1191190 - Firefox 40 beta 7 with Norton toolbar extension crashes when exiting

Status: RESOLVED DUPLICATE of bug 1137580

(Firefox :: Untriaged, defect, P1)

Description

[Shanmugham]

User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0
Build ID: 20150513174244

Steps to reproduce:

We are currently porting our norton toolbar binary extension to FF 40 beta 7.
Our extension is successfully loaded and when we quit forefox, we are getting the crash 



Actual results:

1 - Enabled the Norton toolbar extension in FF 40 beta 7
2 - Norton toolbar extension is seen and functionalities are working as expected.
3 - when we close firefox, it crashes
4 - while debugging we see the crash occured @ 
mozglue.dll!je_free(void * ptr) Line 6459	C

5 - Following is the call stack
>	coFFPl40.dll!CFirefoxPluginMgr::~CFirefoxPluginMgr() Line 114	C++
 	[External Code]	
 	coFFPl40.dll!CFirefoxPluginMgr::Release() Line 99	C++
 	xul.dll!FreeFactoryEntries(const nsID & aCID, nsFactoryEntry * aEntry, void * aArg) Line 1246	C++
 	xul.dll!nsBaseHashtable<nsIDHashKey,nsFactoryEntry *,nsFactoryEntry *>::s_EnumReadStub(PLDHashTable * aTable, PLDHashEntryHdr * aHdr, unsigned int aNumber, void * aArg) Line 397	C++
 	xul.dll!nsBaseHashtable<nsIDHashKey,nsFactoryEntry *,nsFactoryEntry *>::EnumerateRead(PLDHashOperator (const nsID &, nsFactoryEntry *, void *) * aEnumFunc, void * aUserArg) Line 176	C++
 	xul.dll!nsComponentManagerImpl::FreeServices() Line 1261	C++
 	xul.dll!ScopedXPCOMStartup::~ScopedXPCOMStartup() Line 1331	C++
 	xul.dll!mozilla::UniquePtr<ScopedXPCOMStartup,mozilla::DefaultDelete<ScopedXPCOMStartup> >::reset(ScopedXPCOMStartup * aPtr) Line 308	C++
 	xul.dll!XREMain::XRE_main(int argc, char * * argv, const nsXREAppData * aAppData) Line 4197	C++
 	xul.dll!XRE_main(int argc, char * * argv, const nsXREAppData * aAppData, unsigned int aFlags) Line 4260	C++
 	firefox.exe!do_main(int argc, char * * argv, nsIFile * xreDirectory) Line 214	C++
 	firefox.exe!NS_internal_main(int argc, char * * argv) Line 480	C++
 	firefox.exe!wmain(int argc, wchar_t * * argv) Line 138	C++
 	[External Code]	


Expected results:

It should not have crashed. The same extension is working fine without any code changes and no crash happening in FF 39.

Comment 1

[Mike Hommey [:glandium]]

This is very likely to be fundamentally the same issue as bug 1187862. However you circumvented that one to manager to survive until Firefox exists is likely just a workaround.

Comment 2

[Loic]

Could you paste a crash report from about:crashes, please.

Comment 3

[[e-mail]]

Attachment: Sample_FFExtn_ToRepro_ReallocCrash.zip

Kindly find the attached sample firefox extension built with FF 40 beta sdks , which generates _realloc xul.dll crash when loaded in Firefox browser(40 beta).

Steps to repro the crash:

1. Create a "c:\temp" folder and copy the attached "extension" folder to "c:\temp"

2. Merge "extension_registration.reg" with the registry. This will ensure that the given extension is picked up by Firefox.

3. Install Firefox 40 beta 8 or above

4. Now run Firefox and enable the extension. Restart Firefox and open few tabs and close firefox. The crash is seen.

You can recompile the project by copying the Firefox 40 beta sdks ("inlcude" and "lib") to "Sample_FFExtn_ToRepro_ReallocCrash\SDK\40.0.0_Beta8" folder, to generate a new “sampleplugin.dll” and attach a debugger if needed in order to debug the code.