Closed Bug 239750 Opened 20 years ago Closed 8 years ago

Crash while loading a page which contains <object> with <param>

Tracking

(Not tracked)

Status:

RESOLVED INCOMPLETE

People

(Reporter: kazhik, Unassigned)

Details

(Keywords: crash, testcase)

Koike Kazuhiko

Reporter

Description

•

20 years ago

Crash while loading a page which contains <object> with <param>.

(http://bugzilla.mozilla.gr.jp/attachment.cgi?id=2160&action=view)
***********************
<object type="video/x-msvideo" data="img/gongon.avi" width="160" height="120">
<param name="aaa" value="false">
</object>
***********************

Mozilla doesn't crash without <param>.


I'm using: 2004040408-trunk/Linux, Plugger 5.0.(419579), MPlayer 0.92

******************************************
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1078316320 (LWP 17227)]
0x4207a8a3 in strlen () from /lib/tls/libc.so.6
(gdb) bt
#0  0x4207a8a3 in strlen () from /lib/tls/libc.so.6
#1  0x4207a5e5 in strdup () from /lib/tls/libc.so.6
#2  0x41fb9b59 in NPP_New () from /home/kazhik/.mozilla/plugins/plugger.so
#3  0x41fba511 in Private_New () from /home/kazhik/.mozilla/plugins/plugger.so
#4  0x41a5f669 in ns4xPluginInstance::InitializePlugin(nsIPluginInstancePeer*)
    () from /home/work/trunk/mozilla/dist/bin/components/libgkplugin.so
#5  0x41a5f2d4 in ns4xPluginInstance::Initialize(nsIPluginInstancePeer*) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgkplugin.so
#6  0x41a69cb8 in nsPluginHostImpl::TrySetUpPluginInstance(char const*, nsIURI*,
nsIPluginInstanceOwner*) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgkplugin.so
#7  0x41a694b8 in nsPluginHostImpl::SetUpPluginInstance(char const*, nsIURI*,
nsIPluginInstanceOwner*) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgkplugin.so
#8  0x41a686b1 in nsPluginHostImpl::InstantiateEmbededPlugin(char const*,
nsIURI*, nsIPluginInstanceOwner*) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgkplugin.so
#9  0x40a65ba9 in nsObjectFrame::InstantiatePlugin(nsIPresContext*,
nsHTMLReflowMetrics&, nsHTMLReflowState const&, nsIPluginHost*, char const*,
nsIURI*) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#10 0x40a6522a in nsObjectFrame::Reflow(nsIPresContext*, nsHTMLReflowMetrics&,
nsHTMLReflowState const&, unsigned&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#11 0x40a60192 in nsLineLayout::ReflowFrame(nsIFrame*, unsigned&,
nsHTMLReflowMetrics*, int&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#12 0x40a37826 in nsBlockFrame::ReflowInlineFrame(nsBlockReflowState&,
nsLineLayout&, nsLineList_iterator, nsIFrame*, unsigned char*) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#13 0x40a3760d in nsBlockFrame::DoReflowInlineFrames(nsBlockReflowState&,
nsLineLayout&, nsLineList_iterator, int*, unsigned char*, int, int) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#14 0x40a37405 in nsBlockFrame::DoReflowInlineFramesAuto(nsBlockReflowState&,
nsLineList_iterator, int*, unsigned char*, int, int) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#15 0x40a372b3 in nsBlockFrame::ReflowInlineFrames(nsBlockReflowState&,
nsLineList_iterator, int*, int, int) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#16 0x40a35f9a in nsBlockFrame::ReflowLine(nsBlockReflowState&,
nsLineList_iterator, int*, int) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#17 0x40a3582d in nsBlockFrame::ReflowDirtyLines(nsBlockReflowState&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#18 0x40a34413 in nsBlockFrame::Reflow(nsIPresContext*, nsHTMLReflowMetrics&,
nsHTMLReflowState const&, unsigned&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#19 0x40a3bdc6 in nsBlockReflowContext::ReflowBlock(nsRect const&, int,
nsCollapsingMargin&, int, nsMargin&, nsHTMLReflowState&, unsigned&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#20 0x40a36d13 in nsBlockFrame::ReflowBlockFrame(nsBlockReflowState&,
nsLineList_iterator, int*) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#21 0x40a35c8a in nsBlockFrame::ReflowLine(nsBlockReflowState&,
nsLineList_iterator, int*, int) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#22 0x40a3582d in nsBlockFrame::ReflowDirtyLines(nsBlockReflowState&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#23 0x40a34413 in nsBlockFrame::Reflow(nsIPresContext*, nsHTMLReflowMetrics&,
nsHTMLReflowState const&, unsigned&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#24 0x40a41533 in nsContainerFrame::ReflowChild(nsIFrame*, nsIPresContext*,
nsHTMLReflowMetrics&, nsHTMLReflowState const&, int, int, unsigned, unsigned&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#25 0x40a50583 in CanvasFrame::Reflow(nsIPresContext*, nsHTMLReflowMetrics&,
nsHTMLReflowState const&, unsigned&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#26 0x40b0412b in nsBoxToBlockAdaptor::Reflow(nsBoxLayoutState&,
nsIPresContext*, nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned&, int,
int, int, int, int) () from
/home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#27 0x40b03bf1 in nsBoxToBlockAdaptor::DoLayout(nsBoxLayoutState&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#28 0x40afc3d5 in nsBox::Layout(nsBoxLayoutState&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#29 0x40af9037 in nsScrollBoxFrame::DoLayout(nsBoxLayoutState&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#30 0x40afc3d5 in nsBox::Layout(nsBoxLayoutState&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#31 0x40b0568b in nsContainerBox::LayoutChildAt(nsBoxLayoutState&, nsIBox*,
nsRect const&) () from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#32 0x40a4dfd7 in nsGfxScrollFrameInner::LayoutBox(nsBoxLayoutState&, nsIBox*,
nsRect const&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#33 0x40a4e23f in nsGfxScrollFrameInner::Layout(nsBoxLayoutState&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#34 0x40a4e017 in nsGfxScrollFrame::DoLayout(nsBoxLayoutState&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#35 0x40afc3d5 in nsBox::Layout(nsBoxLayoutState&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#36 0x40affaff in nsBoxFrame::Reflow(nsIPresContext*, nsHTMLReflowMetrics&,
nsHTMLReflowState const&, unsigned&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#37 0x40a4d4b9 in nsGfxScrollFrame::Reflow(nsIPresContext*,
nsHTMLReflowMetrics&, nsHTMLReflowState const&, unsigned&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#38 0x40a41533 in nsContainerFrame::ReflowChild(nsIFrame*, nsIPresContext*,
nsHTMLReflowMetrics&, nsHTMLReflowState const&, int, int, unsigned, unsigned&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#39 0x40a8bfea in ViewportFrame::Reflow(nsIPresContext*, nsHTMLReflowMetrics&,
nsHTMLReflowState const&, unsigned&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#40 0x40a6f720 in IncrementalReflow::Dispatch(nsIPresContext*,
nsHTMLReflowMetrics&, nsSize const&, nsIRenderingContext&) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#41 0x40a7aa3a in PresShell::ProcessReflowCommands(int) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#42 0x40a7bdf1 in ReflowEvent::HandleEvent() ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#43 0x40a7a50b in HandlePLEvent(ReflowEvent*) ()
   from /home/work/trunk/mozilla/dist/bin/components/libgklayout.so
#44 0x40851080 in PL_HandleEvent ()
   from /home/work/trunk/mozilla/dist/bin/libxpcom.so
#45 0x40850fac in PL_ProcessPendingEvents ()
   from /home/work/trunk/mozilla/dist/bin/libxpcom.so
#46 0x40852932 in nsEventQueueImpl::ProcessPendingEvents() ()
   from /home/work/trunk/mozilla/dist/bin/libxpcom.so
#47 0x417305ae in event_processor_callback(void*, int, GdkInputCondition) ()
   from /home/work/trunk/mozilla/dist/bin/components/libwidget_gtk.so
#48 0x417301fd in our_gdk_io_invoke(_GIOChannel*, GIOCondition, void*) ()
   from /home/work/trunk/mozilla/dist/bin/components/libwidget_gtk.so
#49 0x402740a6 in g_io_add_watch () from /usr/lib/libglib-1.2.so.0
#50 0x402759ae in g_get_current_time () from /usr/lib/libglib-1.2.so.0
#51 0x40275e89 in g_get_current_time () from /usr/lib/libglib-1.2.so.0
#52 0x40276124 in g_main_run () from /usr/lib/libglib-1.2.so.0
#53 0x4018127f in gtk_main () from /usr/lib/libgtk-1.2.so.0
#54 0x4173088e in nsAppShell::Run() ()
   from /home/work/trunk/mozilla/dist/bin/components/libwidget_gtk.so
#55 0x41716ebc in nsAppShellService::Run() ()
   from /home/work/trunk/mozilla/dist/bin/components/libnsappshell.so
#56 0x080548b1 in main1(int, char**, nsISupports*) ()
#57 0x08055110 in main ()
#58 0x42015704 in __libc_start_main () from /lib/tls/libc.so.6

Andrew Schultz

Comment 1

•

20 years ago

don't use Plugger, use MozPlugger
http://plugindoc.mozdev.org/en-AU/linux.html#MozPlugger

does the problem persist with MozPlugger?

Keywords: crash, testcase

Matthias Versen [:Matti]

Comment 2

•

20 years ago

it looks like a bug in Plugger if I read the stack...

Phil Ringnalda (:philor)

Updated

•

15 years ago

QA Contact: plugins

timeless

Updated

•

14 years ago

Assignee: peterlubczynski-bugs → nobody

Component: Plug-ins → Plugger

Product: Core → Plugins

QA Contact: plugins → plugger

Version: Trunk → unspecified

Benjamin Smedberg

Comment 3

•

8 years ago

Closing old bugs in the Plugins component. We aren't going to track issues in 3rd-party plugins in the Mozilla bug tracker. In addition, support for NPAPI plugins will be removed at the end of this year; for more details see the post at https://blog.mozilla.org/futurereleases/2015/10/08/npapi-plugins-in-firefox/

If there is a serious bug in Firefox, it needs to be filed in the "Core" product, "Plug-Ins" component.

Status: NEW → RESOLVED

Closed: 8 years ago

Resolution: --- → INCOMPLETE

Nobody; OK to take it and work on it

Assignee

Updated

•

8 years ago

Product: Plugins → Plugins Graveyard

You need to log in before you can comment on or make changes to this bug.

Bugzilla

Quick Search

Crash while loading a page which contains <object> with <param>

Categories

(Plugins Graveyard :: Plugger, defect)

Tracking

(Not tracked)

People

(Reporter: kazhik, Unassigned)

References

Details

(Keywords: crash, testcase)

Crash Data

Security

(public)

User Story

Description

Comment 1

Comment 2

Updated

Updated

Comment 3

Updated