239972 - Flash crashed when right-clicked while page is loading [@ libX11.so.6 ]

Status: RESOLVED WORKSFORME

(External Software Affecting Firefox Graveyard :: Flash (Adobe), defect)

Description

[David Costanzo]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7b) Gecko/20040316
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7b) Gecko/20040316

There is a particular flash object that is in an ad rotor on www.qeradiant.com
that causes Mozilla to crash when the object is right-clicked while the page is
being loaded.  Mozilla crashes before the Flash context-menu is shown.

The Flash object is an animated Vonage advertisement that shows two people
talking to each other.  I wish I had a better description, or a direct URL to
the flash object, but qeradiant.com won't show me this ad anymore.

Without a repro scenario, I can't be sure that the crash only happens if I
right-click while the page is loading, but I once waited until the page was
fully loaded and then was able to right-click on the flash.


Reproducible: Sometimes
Steps to Reproduce:
1. Go to www.qeradiant.com
2. Right click on the Flash object while the page is loading
3.

Actual Results:  
Mozilla crashes

Expected Results:  
The Flash content-menu appears.

I have filed four talkback incident reports.  Three of them are from the vonage
object on qeradiant.com.  After qeradiant stopped showing me this ad, I went to
vonage.com to see if I could find it.  I didn't find the same ad, but did crash
once.  I don't know if it's the same crash, since I wasn't able to reproduce
this, either.

TB14326K - on www.vonage.com
TB14319Y - on www.qeradiant.com
TB14318E - on www.qeradiant.com
TB12856G - on www.qeradiant.com

Comment 1

[R.K.Aa.]

I was seeing a similar crash a while back.. May I ask why you right-clicked in
the flash in the first place?

Comment 2

[David Costanzo]

I right-clicked so that I could uncheck the "play" and "loop" options in the
context menu.  I wanted to turn off the visual distraction of the animation to
make the rest of the page easy to read.

I have gotten into the habit of stopping animated flash as soon as I see it,
which is why I right-clicked on it before the page had fully loaded.

Comment 3

[Andrew Schultz]

Attachment: stacktrace (debug build + TB14319Y)

this is crashing in X11/flash.	it's unlikely to be a Mozilla bug.

the stack from my debug build has more symbols, but gdb thinks the stack is
corrupt.

I tried running under valgrind, but got no crash.  Instead, I got the complete
Mozilla context menu (width *all* of the possible context menu items).

Comment 4

[David Costanzo]

Attachment: repro scenario (ad rotor)

This is an HTML document that contains an ad rotor that sometimes shows the
offending flash object.  This is an except from www.arstechnica.com.  I
included two of ad rotors because that seems to help with the repro.

The bug seems most likely to repro if you right-click just after the flash
first becomes visible.	If you ever see the full content menu after
right-clicking, it is too late and you must reload the page to try again.  

I can reproduce the crash in about one out of every five tries.

Comment 5

[Andrew Schultz]

this appears to have been fixed by checkin for bug 238449.  I am unable to
reproduce with CVS with that checkin and also with a trunk build from 2/20
(before bug 233142, which caused bug 238449)

David, can you try a nightly from today or later (the fix went in last night),
and see if this is still a problem for you?

Comment 6

[David Costanzo]

I was able to reproduce the crash with the nightly build from 2004-04-10-09-trunk.

Comment 7

[Olivier Cahagne]

do you still crash with Mozilla 1.7rc2 and Flash 7.0r25 ?

Comment 8

[David Costanzo]

I can still reproduce the crash on Mozilla 1.7 RC2.  However, I am still running
an older version of Flash (6.0 r79) according to Help->About Plugins.  I have
been incorrectly assuming that the Flash plugin was upgraded along with Mozilla.
 Where do I get the upgrade for the Flash plugin?

I was not able to reproduce the crash with the repro scenario that I uploaded in
April.  However, the first time I tried right-clicking on the ad in
arstechnica.com, I crashed.

TALKBACK ID: TB76729K

I have upgraded my Linux distribution to Fedora Core 2.  This is relevant
insofar as I am now using the libX11.so from xorg, not xfree86.

Comment 9

[Olivier Cahagne]

David, see http://www.macromedia.com/go/getflashplayer
Thanks for the Talkback ID, this is very helpful (as soon as the Talkback server
has this stack).

Comment 10

[David Costanzo]

I upgraded to Flash 7.0 r25 and have not been able to reproduce crash.

Comment 11

[Olivier Cahagne]

Marking WFM then, please reopen if still crashing.

Comment 12

[BMO Automation]

Version and milestone values are being reset to defaults as part of product refactoring.