115917 - Trunk M120B N700 MacOS crash [@ MRJPlugin]

Status: RESOLVED WONTFIX

(SeaMonkey :: UI Design, defect, P4)

Description

[Jay Patel [:jay]]

This is a major crash for Mozilla 0.9.6 on Mac.  Here's the latest info from
Talkback.  We need to check to see if this is reproducible with recent
MozillaTrunk builds.

MRJPlugin   32 
BBID range: 32948 - 399300
Min/Max Seconds since last crash: 60 - 420281
Min/Max Runtime: 2789 - 740731
Crash data range: 2001-12-04 to 2001-12-12
Build ID range: 2001112011 to 2001112011
Keyword List : 
Stack Trace: 

	 MRJPlugin + 0x113b0 (0x3d605620)
	 MRJPlugin + 0x15cd8 (0x3d609f48)
	 MRJPlugin + 0x11ab4 (0x3d605d24)
	 MRJPlugin + 0x13238 (0x3d6074a8)
	 ProxyJNIEnv::FindClass()
[ProxyJNI.cpp  line 275]
	 init_netscape_java_classes()
[jsj.c  line 348]
	 jsj_ConnectToJavaVM()
[jsj.c  line 500]
	 JSJ_AttachCurrentThreadToJava()
[jsj.c  line 697]
	 map_js_context_to_jsj_thread_impl()
[lcglue.cpp  line 209]
	 jsj_EnterJava()
[jsj_utils.c  line 456]
	 JSJ_ConvertJavaObjectToJSValue()
[jsj.c  line 854]
	 nsJVMManager::WrapJavaObject()
[nsJVMManager.cpp  line 441]
	 nsHTMLAppletElementSH::GetPluginJSObject()
[nsDOMClassInfo.cpp  line 4252]
	 nsHTMLExternalObjSH::PostCreate()
[nsDOMClassInfo.cpp  line 4134]
	 XPCWrappedNative::GetNewOrUsed()
[xpcwrappednative.cpp  line 398]     (315618)	URL: www.eia.doe.gov
(315618)
Comments: the browser was loading the page when the talkback window came up..
the dialog/warning box in the Finder says Mozilla quit because an error of type
2 occured
     (311385)	URL: www.virtualtuner.com
(311385)
Comments: Connecting to the above website. Loaded fine except for one last part
or advertisement
     (291814)	Comments: Pressing Command-w to close a Navigator window.
     (276428)	URL: http://www.silverpoint.com.ua/
(251147)
URL: www.100000 mp3.com
     (251147)	Comments: trying to open a page
     (250563)	URL: www.whitehouse.gov/holiday
(203649)
URL: www.kira-artaki.purespace.de
(203649)
Comments: trying to watch a movie
     (178449)	URL: http://www.bdeb.qc.ca/temporaire/formation-web-deux.htm
(178449)
Comments: just viewing this web page
     (162958)	URL: www.puretec.de
(162958)
Comments: tring to create webpage with websitecreator by puretec
     (114093)	URL: www.icq.com
(114093)
Comments: trying to connect to icq-chat
     (93661)	URL: http://www.aptus-personnel.co.uk
(93661)
Comments: looking at http://www.aptus-personnel.co.uk
(32948)
URL: http://www.planetunreal/infiltration
(32948)
Comments: well  let me see  i were downloading this file see  off of version
tracker over thar yonder  and i was on http://www.planletunreal/infiltration
too. Well when I was using a menu from a folder in my personal toolbar to select
one of them other websites to
     (32948)	Comments:  go have a looksee. Well wouldnt you know it  mozilla it went and
crashed on me the blimmin thing!

Comment 1

[Peter Lubczynski]

-->beard

Comment 2

[Jay Patel [:jay]]

Adding qawanted keyword to see if we can get this reproduced with recent
MozillaTrunk builds.  Also adding N621 to summary, since this is a topcrasher
with that Netscape release:

MRJPlugin   33
		 115917 	 NEW 	  	 [e-mail] 	 --- 	 2001-12-18 
BBID range: 1551858 - 1968276
Min/Max Seconds since last crash: 65 - 119597
Min/Max Runtime: 2492 - 1745926
Crash data range: 2002-01-11 to 2002-01-22
Build ID range: 2001113009 to 2001113009
Keyword List : 
Stack Trace: 

	 MRJPlugin + 0x113e4 (0x3d4bd654)
	 MRJPlugin + 0x15d08 (0x3d4c1f78)
	 MRJPlugin + 0x11ae4 (0x3d4bdd54)
	 MRJPlugin + 0x13268 (0x3d4bf4d8)
	 ProxyJNIEnv::FindClass()
[ProxyJNI.cpp  line 260]
	 init_netscape_java_classes()
[jsj.c  line 348]
	 jsj_ConnectToJavaVM()
[jsj.c  line 500]
	 JSJ_AttachCurrentThreadToJava()
[jsj.c  line 697]
	 map_js_context_to_jsj_thread_impl()
[lcglue.cpp  line 194]
	 jsj_EnterJava()
[jsj_utils.c  line 456]
	 JSJ_ConvertJavaObjectToJSValue()
[jsj.c  line 854]
	 nsJVMManager::WrapJavaObject()
[nsJVMManager.cpp  line 440]
	 nsHTMLAppletElementSH::GetPluginJSObject()
[nsDOMClassInfo.cpp  line 4273]
	 nsHTMLExternalObjSH::PostCreate()
[nsDOMClassInfo.cpp  line 3982]
	 XPCWrappedNative::GetNewOrUsed()
[xpcwrappednative.cpp  line 400]     (1921586)	URL: www.daum.net
     (1921586)	Comments: club hamann-error
     (1897123)	URL: www.iwin.com
     (1897123)	Comments: Playing on a gaming site
     (1891283)	URL: www.iwin.com
     (1891283)	Comments: Playing game at site when computer froze
     (1874939)	URL: www.gazzetta.it
     (1874939)	Comments: click on section calcio
     (1869542)	URL: www.cbs.sportsline.com
     (1869542)	Comments: trying to go to Game Center of Eagles/Bears game. Said it did not
support Netscape 6. Applets tried to load. I closed the window  the entire
program crashed. Netscape Error Type 2 cited as cause.
     (1788275)	Comments: Waiting for Bookmark to appear.
     (1780015)	Comments: same crap doing things in the web site
     (1699224)	URL: www.iwin.com
     (1597618)	Comments: playing a game

If someone can reproduce this crash from the user comments, it would be
interesting to see what kind of stack Talkback gives us.  I can't seem to find
anything close to the original stack in recent MozillaTrunk builds or Mozilla 0.9.7.

Comment 3

[Shiva Thirumazhusai]

nominating topcrash bugs for nsbeta1. 

Comment 4

[Jay Patel [:jay]]

Marking this worksforme.  Talkback data only shows a few crashes with this stack
signature since N621 and none of them have a stack even close to the one
reported here.  If this particular crash does show up again, we can reopen it then.

Comment 5

[greer]

Reopening this one because is shows up 32 times in the Trunk builds in the last 
ten days and it also shows up in the latest commercial builds.

Patty, you have three incidents for this crash (5913124 - Trunk build 0503 ; 
6093413, 6093443 - latest commercial product). Can you reproduce this one 
consistently?

The comments point to some likely sites/steps:
 
Trunk (MRJPlugin):       32
(5745323) - [MacOS version 9.0.4] (Build 2002042908): Looking at a virus-alert 
web page with an interactive map. Pointing inside the map. URL: 
http://wtc.trendmicro.com/wtc/
(5791361) - [MacOS version 9.1] (Build 2002043010): Trying to start a java based 
game called Bounce Out.  applet failed to load so I hit command-R to reload the 
java window.  Seemed to be working and then crashed. URL: gamehouse.com
(5846106) - [MacOS version 9.0.4] (Build 2002050103): just run that test URL: ? 
(c't browser check java)
(5846193) - [MacOS version 9.0.4] (Build 2002050103): played with the blue balls 
E URL: http://heise.de/ct/browserch
eck/java.shtml
(5854096) - [MacOS version 9.0.4] (Build 2002050203): mouse over the box URL: 
http://heise.de/ct/browsercheck/java.shtml
(5869928) - [MacOS version 9.0.4] (Build 2002050203): just connected to that 
chatroom URL: bluewin chat luzern
(5912166) - [MacOS version 9.1] (Build 2002050203): Trying to start Yahoo Chat 
feature URL: yahoo.com
(5913124) - [MacOS version 9.2.2] (Build 2002050303): crash on mac os 9.2 branch 
build: 2002-05-02-12-branch URL:
(5922377) - [MacOS version 9.2.2] (Build 2002050303): java applet error? URL:
(6000068) - [MacOS version 9.2.1] (Build 2002050603): Trying out a java app URL:
(6021238) - [MacOS version 9.1] (Build 2002050203): i startet a java applet URL:
(6052801) - [MacOS version 9.0.4] (Build 2002050303): Java chat applet URL: 
http://chat.deepnet.net:7070/
(6057616) - [MacOS version 9.0.4] (Build 2002050603): View Info panel and 
selected the tab 'links'. then it crashed URL: www.abenteuer-reisen.de
(6062192) - [MacOS version 9.0.4] (Build 2002050103): Was using these awsome 
interactive maps.  Had zoomed out completely (all Europe)  left the window 
behind while doing some other "work"  and clicked the window backed  clicked on 
Rome.Mozilla died. URL: www.map24.de
(6066971) - [MacOS version 9.1] (Build 2002050703): Looking at the Intellecast 
IR satellite radar loop. This is a known bug. I was just testing it on the 
latest build. Its still there. URL:
(6067408) - [MacOS version 9.0.4] (Build 2002050103): Crashed again. Fresh  just 
after a reboot.Will try clearing my  cache. URL: www.map24.de
(6067414) - [MacOS version 9.0.4] (Build 2002050103): Crashed after some 
interactive map zooming. Freshly rebooted with empty cache. URL: www.map24.de
(6089998) - [MacOS version 9.2.2] (Build 2002050807): Starting up Java chat 
applet linked from the site indicated above. URL: 
http://www30.brinkster.com/sowe/index.html

(5913124) Build: 2002050303 Plat: MacOS version 9.2.2 Time: 2002-05-03 
[e-mail]  crash on mac os 9.2 branch build: 2002-05-02-12-branch

---------
Here is Patty's most recent stack:

         MRJPlugin + 0x113e4 (0x3df11654)  
         MRJPlugin + 0x15d08 (0x3df15f78)  
         MRJPlugin + 0x11ae4 (0x3df11d54)  
         MRJPlugin + 0x13268 (0x3df134d8)  
         ProxyJNIEnv::FindClass()       [ProxyJNI.cpp  line 260] 
         init_netscape_java_classes()   [jsj.c  line 348] 
         jsj_ConnectToJavaVM()  [jsj.c  line 500] 
         JSJ_AttachCurrentThreadToJava()        [jsj.c  line 697] 
         map_js_context_to_jsj_thread_impl()    [lcglue.cpp  line 194] 
         jsj_EnterJava()        [jsj_utils.c  line 456] 
         JSJ_ConvertJavaObjectToJSValue()       [jsj.c  line 854] 
         nsJVMManager::WrapJavaObject() [nsJVMManager.cpp  line 440] 
         nsHTMLAppletElementSH::GetPluginJSObject()     [nsDOMClassInfo.cpp  
line 4273] 
         nsHTMLExternalObjSH::PostCreate()      [nsDOMClassInfo.cpp  line 3982] 
         XPCWrappedNative::GetNewOrUsed()       [xpcwrappednative.cpp  line 400]

Comment 6

[Brian Nesse (gone)]

This is the same stack as:
http://bugscape.netscape.com/show_bug.cgi?id=15373

Comment 7

[Patrick C. Beard]

This hasn't had any activity since May, is this still showing up on talkback reports? Giving 
to bnesse.

Comment 8

[greer]

Attachment: Current Comments and Crashes

Patrick / Bnesse,

Looks like this one is stil quite popular. Here are the incidents with comments
from the past ten days of data in Talkback.

Comment 9

[greer]

Attachment: Filtered crash comments

Patrick / Bnesse,
(Revising my previous comment)
The MRJPlugin signature is the #1 top crashing signature for Mac in the
M1.1alpha release. 

I've filtered to comments in this attachment. It gives a good source of
possible reproducible cases to try. (If you have a Mac ;) .)

Comment 10

[greer]

*** Bug 156440 has been marked as a duplicate of this bug. ***

Comment 11

[greer]

The reporter of bug 156440 (duped to this bug) reported these steps to reproduce
(can someone with a Mac please verify we can reproduce this?):

User-Agent: Mozilla/5.0 (Macintosh; U; PPC; en-US; rv:1.1a+) Gecko/20020708
BuildID:    20020708

Mozilla crashes when I go to http://geoscope.ipgp.jussieu.fr/~gaboret/
and javascript is enabled. If I disable javascript it is ok.

Reproducible: Always

Steps to Reproduce:
1. (Make sure Javascript is enabled for browser)
2. Go to the URL.


Actual Results:  
Mozilla crashes immediately.


Talkback ID TB8135017Q. Also Mozilla 1.1a crashes, talkback TB8133909Q.

With a testcase -> topcrash+

Comment 12

[Brian Nesse (gone)]

I visited the site using both Mac OS 9 and OS X. Both worked with no problems...
as a matter of fact, there isn't even an applet on the page...

Comment 13

[greer]

Based on Brian's comments I'll return the keywords to their previous settings.

Comment 14

[Tormod V]

I tried to strip down the html from bug 156440. Actually, this line is enough:
myAddress=java.net.InetAddress.getLocalHost();

The URL <javascript:java.net.InetAddress.getLocalHost();> kills my mozilla
(Build 2002070810). Talkback ID TB8167023M

(BTW I have MacOS 9.1, but the page in bug 156440 crashed also when I had MacOS
9.04. The TCP/IP is version 2.7.4. I use DHCP.)

Comment 15

[Tormod V]

Attachment: from Macsbug StdLog output

I installed Macsbug, so now I attach a part from "StdLog". If anyone wants more
of it, tell me. This crash corresponds to talkback ID TB8170271M .

Comment 16

[greer]

Attachment: Stack from incidents in comments 14 and 15

Both of the stacks match with this bug. Brian / Patty M, can either of you
reproduce this crash with the URL mentioned in those comments?

Comment 17

[greer]

I asked a smoketester to confirm we can crash internally with the URL in comment
#14. He tells me it does crash for him.
qawanted -> testcase
topcrash -> topcrash+

Comment 18

[Brian Nesse (gone)]

hmm, if I enter javascript:java.net.InetAddress.getLocalHost(); into my url bar,
it returns my IP address...

Tormod V, please attach the entire macsbug stdlog. The pieces you posted are
much more helpful than the talkback report(s), but do not contain all of the
relevant information.

It looks like the obect that it supposed to be monitoring the JavaMessageQueue
notification is bad, but I need the rest of the log to verify this.

Comment 19

[Tormod V]

With mozilla1.0.0 it returns both my hostname and IP address...
I mailed the full StdLog to Brian and Greer.

Comment 20

[Jaime Rodriguez, Jr.]

my assumption is that, since this was in Netscape 621 and Mozilla 096, that this
crash is present on the 1.0 branch as well, is this correct?

Comment 21

[Tormod V]

With the testcases in comment 11 and 14, versions
098,099,100RC1,100RC2,100RC3,100 do not crash. 11a and 11a+ crash. I haven't
tried other builds.

Comment 22

[Brian Nesse (gone)]

Attachment: More complete StdLog

A more complete version of the StdLog, showing the registers, crash location,
and code disassembly. This points a bit more clearly to where I already
suspected the crash lies.

Jamie, I think in comment 19 Tormod has indicated that Mozilla 1.0 did not
exhibit this crash for him... however, if the crash has been around since 0.9.6
it would seem likely that the potential to crash still exists...

Comment 23

[greer]

Jaime,
Talkback has a few incidents of this crash in the 1.0 data (e.g. 7907815).

Comment 24

[Brian Nesse (gone)]

*** Bug 155359 has been marked as a duplicate of this bug. ***

Comment 25

[Brian Nesse (gone)]

Ok... I think this stack is a red herring. I have finally come to the
realization that this is the same as the stacks I have been seeing in bugs such
as bug 154183.

When running a debug build this manifests itself differently. When you mouse
over the text field in the applet at http://www.bio-chart.com, it tries to pop
up a tooltip (why I don't know)... this ends up generating the following assertion:

Assertion failure: (uint32)slot < JS_MIN(((obj2)->map)->freeslot,
((obj2)->map)->nslots), at jsobj.c:2522

followed by a crash. I believe this is real cause of this bug.

Comment 26

[Brian Nesse (gone)]

Attachment: Crash log showing stack to assertion/crash in debug build

I have verified that turning off tooltips eliminates this crash at the
http://www.bio-chart.com link.) Attaching stack from other tooltip crash
bug(s).

Comment 27

[Brian Nesse (gone)]

I got some help from bryner on this. Basically what we've figured out is that
the tooltip code is determining here:
http://lxr.mozilla.org/seamonkey/source/layout/xul/base/src/nsXULTooltipListener.cpp#571

that a tooltip targeted at the "browser" content object should be displayed.
What we don't know is why the browser is "requesting" this tooltip.

Everyone I've talked to about this points me to hewitt. cc'ing him because it
seems this bug isn't going anywhere without his help.

Comment 28

[Jaime Rodriguez, Jr.]

haven't seen a comment in this bug of late. have we heard anything from hewitt
on this one?

cc'ing samir to see if he and hewitt can chime in on this crasher.

Comment 29

[Patty Mac]

The browser crashes while mouse over to http://www.bio-chart.com
(Mac os 9.2.2; netscape trunk build: 2002-08-05-08-TRUNK)

Comment 30

[Patty Mac]

Attachment: crash log

Comment 31

[greer]

*** Bug 161528 has been marked as a duplicate of this bug. ***

Comment 32

[greer]

*** Bug 163713 has been marked as a duplicate of this bug. ***

Comment 33

[greer]

*** Bug 164036 has been marked as a duplicate of this bug. ***

Comment 34

[greer]

*** Bug 165270 has been marked as a duplicate of this bug. ***

Comment 35

[greer]

*** Bug 167563 has been marked as a duplicate of this bug. ***

Comment 36

[Olivier Cahagne]

*** Bug 172761 has been marked as a duplicate of this bug. ***

Comment 37

[Jay Patel [:jay]]

Updating summary with M120A and N700 since this continues to be a topcrasher
with Mozilla 1.2 Alpha and Netscape 7.0 respectively.

Comment 38

[hirata masakazu]

*** Bug 174477 has been marked as a duplicate of this bug. ***

Comment 39

[Andreas Kunz]

According to ftp://ftp.mozilla.org/pub/data/crash-data/Trunk-topcrashers.html
this is the overall #2 Topcrash (MacOS: #1, only counting crashes with
signatures) and has been around there for a while.
Just to bring it back on the radar in case it is not...

Comment 40

[Jay Patel [:jay]]

Updating summary with M120B (this is still a major topcrash for Mozilla 1.2
Beta).  I'll attach Talkback info.

Comment 41

[Peter Lubczynski]

bnesse gone--->peterl

Does this only happen in Classic or can someone get this to happen in CFM or Mach-O?

Comment 42

[Jay Patel [:jay]]

Attachment: M120B crashes

Lots of data from Talkback on crashes for Mozilla 1.2 Beta

Comment 43

[Jean-Pierre Melkonian]

Comment 33 is about OSX

Comment 44

[rubydoo123]

Bringing this into 1.3 beta, changing reference to OSX

Comment 45

[hirata masakazu]

Why has it been marked "OSX only"?
I believe this still crashes OS9 builds when tool tip is activated.

Comment 46

[Frankie]

The following URLs (mentioned in comments in this bug) work for me in release
1.2.1 on OS X 10.2.2:

http://www.bdeb.qc.ca/temporaire/formation-web-deux.htm
http://www.planetunreal/infiltration
http://wtc.trendmicro.com/wtc/
http://heise.de/ct/browsercheck/java.shtml
http://www30.brinkster.com/sowe/index.html
http://www.bio-chart.com

I haven't tested the others yet. Has anyone using OS X experienced this crash in
the past month?

Comment 47

[Frankie]

http://geoscope.ipgp.jussieu.fr/~gaboret/ works fine too.

And I was really hoping to test bug 118239 (Mac OS X: Quitting the application
during splash screen results in a crash), but none of these bugs have managed to
shut down Mozilla yet.

Comment 48

[Red Wolf]

Mozilla 1.2.1 on Mac OS 9.1 crashes when I enter the following into the URL
field: javascript:java.net.InetAddress.getLocalHost();

TB15437430E

Comment 49

[Kevin McCluskey (gone)]

based on comment 46 it is WFM: on MacOSX. 
Setting to Mac9.x. We no longer support Mac9.x, setting to future-P4.

Comment 50

[[e-mail] (gone - use [e-mail] instead)]

*** Bug 191742 has been marked as a duplicate of this bug. ***

Comment 51

[Jay Patel [:jay]]

Making topcrash- based on comment #49.   

Comment 52

[Simon Paquet [:sipaq]]

This bug is targeted at a Mac classic platform/OS, which is no longer supported
by mozilla.org. Please re-target it to another platform/OS if this bug applies
there as well or resolve this bug.

I will resolve this bug as WONTFIX in four weeks if no action has been taken.
To filter this and similar messages out, please filter for "mac_cla_reorg".

Comment 53

[Simon Paquet [:sipaq]]

mac classic is no longer supported by Mozilla. Marking WONTFIX.