139296 - M100 crash trying to install java plug-in [@ ntdll.dll - nsXULDocument::CreateElement]

Status: VERIFIED DUPLICATE of bug 138500

(Core Graveyard :: Plug-ins, defect)

Description

[Jay Patel [:jay]]

This is probably the #1 topcrasher with Mozilla1.0 RC1.  This particular crash
is being reported with many different stack traces, but most of them all have
the ntdll.dll stack signature.  Here are just one set of those crashes that
share the same stack:

Count   Offset    Real Signature
[ 13   ntdll.dll + 0x17f26 (0x77f67f26) 15063d86 - nsXULDocument::CreateElement ]
[ 12   ntdll.dll + 0x4b03d (0x77fcb03d) 5da08050 - nsXULDocument::CreateElement ]
[ 4   ntdll.dll + 0x4b03d (0x778cb03d) 4df89b1c - nsXULDocument::CreateElement ]
 
     Crash date range: 2002-04-18 to 2002-04-21
     Min/Max Seconds since last crash: 14 - 329935
     Min/Max Runtime: 14 - 329935
     Keyword List : install(5), java(10), load(4), plugin(12),  
     Count   Platform List 
     16   Windows NT 5.0 build 2195
     13   Windows NT 5.1 build 2600
 
     Count   Build Id List 
     29   2002041717
 
     No of Unique Users        29
 
 Stack trace(Frame) 

	 ntdll.dll + 0x17f26 (0x77f67f26)  
	 msvcrt.dll + 0x1ac14 (0x77c2ac14)  
	 msvcrt.dll + 0x1ac2a (0x77c2ac2a)  
	 nsXULDocument::CreateElement
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 6271] 
	 nsXULDocument::ResumeWalk
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 5716] 
	 nsXULDocument::CachedChromeStreamListener::OnStopRequest
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp  line 7188] 
	 nsDocumentOpenInfo::OnStopRequest
[d:\builds\seamonkey\mozilla\uriloader\base\nsURILoader.cpp  line 255] 
	 nsCachedChromeChannel::HandleStopLoadEvent
[d:\builds\seamonkey\mozilla\rdf\chrome\src\nsChromeProtocolHandler.cpp  line 473] 
	 PL_HandleEvent
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 597] 
	 PL_ProcessPendingEvents
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 530] 
	 _md_EventReceiverProc
[d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c  line 1078] 
	 USER32.dll + 0x3c076 (0x77d7c076)  
	 USER32.dll + 0x3c076 (0x77d7c076)  
	 USER32.dll + 0x3c076 (0x77d7c076)  
	 USER32.dll + 0x3c076 (0x77d7c076)  
	 _except_handler3()  
	 kernel32.dll + 0x3bb86 (0x77e9bb86)   
 
     (5444895)	Comments: http:\\rantanplan:8000 (rantanplan is my computer)this is Used by
HP Web JetAdmin. It Uses Java  The Program (Mozilla) failed as i clicked om Yes
to load Plugin fur Java now i will try again...
     (5433996)	Comments: Attempting to go to plugin downloader page
     (5432664)	Comments: Attempting to automatically download a plugin  (might have been
java... not sure).  Crashed immediately.
     (5432388)	URL: www.cakemusic.com/band/band.html
     (5430935)	Comments: installing the Java plugin
     (5424399)	URL: java.sun.com
     (5424399)	Comments: clicked "Get the Plugin"
     (5416483)	URL: http://www.mariosnet.com/lazaros/assign.htm
     (5416483)	Comments: I click on an applet that said "Click here to get the plugin" and
mozilla 1.0 Canditate 1 crashed
     (5401869)	Comments: Was visiting a website  was notified I need a plug-in  clicked the
"get plug-in" button and then had the failure. Can't give you the URL since the
browser shut itself down.
     (5395279)	Comments: Browsed to java.sun.com after installing jre1.3.1. Clicked on Java
ticker tape icon 
     (5394225)	URL: http://java.sun.com
     (5394225)	Comments: Clicked "get plugin" for java applet at right side of page.Dialog
for "get this plugin?" appeared and I clicked "Ok".Crash happened within 1
second or so after that dialog wentaway.
     (5393952)	URL: http://www.louisville.edu/~dwlee001
     (5393952)	Comments: I just started Mozilla!
     (5387731)	URL: java.sun.com
     (5387731)	Comments: Had just been asked to search for the java plugin and clicked yes.
     (5386791)	Comments: trying to get the Java plug-in
     (5378413)	URL: www.srdrs.ch
     (5378413)	Comments: open the realplayer link
     (5376897)	Comments: open in mozilla (tabbed browsing was enbled  java plugin 1.3 was
installed) java-based intranet webpage from our domino server  on top frame java
not runnningafter click it mozilla was crushedsorry for my bad english :)regards
 Igor Andreev 
     (5376897)	Comments:  Irkutsk  Russia
     (5376850)	Comments: I was being referred to the page to get plug-ins off a National
Weather Service site
     (5373204)	URL: http://stric.de/chess.php
     (5373204)	Comments: Clicked on "Hier"-Link below "Schach spielen". An small window
opens and there I clicked  in the middle "Click here to get the plugin". Then
Mozilla crashed.
     (5372594)	URL: www.scalado.com (go to Examples->ImageZoom->Auctions) and then click
the link to view the example.
     (5372594)	Comments: Clicked on the field of a Java applet to download the Java
plugin.I was a little bit surprised too that it didn't detect that I allready
had Java installed on my system (SUN's Java 2 Runtime Environment  Standard
Edition 1.4.0-b92). It's set to be
     (5372594)	Comments:  used as standard Java Runtime in both IE and NS 6.
     (5361592)	URL: java.sun.com
     (5361592)	Comments: tring to install java plugin

I have been able to easily reproduce this with my Mozilla1.0 RC1 build on Win2K
(many times).  The path to a crash sometimes vary, but the basic reproducible
case goes like this:

1. goto java.sun.com
2. the applet on the right is not loaded, it will say "Click here to get the plugin"
3. click the plugin icon (this might end in crash)
4. if you don't crash, a "Plug-in Not Loaded" dialog will pop up, just click
"Get the Plug-in" (this might end in crash)
5. if you're lucky enough to get this far you will be taken to the netscape
plugin finder page
6. click on the java link (this might end in a crash)
7. if you still haven't crash, you will be taken to another page where you can
download the plugin, click on the "Click to Download" icon and you will be
magically taken back to java.sun.com (without downloading the plugin).  If you
repeat steps 1-6, you should be able to crash eventually.

Comment 1

[Jay Patel [:jay]]

Adding crash keywords and nominating for nsbeta1.

Here are my recent incidents:
- 5491527  2002-04-22 14:15:32 ntdll.dll + 0x4b03d (0x77fcb03d) db6fdb8e
NetscapeMozilla1.0Win322002041717 again...damn    

- 5491330  2002-04-22 14:09:53 ntdll.dll + 0x4b9b1 (0x77fcb9b1) 1cfd7060
NetscapeMozilla1.0Win322002041717 this time just clicked on get the
plugin..didn't even get to the plugin finder page.    

- 5491290  2002-04-22 14:08:27 js_Mark 5d1eee2e
NetscapeMozilla1.0Win322002041717 again...just clicked on get plugin on
java.sun.com...then in the netscape plugin finder page, clicked on the Java
link.    

- 5491211  2002-04-22 14:01:54 ntdll.dll + 0x4bac4 (0x77fcbac4) d803517b
NetscapeMozilla1.0Win322002041717 just clicked on get the plugin and then
clicked on the Java link...and boom!

All of my crashes have a different stack trace...so I'm not sure what's going on
here, but it's definitely a problem that needs to be fixed.

Comment 2

[Oliver Klee]

This looks like a dupe of bug 109139.

Comment 3

[Jay Patel [:jay]]

I think this is a different crash.  Bug 109139 seems to be more related to the
actual downloading and installing of the plugin, while this bug seems to be a
result of clicking through links and dialogs.

Also, to help narrow down this problem I think the incidents with
nsXULDocument::CreateElement down a few frames in the stack might all be crashes
resulting from clicking "Get the Plug-in" in the "Plug-in Not Loaded" dialog. 
The only crash I experience from that dialog has the same stack as the incidents
I originally reported:

Incident ID 5492074 
Stack Signature ntdll.dll + 0x4b03d (0x77fcb03d) 9da24dd6
Email Address [e-mail]
Product ID Mozilla1.0
Build ID 2002041717
Trigger Time 2002-04-22 14:29:04
Platform Win32
Operating System Windows NT 5.0 build 2195
Module ntdll.dll
URL visited java.sun.com
User Comments crash clicking get plugin in the pop up dialog
Trigger Reason Access violation
Source File Name
Trigger Line No.
Stack Trace
ntdll.dll + 0x4b03d (0x77fcb03d)
MSVCRT.DLL + 0x1426 (0x78001426)
MSVCRT.DLL + 0x13c3 (0x780013c3)
nsXULDocument::CreateElement
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 6271]
nsXULDocument::ResumeWalk
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 5716]
nsXULDocument::CachedChromeStreamListener::OnStopRequest
[d:\builds\seamonkey\mozilla\content\xul\document\src\nsXULDocument.cpp, line 7188]
nsDocumentOpenInfo::OnStopRequest
[d:\builds\seamonkey\mozilla\uriloader\base\nsURILoader.cpp, line 255]
nsCachedChromeChannel::HandleStopLoadEvent
[d:\builds\seamonkey\mozilla\rdf\chrome\src\nsChromeProtocolHandler.cpp, line 473]
PL_HandleEvent [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line 597]
PL_ProcessPendingEvents [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c,
line 530]
_md_EventReceiverProc [d:\builds\seamonkey\mozilla\xpcom\threads\plevent.c, line
1078] 

Comment 4

[shrirang khanzode]

this naughty bug was known as bug 138500 ( till I changed the summary)

*** This bug has been marked as a duplicate of 138500 ***

Comment 5

[shrirang khanzode]

v