1174002 - [ADBE 4007109] Flash crash in F_1942825133_________ on superstadia.com

Status: RESOLVED WORKSFORME

(Core Graveyard :: Plug-ins, defect)

Description

[Chris Peterson [:cpeterson]]

This bug was filed from the Socorro interface and is 
report bp-b6ece455-1a4a-4d5d-a665-8b7312150608.
=============================================================

The Flash game superstadia.com was the top crashing Flash site in May. There were multiple crash signatures, but this stack trace accounts for 55% of  superstadia.com crashes:

https://crash-stats.mozilla.com/search/?product=Firefox&process_type=plugin&url=%3Dhttp%3A%2F%2Fwww.superstadia.com%2Fsites%2Fdefault%2Fsuperstadia%2Fsuperstadia.swf

Frame 	Module 	Signature 	Source
0 	npswf32_15_0_0_152.dll 	F_1942825133_________ 	F_1948725653_______________________________:16547
1 	npswf32_15_0_0_152.dll 	F_433506135_______ 	F_1948725653_______________________________:1158
2 	npswf32_15_0_0_152.dll 	F1364783720___________ 	
3 	npswf32_15_0_0_152.dll 	F_682491847___________________________ 	F_604679557______________________________________________:841
4 	npswf32_15_0_0_152.dll 	F1905979889______________ 	F_245364498_________________________________________:1058
5 	npswf32_15_0_0_152.dll 	F1151864417___________ 	F_245364498_________________________________________:1274
6 	npswf32_15_0_0_152.dll 	npswf32_15_0_0_152.dll@0x6116ff 	
7 	npswf32_15_0_0_152.dll 	F870086258_______________________________ 	F_245364498_________________________________________:3047
8 	npswf32_15_0_0_152.dll 	F_458799790____________________ 	F_245364498_________________________________________:678
9 	npswf32_15_0_0_152.dll 	F_1440603502__________________ 	F_604679557______________________________________________:381
10 	npswf32_15_0_0_152.dll 	F1707935501_______________________________________________________________ 	F1601859680______________________________:14266
11 	npswf32_15_0_0_152.dll 	F753927167______________________________________________________________________________________________ 	F1466213____________________________________________:2856
12 	npswf32_15_0_0_152.dll 	F_894960737____________________________________ 	F_1338074657_____________________________________:236
13 	npswf32_15_0_0_152.dll 	F_563738840_____________________________________________________________________________________ 	F_1128892918________________________________________________________________________:43469
14 	npswf32_15_0_0_152.dll 	F1028628138________________________________________________________________________________ 	F_172784347_________________________________________:52
15 	npswf32_15_0_0_152.dll 	F2008675572________________________________ 	F1201058194___________________________________________________:228
16 	npswf32_15_0_0_152.dll 	F491024120_________________________________________________________________________________ 	F1201058194___________________________________________________:188
17 	npswf32_15_0_0_152.dll 	F753927167______________________________________________________________________________________________ 	F1466213____________________________________________:2867
18 	npswf32_15_0_0_152.dll 	F_894960737____________________________________ 	F_1338074657_____________________________________:236
19 	npswf32_15_0_0_152.dll 	F_563738840_____________________________________________________________________________________ 	F_1128892918________________________________________________________________________:43469
20 	npswf32_15_0_0_152.dll 	F1028628138________________________________________________________________________________ 	F_172784347_________________________________________:52
21 	npswf32_15_0_0_152.dll 	F116834987_________________________________________________________________________________ 	F1096782884_________________________________________:40
22 	npswf32_15_0_0_152.dll 	F491024120_________________________________________________________________________________ 	F1201058194___________________________________________________:188
23 	npswf32_15_0_0_152.dll 	F753927167______________________________________________________________________________________________ 	F1466213____________________________________________:2867
24 	npswf32_15_0_0_152.dll 	F1099953014_____________________________________________________________________________________________________ 	F1466213____________________________________________:3198
25 	npswf32_15_0_0_152.dll 	F_583618063__________________________________________________________________ 	F1466213____________________________________________:3317
26 	npswf32_15_0_0_152.dll 	F_1357242165_______________________________________ 	F1466213____________________________________________:3078
27 	npswf32_15_0_0_152.dll 	F1718314630________________________ 	F_919722739________________________________:13401
28 	npswf32_15_0_0_152.dll 	F_1995396427_________________ 	F_919722739________________________________:13860
29 	npswf32_15_0_0_152.dll 	F1546913566_____________________________________ 	F_578802783_______________________________________________________________:4238
30 	npswf32_15_0_0_152.dll 	F1187989989____________________________________________ 	F_578802783_______________________________________________________________:408
31 	user32.dll 	InternalCallWinProc 	
32 	user32.dll 	UserCallWinProcCheckWow 	
33 	user32.dll 	CallWindowProcAorW 	
34 	user32.dll 	CallWindowProcW 	
35 	xul.dll 	mozilla::plugins::PluginInstanceChild::FlashThrottleAsyncMsg::Run() 	dom/plugins/ipc/PluginInstanceChild.cpp
36 	xul.dll 	MessageLoop::RunTask(Task*) 	ipc/chromium/src/base/message_loop.cc
37 	xul.dll 	MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const&) 	ipc/chromium/src/base/message_loop.cc
38 	xul.dll 	MessageLoop::DoDelayedWork(base::TimeTicks*) 	ipc/chromium/src/base/message_loop.cc
39 	xul.dll 	base::MessagePumpForUI::DoRunLoop() 	ipc/chromium/src/base/message_pump_win.cc
40 	xul.dll 	base::MessagePumpWin::RunWithDispatcher(base::MessagePump::Delegate*, base::MessagePumpWin::Dispatcher*) 	ipc/chromium/src/base/message_pump_win.cc
41 	xul.dll 	base::MessagePumpWin::Run(base::MessagePump::Delegate*) 	ipc/chromium/src/base/message_pump_win.h
42 	xul.dll 	MessageLoop::RunInternal() 	ipc/chromium/src/base/message_loop.cc
43 	xul.dll 	MessageLoop::RunHandler() 	ipc/chromium/src/base/message_loop.cc
44 	xul.dll 	MessageLoop::Run() 	ipc/chromium/src/base/message_loop.cc
45 	xul.dll 	XRE_InitChildProcess 	toolkit/xre/nsEmbedFunctions.cpp
46 	plugin-container.exe 	NS_internal_main(int, char**) 	ipc/app/MozillaRuntimeMain.cpp
47 	plugin-container.exe 	wmain 	toolkit/xre/nsWindowsWMain.cpp
48 	plugin-container.exe 	__tmainCRTStartup 	f:/dd/vctools/crt_bld/self_x86/crt/src/crtexe.c:552
49 	kernel32.dll 	BaseProcessStart

Comment 1

[Chris Peterson [:cpeterson]]

Curiously, all the crash addresses end in 0x888. Is this an offset to an object's member variable or memory being stomped on?

https://crash-stats.mozilla.com/signature/?product=Firefox&url=%3Dhttp%3A%2F%2Fwww.superstadia.com%2Fsites%2Fdefault%2Fsuperstadia%2Fsuperstadia.swf&process_type=plugin&signature=F1634110993____________________________________&_columns=date&_columns=product&_columns=version&_columns=build_id&_columns=platform&_columns=reason&_columns=address&page=1

Comment 2

[Jeromie Clark]

This is ADBE 4007109

Comment 3

[Jeromie Clark]

We have a fix for this planned for Flash Player 20, but it's pretty invasive, so we don't want to just drop it into the next release.  The fix won't hit beta for a few weeks just given how things are lined up in the distribution pipeline.  If you guys would like a dev build to play with in the meantime, let me know, but since it's intermittent, I assume that's not super useful.  Just wanted to let you know that we believe it's fixed are just waiting for an opportunity to give it a decent bake period on the beta channel.

Comment 4

[Jeromie Clark]

Chris, I haven't been able to figure out by poking at what I can see in crash-stats, whether or not this is fixed.  You have more visibility than I do.  Would you mind taking a look and offering an opinion?

Comment 5

[Chris Peterson [:cpeterson]]

This Flash crash has definitely declined in Flash Player 20 compared to 18 and 19. We can call this fixed. superstadia.com is no longer in the top 50 Flash crash URLs. :)

Flash Player 20 = 25 crashes
Flash Player 19 = 162 crashes
Flash Player 18 = 196 crashes

https://crash-stats.mozilla.com/search/?product=Firefox&signature=F1634110993____________________________________&date=%3E%3D2015-01-01&_facets=signature&_facets=flash_version&_columns=date&_columns=signature&_columns=product&_columns=version&_columns=build_id&_columns=platform#facet-flash_version