180923 - Crash on <embed> tag

Status: VERIFIED DUPLICATE of bug 179822

(Core Graveyard :: Plug-ins, defect)

Description

[Grant Wagner]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3a) Gecko/20021119
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3a) Gecko/20021119

The following code has generated an error in Mozilla in Windows 2000 for the
last couple of days. 1.2 Beta seems to work properly. Also, if you comment out
or remove the <embed> tag portion, Mozilla does not crash, but of course it
doesn't render the Flash object either.

<object id="banner" name="banner"
 classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"
 codebase="http://active.macromedia.com/flash2/cabs/swflash.cab#version=4,0,0,0"
 width="268" height="35">
<param name="movie" value="http://www.macromedia.com/uber/nav/global_home.swf">
<param name="play" value="true">
<param name="loop" value="true">
<param name="quality" value="high">
<param name="menu" value="false">
<embed name="banner" id="banner"
 src="http://www.macromedia.com/uber/nav/global_home.swf"
 width="268"
 height="35"
 play="true"
 loop="true"
 quality="high"
 swliveconnect="true"
 type="application/x-shockwave-flash"
 pluginspage="http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash"
 menu="false"></embed>
</object>

Reproducible: Always

Steps to Reproduce:
1. Save the code above to an HTML document
2. Load the document in Mozilla, it will crash

Actual Results:  
Crashes with the following error:

*----> Stack Back Trace <----*

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name
0012D9D8 1000BB7A 007B064C 00000046 00000000 0012DAB4 <nosymbols> 
0012DA20 1000AE46 007B064C 00000046 00000000 0012DAB4 !<nosymbols> 
0012DA54 77E146FC 1000AE0F 007B064C 00000046 00000000 !<nosymbols> 
0012DA70 77E174AD 004631E8 00000046 00000000 0012DAB4 user32!TranslateMessageEx 
0012DA98 77FA02FF 0012DAA8 00000030 004631E8 00000046 user32!MBToWCSEx 
0012DB04 614617A9 00000000 0000010C 00000023 00000001
ntdll!KiUserCallbackDispatcher 
0012DB50 61467F81 3D888889 00000001 00000000 01DBC720 gkview!<nosymbols> 
0012DB90 6163CC0A 01ACE0D0 01DBB578 0012DCCC 00000000 gkview!<nosymbols> 
0012DD10 61629C2B 01ACE0D0 0012DF68 00000000 0012DD4C gklayout!NS_NewFrameManager 
0012DD38 61629A29 01D47110 0012DDD8 0012DDA0 00000000 gklayout!NS_NewPresShell 
0012DD78 61629953 01D47110 0012DDD8 0012DDA0 0012DE94 gklayout!NS_NewPresShell 
0012DDB0 6163C855 01DBC398 01D47110 0012DE94 0012DDD8 gklayout!NS_NewPresShell 
0012DF34 616411AC 01DBC398 0012DF68 00000000 0012DF60 gklayout!NS_NewFrameManager 
0012DF70 61641008 0012E560 0012DFD0 01DBC27C 01DBC398 gklayout!NS_NewFrameManager 
0012DFA4 61640EA3 0012E560 0012DFD0 01DBC398 0012E540 gklayout!NS_NewFrameManager 
0012E424 61640D87 0012E560 01DBC27C 0012E540 0012E463 gklayout!NS_NewFrameManager 
0012E450 6163FFC9 0012E560 01DBC27C 0212E540 00000001 gklayout!NS_NewFrameManager 
0012E4AC 6163FA98 0012E560 01DBC27C 0012E540 00000001 gklayout!NS_NewFrameManager 
0012E548 6163ECFA 01DBC27C 00000078 0012E860 0012E960 gklayout!NS_NewFrameManager 
0012E744 61647FB8 00000000 01D47110 0012E9A4 0012E860 gklayout!NS_NewFrameManager 
0012E77C 6164099B 0012EA38 0012E98C 0012EBF4 0012E99C gklayout!NS_NewFrameManager 
0012EA70 6163FDAF 0012EB00 01DBAF38 0012EB58 00000000 gklayout!NS_NewFrameManager 
0012EAC4 6163FA98 0012EB78 01DBAF38 0012EB58 00000001 gklayout!NS_NewFrameManager 
0012EB60 6163ECFA 01DBAF38 0012F09C 01DBACB0 01D47110 gklayout!NS_NewFrameManager 
0012ED5C 616318CE 00000000 01D47110 0012EE6C 0012EDB8 gklayout!NS_NewFrameManager 
0012ED84 6162233C 01DBACB0 01D47110 0012EE6C 0012EDB8 gklayout!NS_NewPresShell 
0012EEDC 616A12B4 01C965FC 01D47110 0012F034 01DBACB0 gklayout!NS_NewPresShell 
0012EFF8 616A0FDE 0012F2EC 01D47110 0012F034 0012F3DC gklayout!NS_NewFrameManager 
0012F0A8 6169C051 00000000 0012F3DC 00000000 6169636E gklayout!NS_NewFrameManager 
0012F0B8 6169636E 01DBAC18 0012F2EC 00000000 01C96980
gklayout!NS_NewFrameManager  (FPO: [2,0,1])
0012F164 6169C051 00000005 0012F2EC 01C96980 6169D89C gklayout!NS_NewFrameManager 
0012F174 6169D89C 01C96980 0012F2EC 00000000 00000001
gklayout!NS_NewFrameManager  (FPO: [2,0,1])
0012F1A4 616D8305 0012F2EC 00000000 0012F27C 616D84D3 gklayout!NS_NewFrameManager 
0012F1B4 616D84D3 0012F2EC 01C96980 0012F27C 01C96868 gklayout!<nosymbols> 
(FPO: [3,0,0])
0012F2A4 616D8330 0012F2EC 00000000 01C96868 01C96868 gklayout!<nosymbols> 
0012F2C0 6169C051 01C96868 0012F2EC 01C96834 6168A586 gklayout!<nosymbols> 
0012F2D0 6168A586 01C96868 0012F2EC 01C96834 0012F490
gklayout!NS_NewFrameManager  (FPO: [2,0,1])
0012F358 616D7C61 01C96834 01D47110 0012F490 0012F3DC gklayout!NS_NewFrameManager 
0012F380 616318CE 01C96834 01D47110 0012F490 0012F3DC gklayout!<nosymbols> 
0012F3A8 616D6AD1 01C96834 01D47110 0012F490 0012F3DC gklayout!NS_NewPresShell 
0012F504 616139BC 01C964F8 01D47110 0012F620 01C96834 gklayout!<nosymbols> 
0012F5FC 6161A5C6 01C7ECF0 0012F620 0012F69C 01C80CD8 gklayout!NSGetModule 
0012F6B4 616190FD 00000000 01C95A18 0012F6DC 614AD9CE gklayout!NS_NewPresShell 
0012F6C4 614AD9CE 00000001 00000000 01C95A10 01C7ECF0 gklayout!NS_NewPresShell 
0012F6DC 614A9170 01D47110 0012FA54 01C95A18 01C95A10 gkcontent!NSGetModule 
0012F748 614A86E8 01D47110 0012FA54 01C965FC 01C7ECF0 gkcontent!NSGetModule 
0012F86C 6161A104 01C95A18 01D47110 0012FA54 01DBACB0 gkcontent!NSGetModule 
0012F898 61619FE5 00000000 01DBB578 00000001 0012F988 gklayout!NS_NewPresShell 
0012F8E0 614678EF 01C95A18 01DBB578 0012FA54 0012F988 gklayout!NS_NewPresShell 
0012F994 614612DD 00000000 0012FA54 00000000 61466D40 gkview!<nosymbols> 
0012F9A4 61466D40 01ACE0D0 0012FA54 00000000 01DBB414 gkview!<nosymbols>  (FPO:
[3,0,0])
0012F9EC 61461B4A 01ACE0D0 01916788 0012FA04 0012FA34 gkview!<nosymbols> 
0012FA08 61471EEE 0012FA54 0000024A 0000012C 61471F33 gkview!<nosymbols> 
0012FA18 61471F33 01DBB414 0012FA54 0012FA34 0012FAC8 gkwidget!<nosymbols> 
(FPO: [3,0,2])
0012FA2C 614757DC 00000000 00000001 01DBB410 00000001 gkwidget!<nosymbols> 
0012FAC8 61475BCB 0000012C 00000000 00000000 01DBB410 gkwidget!<nosymbols> 
0012FADC 61474805 0000012C 00000000 00000000 01DD0210 gkwidget!<nosymbols> 
(FPO: [3,0,1])
0012FCD0 61472410 00000200 00000000 01DD0210 0012FD0C gkwidget!<nosymbols> 
0012FD00 77E3A2B8 01A90576 00000000 00000000 01DBB414 gkwidget!<nosymbols> 
0012FD20 77E145B1 61472365 01A90576 00000200 00000000 user32!SetWindowPlacement 
0012FDAC 77E1A752 0012FDD0 00000000 61478D70 0012FDD0 user32!TranslateMessageEx 
0012FE08 6189737A 00F6A358 00402057 00F2EDF0 0012FC00 user32!DispatchMessageW 
0012FE10 00402057 00F2EDF0 0012FC00 780419E0 00000000 appshell!<nosymbols> 
(FPO: [1,0,0])
0012FEE8 00401B40 00000000 61DFD0F8 00000000 0012FC00 mozilla!<nosymbols> 
0012FF14 004036C3 00000002 00233F70 00133A13 004077A8 mozilla!<nosymbols> 
0012FF24 004077A8 00400000 00000000 00133A13 00000003 mozilla!<nosymbols>  (FPO:
[4,0,1])
0012FFC0 77EA847C 0012FC00 00000043 7FFDF000 C0000005 mozilla!<nosymbols> 
0012FFF0 00000000 00407674 00000000 000000C8 00000100 kernel32!ProcessIdToSessionId

Comment 1

[Matthias Versen [:Matti]]

Reporter: Do you use flash 5 or flash 6?
(should you not add those informations in a bug about flash ?)

Comment 2

[Grant Wagner]

Plug-in in use:
File name: npswf32.dll
Shockwave Flash 5.0 r41

An upgrade to:
File name: NPSWF32.dll
Shockwave Flash 6.0 r47
resolved the crashing.

Bug can be resolved or left open with a lower priority, whatever you want. 
Perhaps this needs to be added to Release Notes - Known Problems for the next 
release?

Comment 3

[Matthias Versen [:Matti]]

*** This bug has been marked as a duplicate of 179822 ***

Comment 4

[Wesha]

v.