173047 - Crash in QDPlatformGlobalToLocal

Status: RESOLVED DUPLICATE of bug 157157

(Camino Graveyard :: Plug-ins, defect)

Description

[Avi Drissman]

Every so often I'm browsing along and Chimera crashes with a stack trace looking
very close to this one:

Date/Time:  2002-10-07 10:02:47 -0400
OS Version: 10.2.1 (Build 6D52)
Host:       DHCP92.baseview.com

Command:    Navigator
PID:        1056

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_INVALID_ADDRESS (0x0001) at 0x7fffffff

Thread 0 Crashed:
 #0   0x91a536d4 in QDIsPortBuffered
 #1   0x91a57eec in QDPlatformGlobalToLocal
 #2   0x03b9646c in 0x3b9646c
 #3   0x03bf582c in 0x3bf582c
 #4   0x03bfc13c in 0x3bfc13c
 #5   0x03c0562c in 0x3c0562c
 #6   0x03c28aec in 0x3c28aec
 #7   0x03b8e070 in 0x3b8e070
 #8   0x03b8d9b0 in 0x3b8d9b0
 #9   0x0063fc04 in
ns4xPluginStreamListener::OnDataAvailable(nsIPluginStreamInfo*, nsIInputStream*,
unsigned)
 #10  0x00340ae4 in nsPluginStreamListenerPeer::OnDataAvailable(nsIRequest*,
nsISupports*, nsIInputStream*, unsigned, unsigned)
 #11  0x00177bac in nsStreamListenerTee::OnDataAvailable(nsIRequest*,
nsISupports*, nsIInputStream*, unsigned, unsigned)
 #12  0x00453fec in nsHttpChannel::OnDataAvailable(nsIRequest*, nsISupports*,
nsIInputStream*, unsigned, unsigned)
 #13  0x0016d710 in nsOnDataAvailableEvent::HandleEvent()
 #14  0x05050450 in PL_HandleEvent
 #15  0x05050348 in PL_ProcessPendingEvents
 #16  0x050512f8 in nsEventQueueImpl::ProcessPendingEvents()
 #17  0x003d15ec in -[EventQueueHandler eventTimer:]
 #18  0x907e521c in __NSFireTimer
 #19  0x90163888 in __CFRunLoopDoTimer
 #20  0x901493e0 in __CFRunLoopRun
 #21  0x9018157c in CFRunLoopRunSpecific
 #22  0x92ba34cc in RunCurrentEventLoopInMode
 #23  0x92bb32f4 in ReceiveNextEventCommon
 #24  0x92bda280 in BlockUntilNextEventMatchingListInMode
 #25  0x93082184 in _DPSNextEvent
 #26  0x930ccf84 in -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:]
 #27  0x930ca500 in -[NSApplication run]
 #28  0x930d2598 in NSApplicationMain
 #29  0x00005124 in _start (crt.c:267)
 #30  0x00004fa4 in start

Thread 1:
 #0   0x90074328 in mach_msg_trap
 #1   0x90006670 in mach_msg
 #2   0xc00076cc in __ape_internal
 #3   0xc0000dd0 in __ape_agent
 #4   0x90021428 in _pthread_body

Thread 2:
 #0   0x90025e8c in select
 #1   0x0101c5a0 in poll
 #2   0x01018d74 in _pr_poll_with_poll
 #3   0x00173600 in nsSocketTransportService::Run()
 #4   0x05052ac4 in nsThread::Main(void*)
 #5   0x0101a1e0 in _pt_root
 #6   0x90021428 in _pthread_body

Thread 3:
 #0   0x9003f188 in semaphore_wait_signal_trap
 #1   0x9003efa4 in _pthread_cond_wait
 #2   0x0101541c in PR_WaitCondVar
 #3   0x001425f8 in nsDNSService::DequeuePendingQ()
 #4   0x00142024 in nsDNSService::Run()
 #5   0x05052ac4 in nsThread::Main(void*)
 #6   0x0101a1e0 in _pt_root
 #7   0x90021428 in _pthread_body

Thread 4:
 #0   0x90042d68 in semaphore_timedwait_signal_trap
 #1   0x9003ef94 in _pthread_cond_wait
 #2   0x010151e0 in pt_TimedWait
 #3   0x01015430 in PR_WaitCondVar
 #4   0x050563d8 in TimerThread::Run()
 #5   0x05052ac4 in nsThread::Main(void*)
 #6   0x0101a1e0 in _pt_root
 #7   0x90021428 in _pthread_body

Thread 5:
 #0   0x9003f188 in semaphore_wait_signal_trap
 #1   0x9003efa4 in _pthread_cond_wait
 #2   0x90824180 in -[NSConditionLock lockWhenCondition:]
 #3   0x933515f4 in -[NSUIHeartBeat _heartBeatThread:]
 #4   0x9081cd38 in forkThreadForFunction
 #5   0x90021428 in _pthread_body

Thread 6:
 #0   0x90074328 in mach_msg_trap
 #1   0x90006670 in mach_msg
 #2   0x901490a8 in __CFRunLoopRun
 #3   0x9018157c in CFRunLoopRunSpecific
 #4   0x905e2d90 in
XIOAudioDeviceManager::NotificationThread(XIOAudioDeviceManager*)
 #5   0x905e2cac in CAPThread::Entry(CAPThread*)
 #6   0x90021428 in _pthread_body

Thread 7:
 #0   0x9003f188 in semaphore_wait_signal_trap
 #1   0x9003efa4 in _pthread_cond_wait
 #2   0x0101541c in PR_WaitCondVar
 #3   0x05053bb0 in nsThreadPool::GetRequest(nsIThread*)
 #4   0x0505449c in nsThreadPoolRunnable::Run()
 #5   0x05052ac4 in nsThread::Main(void*)
 #6   0x0101a1e0 in _pt_root
 #7   0x90021428 in _pthread_body

PPC Thread State:
  srr0: 0x91a536d4 srr1: 0x0000d030                vrsave: 0x00000000
   xer: 0x00000000   lr: 0x91a57eec  ctr: 0x90221828   mq: 0x00000000
    r0: 0x00007fff   r1: 0xbfffe300   r2: 0x92c7034c   r3: 0x7fffffff
    r4: 0xbfffe3a8   r5: 0x000003df   r6: 0x00000000   r7: 0x00000000
    r8: 0x00000000   r9: 0x00000000  r10: 0x00000000  r11: 0x00000000
   r12: 0x90221828  r13: 0x00000000  r14: 0x00000000  r15: 0x00000001
   r16: 0x00000001  r17: 0x00000000  r18: 0x24002444  r19: 0x00000000
   r20: 0xbfffe700  r21: 0xbfffe6b0  r22: 0x02e26460  r23: 0x00000000
   r24: 0x02dfd000  r25: 0x02f17728  r26: 0x03205020  r27: 0x02dfd000
   r28: 0x02e74792  r29: 0x02e74790  r30: 0xbfffe3a8  r31: 0x032d9e64

It's looking like the plug-in is trying to make some call that calls
QDPlatformGlobalToLocal and is dying. Could this be some Carbon window issue?

(Nightly 2002100204)

(BTW, you can see from thread 1 that I'm using APE. I know; I'm a bad boy.
Xounds regularly crashes with this stack trace, but I turned it off for Chimera.
The fact that this still crashes here (albeit much less frequently) makes me
think it's a problem with Chimera rather than Xounds.)

Comment 1

[Avi Drissman]

Bug 172054 is a general crashing issue (which is the real crash log?), but this
bug's stack crawl is the same stack crawl that Jørgen Nørgaard reports in
comment 7 (http://bugzilla.mozilla.org/show_bug.cgi?id=172054#c7) of bug 172054.

And he's not using APE, so that definitely rules that out.

Comment 2

[Henri Sivonen (:hsivonen)]

This is the recent Flash regression whose instances have been marked as
duplicates of bug 157157.

*** This bug has been marked as a duplicate of 157157 ***

Comment 3

[Avi Drissman]

Attachment: Another crash. Related?

Another crash. While the tip of the stack trace is different
(GetQDGlobalsBlack), this looks very familiar. Same problem? Is the plug-in
having problems getting a WindowRef? Are we not causing the lazy initialization
of QuickDraw/Carbon to happen?