115724 - Crash on freeing mCachedAttrParamNames [@ nsPluginInstanceOwner::~nsPluginInstanceOwner()]

Status: VERIFIED FIXED

(Core Graveyard :: Plug-ins, defect)

Description

[av (gone)]

- invoke any plugin (default plugin will do) using any <embed> test case saved 
locally on disk
- reload
- see either crash or debug assert

I think we are trying to release memory which has already been released somehow.

Comment 1

[av (gone)]

Attachment: stack trace

Comment 2

[av (gone)]

Peter said it has been fixed recently, so I am going to pull fresh and verify.

Comment 3

[Peter Lubczynski]

fixed

Comment 4

[Peter Lubczynski]

*** Bug 115896 has been marked as a duplicate of this bug. ***

Comment 5

[Scott MacGregor]

putting the top of the stack trace in the bug summary so it shows up on queries.
nothing to see here. 

Comment 6

[shrirang khanzode]

this works fine on mozilla build but not on commercial...winNT (1219). Anybody 
know what might be wrong? I still crash trying to reload this testcase 
here(after 4-5 attempts of toggling between these two tests)

http://bugzilla.mozilla.org/showattachment.cgi?attach_id=62248
http://bugzilla.mozilla.org/showattachment.cgi?attach_id=62258

Comment 7

[av (gone)]

It was just my guess that this is the same crash. But in fact it could be 
different.

Comment 8

[shrirang khanzode]

does not crash on trunk anymore, verif on 0812.