d-8beb72131009
bp-e3cd5fc6-2c65-435d-934d-34ea62131009
bp-379328b4-71a4-4c97-89a2-684302131009
bp-3243407f-6361-4923-bc1e-e9bd22131009
bp-3f831614-cc59-472d-a941-06c962131009

These are all crashes in the NortonInternetSecurityBF plugin:

plugin NortonInternetSecurityBF Version:1.7.0 Filename:NortonInternetSecurityBF.plugin
plugin NortonInternetSecurityBF Version:6.0 Filename:NortonInternetSecurityBF.plugin

But even there the version numbers are different.

So I'm at a loss to say what changed in Norton Internet Security/Norton Confidential to trigger these crashes, but I strongly suspect *something* did.
These crashes all happen here:

http://hg.mozilla.org/releases/mozilla-beta/annotate/f804b96367ef/dom/plugins/ipc/PluginModuleChild.cpp#l1477

I strongly suspect the NortonInternetSecurityBF plugin is passing a bad value in aMethodName.
Crash volume for signature 'mozilla::plugins::child::_hasmethod':
 - nightly (version 50): 0 crash from 2016-06-06.
 - aurora  (version 49): 0 crash from 2016-06-07.
 - beta    (version 48): 0 crash from 2016-06-06.
 - release (version 47): 30 crashes from 2016-05-31.
 - esr     (version 45): 0 crash from 2016-04-07.

Crash volume on the last weeks:
             Week N-1   Week N-2   Week N-3   Week N-4   Week N-5   Week N-6   Week N-7
 - nightly          0          0          0          0          0          0          0
 - aurora           0          0          0          0          0          0          0
 - beta             0          0          0          0          0          0          0
 - release          5          5          6          5          3          2          1
 - esr              0          0          0          0          0          0          0

Affected platform: Mac OS X
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → INCOMPLETE
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.