252230 - crash [@ CInputScript::ParseDoAction ] when loading flash page

Status: RESOLVED INVALID

(External Software Affecting Firefox :: Other, defect)

Description

[Daemon]

User-Agent:       Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7) Gecko/20040719 Firefox/0.9.1
Build Identifier: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7) Gecko/20040719 Firefox/0.9.1

Browser crashes into core when I try to reach the specified URL.
When core file is analysed with gdb I see very deep call stack (1893 entries).

Reproducible: Always
Steps to Reproduce:
1. Go to the URL http://www.ixbt.com/storage/pata-8mb.shtml
2. Watch how it crashes.

Actual Results:  
Mozilla window disappeared and coredump appeared.

Expected Results:  
Show me that page.

Comment 1

[Olivier Cahagne]

can you run "mozilla -g" and attach GDB backtrace ? I assume this build has symbols.

Comment 2

[Olivier Cahagne]

Can you attach your GDB stack to this bug report and upgrade to Flash 7.0r25 ?
Most (if not all) crashes are fixed in Flash 7.

Comment 3

[Daemon]

GDB stack trace follows:

GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...
Core was generated by `firefox-bin'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/local/lib/libgthread-2.0.so.200...done.
Loaded symbols for /usr/local/lib/libgthread-2.0.so.200
Reading symbols from /usr/X11R6/lib/firefox/lib/firefox-0.9.1/libmozjs.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/libmozjs.so
Reading symbols from /usr/X11R6/lib/firefox/lib/firefox-0.9.1/libxpcom.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/libxpcom.so
Reading symbols from /usr/local/lib/libiconv.so.3...done.
Loaded symbols for /usr/local/lib/libiconv.so.3
Reading symbols from /usr/X11R6/lib/firefox/lib/firefox-0.9.1/libplds4.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/libplds4.so
Reading symbols from /usr/X11R6/lib/firefox/lib/firefox-0.9.1/libplc4.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/libplc4.so
Reading symbols from /usr/X11R6/lib/firefox/lib/firefox-0.9.1/libnspr4.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/libnspr4.so
Reading symbols from /usr/X11R6/lib/libgtk-x11-2.0.so.200...done.
Loaded symbols for /usr/X11R6/lib/libgtk-x11-2.0.so.200
Reading symbols from /usr/X11R6/lib/libgdk-x11-2.0.so.200...done.
Loaded symbols for /usr/X11R6/lib/libgdk-x11-2.0.so.200
Reading symbols from /usr/X11R6/lib/libXrandr.so.2...done.
Loaded symbols for /usr/X11R6/lib/libXrandr.so.2
Reading symbols from /usr/X11R6/lib/libXi.so.6...done.
Loaded symbols for /usr/X11R6/lib/libXi.so.6
Reading symbols from /usr/local/lib/libatk-1.0.so.400...done.
Loaded symbols for /usr/local/lib/libatk-1.0.so.400
Reading symbols from /usr/X11R6/lib/libgdk_pixbuf-2.0.so.200...done.
Loaded symbols for /usr/X11R6/lib/libgdk_pixbuf-2.0.so.200
Reading symbols from /usr/X11R6/lib/libpangoxft-1.0.so.200...done.
Loaded symbols for /usr/X11R6/lib/libpangoxft-1.0.so.200
Reading symbols from /usr/X11R6/lib/libXft.so.2...done.
Loaded symbols for /usr/X11R6/lib/libXft.so.2
Reading symbols from /usr/local/lib/libfreetype.so.9...done.
Loaded symbols for /usr/local/lib/libfreetype.so.9
Reading symbols from /lib/libz.so.2...done.
Loaded symbols for /lib/libz.so.2
Reading symbols from /usr/X11R6/lib/libXrender.so.1...done.
Loaded symbols for /usr/X11R6/lib/libXrender.so.1
Reading symbols from /usr/X11R6/lib/libXext.so.6...done.
Loaded symbols for /usr/X11R6/lib/libXext.so.6
Reading symbols from /usr/X11R6/lib/libfontconfig.so.1...done.
Loaded symbols for /usr/X11R6/lib/libfontconfig.so.1
Reading symbols from /usr/X11R6/lib/libpangox-1.0.so.200...done.
Loaded symbols for /usr/X11R6/lib/libpangox-1.0.so.200
Reading symbols from /usr/X11R6/lib/libX11.so.6...done.
Loaded symbols for /usr/X11R6/lib/libX11.so.6
Reading symbols from /usr/X11R6/lib/libpango-1.0.so.200...done.
Loaded symbols for /usr/X11R6/lib/libpango-1.0.so.200
Reading symbols from /usr/local/lib/libgobject-2.0.so.200...done.
Loaded symbols for /usr/local/lib/libgobject-2.0.so.200
Reading symbols from /usr/local/lib/libgmodule-2.0.so.200...done.
Loaded symbols for /usr/local/lib/libgmodule-2.0.so.200
Reading symbols from /usr/local/lib/libglib-2.0.so.200...done.
Loaded symbols for /usr/local/lib/libglib-2.0.so.200
Reading symbols from /lib/libm.so.2...done.
Loaded symbols for /lib/libm.so.2
Reading symbols from /usr/lib/libc_r.so.5...done.
Loaded symbols for /usr/lib/libc_r.so.5
Reading symbols from /usr/lib/libstdc++.so.4...done.
Loaded symbols for /usr/lib/libstdc++.so.4
Reading symbols from /usr/lib/libpthread.so.1...done.
Loaded symbols for /usr/lib/libpthread.so.1
Reading symbols from /lib/libc.so.5...done.
Loaded symbols for /lib/libc.so.5
Reading symbols from /usr/local/lib/libintl.so.5...done.
Loaded symbols for /usr/local/lib/libintl.so.5
Reading symbols from /usr/local/lib/libexpat.so.4...done.
Loaded symbols for /usr/local/lib/libexpat.so.4
Reading symbols from /usr/X11R6/lib/X11/locale/lib/common/xlcDef.so.2...done.
Loaded symbols for /usr/X11R6/lib/X11/locale/lib/common/xlcDef.so.2
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libxpconnect.so...done.
Loaded symbols for
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libxpconnect.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libnsappshell.so...done.
Loaded symbols for
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libnsappshell.so
Reading symbols from /usr/X11R6/lib/firefox/lib/firefox-0.9.1/libgkgfx.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/libgkgfx.so
Reading symbols from /usr/X11R6/lib/firefox/lib/firefox-0.9.1/libgtkxtbin.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/libgtkxtbin.so
Reading symbols from /usr/X11R6/lib/libXt.so.6...done.
Loaded symbols for /usr/X11R6/lib/libXt.so.6
Reading symbols from /usr/X11R6/lib/libSM.so.6...done.
Loaded symbols for /usr/X11R6/lib/libSM.so.6
Reading symbols from /usr/X11R6/lib/libICE.so.6...done.
Loaded symbols for /usr/X11R6/lib/libICE.so.6
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libwidget_gtk2.so...done.
Loaded symbols for
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libwidget_gtk2.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libembedcomponents.so...done.
Loaded symbols for
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libembedcomponents.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libtypeaheadfind.so...done.
Loaded symbols for
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libtypeaheadfind.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libpref.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libpref.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libnecko.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libnecko.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libgklayout.so...done.
Loaded symbols for
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libgklayout.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libcaps.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libcaps.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libi18n.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libi18n.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libimglib2.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libimglib2.so
Reading symbols from /usr/local/lib/libjpeg.so.9...done.
Loaded symbols for /usr/local/lib/libjpeg.so.9
Reading symbols from /usr/local/lib/libpng.so.5...done.
Loaded symbols for /usr/local/lib/libpng.so.5
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/librdf.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/librdf.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libsystem-pref.so...done.
Loaded symbols for
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libsystem-pref.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libgfx_gtk.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libgfx_gtk.so
Reading symbols from /usr/X11R6/lib/libXp.so.6...done.
Loaded symbols for /usr/X11R6/lib/libXp.so.6
Reading symbols from
/usr/X11R6/lib/gtk-2.0/2.2.0/loaders/libpixbufloader-xpm.so...done.
Loaded symbols for /usr/X11R6/lib/gtk-2.0/2.2.0/loaders/libpixbufloader-xpm.so
Reading symbols from /usr/X11R6/lib/libXcursor.so.1...done.
Loaded symbols for /usr/X11R6/lib/libXcursor.so.1
Reading symbols from /usr/X11R6/lib/libgconf-2.so...done.
Loaded symbols for /usr/X11R6/lib/libgconf-2.so
Reading symbols from /usr/local/lib/libORBit-2.so.0...done.
Loaded symbols for /usr/local/lib/libORBit-2.so.0
Reading symbols from /usr/local/lib/libpopt.so.0...done.
Loaded symbols for /usr/local/lib/libpopt.so.0
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libdocshell.so...done.
Loaded symbols for
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libdocshell.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libpipboot.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libpipboot.so
Reading symbols from /usr/X11R6/lib/firefox/lib/firefox-0.9.1/libjsj.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/libjsj.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/liboji.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/liboji.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libgkplugin.so...done.
Loaded symbols for
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libgkplugin.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libcookie.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libcookie.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libwebbrwsr.so...done.
Loaded symbols for
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libwebbrwsr.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libappcomps.so...done.
Loaded symbols for
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libappcomps.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libchrome.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libchrome.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libhtmlpars.so...done.
Loaded symbols for
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libhtmlpars.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libuconv.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libuconv.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libjar50.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libjar50.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libxremoteservice.so...done.
Loaded symbols for
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libxremoteservice.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/libxpcom_compat.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/libxpcom_compat.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libprofile.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libprofile.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libxpcom_compat_c.so...done.
Loaded symbols for
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libxpcom_compat_c.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libbrowsercomps.so...done.
Loaded symbols for
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libbrowsercomps.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libtxmgr.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libtxmgr.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libeditor.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libeditor.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libtoolkitcomps.so...done.
Loaded symbols for
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libtoolkitcomps.so
Reading symbols from /usr/X11R6/lib/pango/1.2.0/modules/pango-basic-xft.so...done.
Loaded symbols for /usr/X11R6/lib/pango/1.2.0/modules/pango-basic-xft.so
Reading symbols from
/usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libmork.so...done.
Loaded symbols for /usr/X11R6/lib/firefox/lib/firefox-0.9.1/components/libmork.so
Reading symbols from /usr/X11R6/lib/browser_plugins/npflash.so...done.
Loaded symbols for /usr/X11R6/lib/browser_plugins/npflash.so
Reading symbols from /usr/local/lib/libflash.so.0...done.
Loaded symbols for /usr/local/lib/libflash.so.0
Reading symbols from /libexec/ld-elf.so.1...done.
Loaded symbols for /libexec/ld-elf.so.1
#0  0x28a27567 in kill () from /lib/libc.so.5
(gdb) bt
#0  0x28a27567 in kill () from /lib/libc.so.5
#1  0x288f2fdd in _thread_sig_send () from /usr/lib/libc_r.so.5
#2  0x288eef79 in pthread_kill () from /usr/lib/libc_r.so.5
#3  0x289c16f0 in raise () from /usr/lib/libpthread.so.1
#4  0x08062af5 in nsProfileLock::FatalSignalHandler (signo=11)
    at nsProfileLock.cpp:205
#5  0x288f2243 in _thread_sig_handler () from /usr/lib/libc_r.so.5
#6  0x288f20d3 in _thread_sig_handler () from /usr/lib/libc_r.so.5
#7  0xbfbfff94 in ?? ()
#8  0x0000000b in ?? ()
#9  0x29f53288 in CInputScript::ParseDoAction ()
   from /usr/local/lib/libflash.so.0
#10 0x29f55a5e in CInputScript::ParseTags () from /usr/local/lib/libflash.so.0
#11 0x29f55dbf in CInputScript::ParseData () from /usr/local/lib/libflash.so.0
#12 0x29f47a7f in FlashParse () from /usr/local/lib/libflash.so.0
#13 0x29f3db29 in NPP_Write () from /usr/X11R6/lib/browser_plugins/npflash.so
#14 0x29f3e532 in Private_Write ()
   from /usr/X11R6/lib/browser_plugins/npflash.so
#15 0x299abfcc in ns4xPluginStreamListener::OnDataAvailable (this=0x8900700, 
    pluginInfo=0x896cbc0, input=0x8967ce0, length=0)
    at ns4xPluginInstance.cpp:541
#16 0x299b53d8 in nsPluginStreamListenerPeer::OnDataAvailable (this=0x897f980, 
    request=0x8940c00, aContext=0x0, aIStream=0x8967ce0, sourceOffset=11293, 
    aLength=5886) at nsAutoPtr.h:1034
#17 0x28dab43a in nsStreamListenerTee::OnDataAvailable (this=0x89678c0, 
    request=0x8940c00, context=0x0, input=0x898010c, offset=11293, count=5886)
    at nsCOMPtr.h:710
#18 0x28e3f7c7 in nsHttpChannel::OnDataAvailable (this=0x8940c00, 
    request=0x8940c34, ctxt=0x0, input=0x898010c, offset=11293, count=5886)
    at nsCOMPtr.h:710
#19 0x28d89930 in nsInputStreamPump::OnStateTransfer (this=0x897fc80)
    at nsCOMPtr.h:710
#20 0x28d895c9 in nsInputStreamPump::OnInputStreamReady (this=0x897fc80, 
    stream=0x898010c) at nsInputStreamPump.cpp:336
#21 0x28199fae in nsInputStreamReadyEvent::EventHandler (plevent=0x0)
    at nsCOMPtr.h:710
#22 0x281b8659 in PL_HandleEvent (self=0x88a1bc4) at plevent.c:673
#23 0x281b8529 in PL_ProcessPendingEvents (self=0x811e5c0) at plevent.c:608
#24 0x281bb21b in nsEventQueueImpl::ProcessPendingEvents (this=0x811e580)
    at nsEventQueue.cpp:391
#25 0x28c80d1a in event_processor_callback (source=0x8351900, 
    condition=G_IO_IN, data=0x846c) at nsAppShell.cpp:67
#26 0x288a74c4 in g_io_unix_dispatch () from /usr/local/lib/libglib-2.0.so.200
#27 0x2888599f in g_main_dispatch () from /usr/local/lib/libglib-2.0.so.200
#28 0x2888684d in g_main_context_dispatch ()
   from /usr/local/lib/libglib-2.0.so.200
#29 0x28886c0a in g_main_context_iterate ()
   from /usr/local/lib/libglib-2.0.so.200
#30 0x288873c1 in g_main_loop_run () from /usr/local/lib/libglib-2.0.so.200
#31 0x2840b577 in gtk_main () from /usr/X11R6/lib/libgtk-x11-2.0.so.200
#32 0x28c81269 in nsAppShell::Run (this=0x80b5710) at nsAppShell.cpp:142
#33 0x28ba9047 in nsAppShellService::Run (this=0x0) at nsCOMPtr.h:710
#34 0x080572f9 in xre_main (argc=1, argv=0xbfbfe818, aAppData=0x80670ac)
    at nsCOMPtr.h:710
#35 0x0804fef7 in main (argc=1, argv=0xbfbfe818) at nsBrowserApp.cpp:58
(gdb) quit

Comment 4

[Daemon]

(In reply to comment #2)
> Can you attach your GDB stack to this bug report and upgrade to Flash 7.0r25 ?
> Most (if not all) crashes are fixed in Flash 7.
Sorry, but I can not use Flash plug-in from Macromedia, since I'm running
FreeBSD and this is Linux plug-in. linuxpluginwrapper does not help. So, I'm
using GPL Flash plug-in, version 0.4.10-6.

Comment 5

[Adam Guthrie]

*** Bug 307515 has been marked as a duplicate of this bug. ***

Comment 6

[Adam Guthrie]

Updating summary to accurately reflect the crash data.

Comment 7

[Wayne Mery (:wsmwk)]

Adam, reporter email address rejects.

Comment 8

[Wayne Mery (:wsmwk)]

Marcia, can you flip this to someone who can test or intelligently close?  Everyone in the bug is gone

(In reply to comment #7)
> Adam's and reporter email address rejects. 

Comment 9

[Adam Guthrie]

Wayne, I'm going to go ahead and mark this as INVALID based on your comment 7. If no one is responding and we're not seeing similar reports, we can only assume the bug is not occurring anymore.

->INVALID