Crashes at [Parent][MessageChannel::Call] with ice-tea plugin.

RESOLVED INCOMPLETE

Status

External Software Affecting Firefox
Other
RESOLVED INCOMPLETE
a year ago
a year ago

People

(Reporter: Dhiraj Mishra, Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

420.53 KB, application/zip
Details
(Reporter)

Description

a year ago
Created attachment 8817862 [details]
JAVA-CRASH.ZIP

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0
Build ID: 20161129173726

Steps to reproduce:

Hi , 

Repro* 

1. Install any out-dated ice-tea java plugin.
2. Open attached java.html.
   java.html contains a applet.
3. Move the mouse over java applet, mozilla becomes frozen(unresponsive)
4. When it becomes Unresponsive and gets crashed.

Shutdown too long, probably frozen, causing a crash, below are the traces and the dump of the Stack.


Actual results:

ftw@warmachine:~$ firefox --debug java.html 
GNU gdb (Ubuntu 7.11.1-0ubuntu1~16.04) 7.11.1
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/lib/firefox/firefox...(no debugging symbols found)...done.
(gdb) run 
Starting program: /usr/lib/firefox/firefox java.html
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7fffe655d700 (LWP 7597)]
[Thread 0x7fffe655d700 (LWP 7597) exited]
[New Thread 0x7fffe655d700 (LWP 7599)]
[New Thread 0x7fffe55f2700 (LWP 7600)]
[New Thread 0x7fffe4df1700 (LWP 7601)]
[New Thread 0x7fffe296a700 (LWP 7602)]
[New Thread 0x7fffe01a8700 (LWP 7603)]
[New Thread 0x7fffdf9a7700 (LWP 7604)]
[New Thread 0x7fffdecf3700 (LWP 7605)]
[New Thread 0x7fffde4f2700 (LWP 7606)]
[New Thread 0x7fffde2f1700 (LWP 7607)]
[New Thread 0x7fffde0f0700 (LWP 7608)]
[New Thread 0x7fffddeef700 (LWP 7609)]
[New Thread 0x7fffddcee700 (LWP 7610)]
[New Thread 0x7fffddaed700 (LWP 7611)]
[New Thread 0x7fffdd8ec700 (LWP 7612)]
[New Thread 0x7fffdd6eb700 (LWP 7613)]
[New Thread 0x7fffdbebe700 (LWP 7614)]
[New Thread 0x7fffdd496700 (LWP 7615)]
[New Thread 0x7fffd98ff700 (LWP 7616)]
[New Thread 0x7fffd80ff700 (LWP 7617)]
[New Thread 0x7fffd70ff700 (LWP 7618)]
[New Thread 0x7fffd68fe700 (LWP 7619)]
[New Thread 0x7fffd56ff700 (LWP 7620)]
[New Thread 0x7fffd4efe700 (LWP 7621)]
FoxyProxy settingsDir: /home/ftw/.mozilla/firefox/w2q4g1ey.default/foxyproxy.xml
FoxyProxy settingsDir: /home/ftw/.mozilla/firefox/w2q4g1ey.default/foxyproxy.xml

(firefox:7592): Gtk-WARNING **: Theme file for DMZ-Black has no directories

[New Thread 0x7fffd2f8e700 (LWP 7622)]
[New Thread 0x7fffd278d700 (LWP 7623)]
[New Thread 0x7fffd16ff700 (LWP 7624)]
[New Thread 0x7fffd0efe700 (LWP 7625)]
[New Thread 0x7fffd02ff700 (LWP 7626)]
[New Thread 0x7fffcfafe700 (LWP 7627)]
[New Thread 0x7fffcf2fd700 (LWP 7628)]
[New Thread 0x7fffce5ff700 (LWP 7629)]
[New Thread 0x7fffcddfe700 (LWP 7630)]
[New Thread 0x7fffcd5fd700 (LWP 7631)]
[New Thread 0x7fffccdfc700 (LWP 7632)]
[New Thread 0x7fffcc5fb700 (LWP 7633)]
[New Thread 0x7fffcbdfa700 (LWP 7634)]
[Thread 0x7fffd68fe700 (LWP 7619) exited]
[Thread 0x7fffcfafe700 (LWP 7627) exited]
[Thread 0x7fffd02ff700 (LWP 7626) exited]
[New Thread 0x7fffcb0ff700 (LWP 7635)]
[New Thread 0x7fffd02ff700 (LWP 7636)]
[New Thread 0x7fffcfafe700 (LWP 7637)]
[New Thread 0x7fffd68fe700 (LWP 7638)]
[New Thread 0x7fffc8880700 (LWP 7639)]
[Thread 0x7fffcf2fd700 (LWP 7628) exited]
[Thread 0x7fffc8880700 (LWP 7639) exited]
[New Thread 0x7fffc7bff700 (LWP 7641)]
[New Thread 0x7fffd46fd700 (LWP 7642)]
[New Thread 0x7fffc69ff700 (LWP 7643)]
[New Thread 0x7fffc61fe700 (LWP 7644)]
[New Thread 0x7fffc8880700 (LWP 7645)]
openjdk version "1.8.0_111"
OpenJDK Runtime Environment (build 1.8.0_111-8u111-b14-2ubuntu0.16.04.2-b14)
OpenJDK 64-Bit Server VM (build 25.111-b14, mixed mode)
[Thread 0x7fffd278d700 (LWP 7623) exited]
[New Thread 0x7fffc4fff700 (LWP 7699)]
[New Thread 0x7fffd278d700 (LWP 7700)]
[New Thread 0x7fffcf2fd700 (LWP 7701)]
The application is a local file. Codebase validation is disabled. See: http://docs.oracle.com/javase/7/docs/technotes/guides/jweb/security/no_redeploy.html for details.
The application is a local file. Codebase validation is disabled. See: http://docs.oracle.com/javase/7/docs/technotes/guides/jweb/security/no_redeploy.html for details.
Application title was not found in manifest. Check with application vendor
Application title was not found in manifest. Check with application vendor
netx: Initialization Error: Could not initialize applet. (Your Extended applets security is at 'high' and this application is missing the 'permissions' attribute in manifest. And you have refused to run it.)
netx: Initialization Error: Could not initialize applet. (Your Extended applets security is at 'high' and this application is missing the 'permissions' attribute in manifest. And you have refused to run it.)
net.sourceforge.jnlp.LaunchException: Fatal: Initialization Error: Could not initialize applet. For more information click "more information button".
	at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:764)
	at net.sourceforge.jnlp.Launcher.getApplet(Launcher.java:686)
	at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:933)
Caused by: net.sourceforge.jnlp.LaunchException: Your Extended applets security is at 'high' and this application is missing the 'permissions' attribute in manifest. And you have refused to run it.
	at net.sourceforge.jnlp.runtime.ManifestAttributesChecker.checkPermissionsAttribute(ManifestAttributesChecker.java:287)
	at net.sourceforge.jnlp.runtime.ManifestAttributesChecker.checkAll(ManifestAttributesChecker.java:115)
	at net.sourceforge.jnlp.runtime.JNLPClassLoader.initializeResources(JNLPClassLoader.java:617)
	at net.sourceforge.jnlp.runtime.JNLPClassLoader.<init>(JNLPClassLoader.java:285)
	at net.sourceforge.jnlp.runtime.JNLPClassLoader.createInstance(JNLPClassLoader.java:357)
	at net.sourceforge.jnlp.runtime.JNLPClassLoader.getInstance(JNLPClassLoader.java:429)
	at net.sourceforge.jnlp.runtime.JNLPClassLoader.getInstance(JNLPClassLoader.java:403)
	at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:729)
	... 2 more

net.sourceforge.jnlp.LaunchException: Fatal: Initialization Error: Could not initialize applet. For more information click "more information button".
	at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:764)
	at net.sourceforge.jnlp.Launcher.getApplet(Launcher.java:686)
	at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:933)
Caused by: net.sourceforge.jnlp.LaunchException: Your Extended applets security is at 'high' and this application is missing the 'permissions' attribute in manifest. And you have refused to run it.
	at net.sourceforge.jnlp.runtime.ManifestAttributesChecker.checkPermissionsAttribute(ManifestAttributesChecker.java:287)
	at net.sourceforge.jnlp.runtime.ManifestAttributesChecker.checkAll(ManifestAttributesChecker.java:115)
	at net.sourceforge.jnlp.runtime.JNLPClassLoader.initializeResources(JNLPClassLoader.java:617)
	at net.sourceforge.jnlp.runtime.JNLPClassLoader.<init>(JNLPClassLoader.java:285)
	at net.sourceforge.jnlp.runtime.JNLPClassLoader.createInstance(JNLPClassLoader.java:357)
	at net.sourceforge.jnlp.runtime.JNLPClassLoader.getInstance(JNLPClassLoader.java:429)
	at net.sourceforge.jnlp.runtime.JNLPClassLoader.getInstance(JNLPClassLoader.java:403)
	at net.sourceforge.jnlp.Launcher.createApplet(Launcher.java:729)
	... 2 more

[Thread 0x7fffd2f8e700 (LWP 7622) exited]
[Thread 0x7fffd278d700 (LWP 7700) exited]
ExceptionHandler::GenerateDump cloned child 7759
ExceptionHandler::WaitForContinueSignal waiting for continue signal...
ExceptionHandler::SendContinueSignalToChild sent continue signal to child

###!!! [Parent][MessageChannel::Call] Error: (msgtype=0xB80006,name=PPluginInstance::Msg_NPP_SetWindow) Channel timeout: cannot send/recv

^C
Thread 1 "firefox" received signal SIGINT, Interrupt.
0x00007fffe87f394b in ?? () from /usr/lib/firefox/libxul.so
(gdb) bt
#0  0x00007fffe87f394b in ?? () from /usr/lib/firefox/libxul.so
#1  0x00007fffe88ac526 in ?? () from /usr/lib/firefox/libxul.so
#2  0x00007fffe90bd414 in ?? () from /usr/lib/firefox/libxul.so
#3  0x00007fffe90c01c1 in ?? () from /usr/lib/firefox/libxul.so
#4  0x00007fffe9832a94 in ?? () from /usr/lib/firefox/libxul.so
#5  0x00007fffe982b262 in ?? () from /usr/lib/firefox/libxul.so
#6  0x00007fffe9082916 in ?? () from /usr/lib/firefox/libxul.so
#7  0x00007fffe9174f4f in ?? () from /usr/lib/firefox/libxul.so
#8  0x00007fffe985993f in ?? () from /usr/lib/firefox/libxul.so
#9  0x00007fffe90cfbac in ?? () from /usr/lib/firefox/libxul.so
#10 0x00007fffe915dcf1 in ?? () from /usr/lib/firefox/libxul.so
#11 0x00007fffe92ea420 in ?? () from /usr/lib/firefox/libxul.so
#12 0x00007fffd4653b40 in ?? ()
#13 0xfffe7fffcb3f41c0 in ?? ()
#14 0x00007ffffff1ead0 in ?? ()
#15 0x0000000000000000 in ?? ()
(gdb) 



Attaching the screen shots and the crash traces as well for reference.
This looks more like a problem with Ice-Tea than Firefox, lots of log mentions of

  Initialization Error: Could not initialize applet. (Your Extended applets security
  is at 'high' and this application is missing the 'permissions' attribute in manifest.
  And you have refused to run it.)

The firefox crash is just that it detected the hung state caused by the plugin and gave up.
Group: firefox-core-security
Component: Untriaged → Other
Product: Firefox → External Software Affecting Firefox
Version: 50 Branch → unspecified

Comment 2

a year ago
Since we have removed support for non-Flash plugins, and this is very likely a plugin bug, I'm going to close this bug.
Status: UNCONFIRMED → RESOLVED
Last Resolved: a year ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.