189483 - http://www.hnt.co.jp/stay crashes mozilla [@ ChunkAllocBase::Alloc ]

Status: RESOLVED WORKSFORME

(Core Graveyard :: Plug-ins, defect, P2)

Description

[Michael Babcock]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20021226 Debian/1.2.1-9
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20021226 Debian/1.2.1-9

This page

http://www.hnt.co.jp/stay 

crashes Mozilla. It happens either soon after the page is displayed, or when you
start to scroll.


Reproducible: Always

Steps to Reproduce:

Comment 1

[Michael Babcock]

On further investigation, this seems to be a problem with the Macromedia Flash
plugin. Here is a backtrace.

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 16384 (LWP 6948)]
0x42cd2322 in ChunkAllocBase::Alloc ()
   from /usr/lib/flashplugin-nonfree/libflashplayer.so
(gdb) bt
#0  0x42cd2322 in ChunkAllocBase::Alloc ()
   from /usr/lib/flashplugin-nonfree/libflashplayer.so
#1  0x42cd1ff8 in ChunkMalloc::Alloc ()
   from /usr/lib/flashplugin-nonfree/libflashplayer.so
#2  0x42cd2562 in __builtin_new ()
   from /usr/lib/flashplugin-nonfree/libflashplayer.so
#3  0x42ceb17e in ActionList::PushAction ()
   from /usr/lib/flashplugin-nonfree/libflashplayer.so
#4  0x42cb2917 in BehaviorList::DoEvent ()
   from /usr/lib/flashplugin-nonfree/libflashplayer.so
#5  0x42ce9867 in DisplayList::PlaceObject ()
   from /usr/lib/flashplugin-nonfree/libflashplayer.so
#6  0x42cfd6db in ScriptThread::PlaceObject2 ()
   from /usr/lib/flashplugin-nonfree/libflashplayer.so
#7  0x42d00689 in ScriptThread::DoTag ()
   from /usr/lib/flashplugin-nonfree/libflashplayer.so
#8  0x42d007c5 in ScriptThread::DoTags ()
   from /usr/lib/flashplugin-nonfree/libflashplayer.so
#9  0x42d009bc in ScriptThread::DrawFrame ()
   from /usr/lib/flashplugin-nonfree/libflashplayer.so
#10 0x42d00bf4 in ScriptThread::Seek ()
   from /usr/lib/flashplugin-nonfree/libflashplayer.so
#11 0x42d1a274 in CorePlayer::DoActions ()
---Type <return> to continue, or q <return> to quit---
   from /usr/lib/flashplugin-nonfree/libflashplayer.so
#12 0x42d1eaea in CorePlayer::DoPlay ()
   from /usr/lib/flashplugin-nonfree/libflashplayer.so
#13 0x42d486d1 in UnixCommonPlayer::OnTimer ()
   from /usr/lib/flashplugin-nonfree/libflashplayer.so
#14 0x42d7d2fa in gtkTimerCallback ()
   from /usr/lib/flashplugin-nonfree/libflashplayer.so
#15 0x403be3ea in g_main_set_poll_func () from /usr/lib/libglib-1.2.so.0
#16 0x403bd4c8 in g_get_current_time () from /usr/lib/libglib-1.2.so.0
#17 0x403bdad3 in g_get_current_time () from /usr/lib/libglib-1.2.so.0
#18 0x403bdc6c in g_main_run () from /usr/lib/libglib-1.2.so.0
#19 0x402df7f7 in gtk_main () from /usr/lib/libgtk-1.2.so.0
#20 0x40e16eb6 in NSGetModule ()
   from /usr/lib/mozilla/components/libwidget_gtk.so
#21 0x40df7fe8 in NSGetModule ()
   from /usr/lib/mozilla/components/libnsappshell.so
#22 0x080522a4 in getCountry ()
#23 0x08052bdd in main ()
#24 0x4051e9f1 in __libc_start_main () from /lib/libc.so.6

Comment 2

[Olivier Cahagne]

wfm using build 20030117 on Linux + Flash 6.0r69.

Do you crash after upgrading to Flash 6.0r69 ?

Comment 3

[Michael Babcock]

Yeah, still crashes for me with Mozilla 1.2.1 with Flash 6.0r69.
I'll try a newer Mozilla build.

Comment 4

[Michael Babcock]

Also crashes with build 20030118.

Comment 5

[Olivier Cahagne]

what does URL
http://www.macromedia.com/support/flash/ts/documents/test_version.htm report for
version ?

What is the preferred lang you're using in Mozilla ? Any special fonts maybe ?

I'm referring to this as browsers setup for Asian use crashed previous Flash 6
beta releases, see:
http://www.macromedia.com/software/flashplayer/special/beta/release_notes/

Comment 6

[Olivier Cahagne]

do you still crash with Flash 6.0r81 ?

Comment 7

[Michael Babcock]

It works now (Firefox 0.8, Flash 6.0r81). This is on a new system I recently
installed, so I don't know if it was the flash update or something else.

Comment 8

[Olivier Cahagne]

Marking WFM as no one could reproduce the crash, besides reporter.