285979 - Consistent crash when attempting to open URL [@ SCharacterParser::BuildEdges ]

Status: RESOLVED INVALID

(Core Graveyard :: Plug-ins, defect)

Description

[Bruce Miller]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.6) Gecko/20050306 Firefox/1.0.1 (Debian package 1.0.1-2)
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.6) Gecko/20050306 Firefox/1.0.1 (Debian package 1.0.1-2)

Most of page renders, and then Firefox quietly dies.

Reproducible: Always

Steps to Reproduce:
1.open referring page: http://linuxtoday.com/infrastructure/2005031301326NWEM
2.new pages takes some seconds to render (even on fast machine); selecting the
chosen article (Linux on cell phones) does _*not*_ forestall the crash


Actual Results:  
Firefox closed silently, closing all other (~3) open tabs.

Expected Results:  
should have rendered new page:
http://enterprise-linux-it.newsfactor.com/story.xhtml?story_title=Putting-Linux-To-Work-in-the-Cellular-Space&story_id=31115

silent crash

I used Konqueror to get the URI of the page that I was ultimately trying to
reach. Opening the URI which I am reporting here generated a SIGSEV error in
Konqueror but the application did not shut down.

Comment 1

[Bruce Miller]

A second error report within Konqueror generated the following backtrace in
nspluginviewer:

Using host libthread_db library "/lib/tls/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread -1235150528 (LWP 15086)]
[KCrash handler]
#3  0xb6351f54 in SCharacterParser::BuildEdges ()
   from /usr/lib/netscape/plugins-libc6/libflashplayer.so
#4  0xb6353064 in SObject::BuildEdges ()
   from /usr/lib/netscape/plugins-libc6/libflashplayer.so
#5  0xb63552a2 in SObject::Draw ()
   from /usr/lib/netscape/plugins-libc6/libflashplayer.so
#6  0xb635532f in SObject::Draw ()
   from /usr/lib/netscape/plugins-libc6/libflashplayer.so
#7  0xb635532f in SObject::Draw ()
   from /usr/lib/netscape/plugins-libc6/libflashplayer.so
#8  0xb635532f in SObject::Draw ()
   from /usr/lib/netscape/plugins-libc6/libflashplayer.so
#9  0xb634513d in DisplayList::UpdateRect ()
   from /usr/lib/netscape/plugins-libc6/libflashplayer.so
#10 0xb634548b in DisplayList::Update ()
   from /usr/lib/netscape/plugins-libc6/libflashplayer.so
#11 0xb6383099 in CorePlayer::UpdateBuffer ()
   from /usr/lib/netscape/plugins-libc6/libflashplayer.so
#12 0xb63829c2 in CorePlayer::DrawScreen ()
   from /usr/lib/netscape/plugins-libc6/libflashplayer.so
#13 0xb6382f5d in CorePlayer::UpdateScreen ()
   from /usr/lib/netscape/plugins-libc6/libflashplayer.so
#14 0xb637b8d2 in CorePlayer::DoPlay ()
   from /usr/lib/netscape/plugins-libc6/libflashplayer.so
#15 0xb63a5dd5 in UnixCommonPlayer::OnTimer ()
   from /usr/lib/netscape/plugins-libc6/libflashplayer.so
#16 0xb63daad5 in PlatformPlayer::TimerProc ()
   from /usr/lib/netscape/plugins-libc6/libflashplayer.so
#17 0xb6e13715 in XtAppProcessEvent () from /usr/X11R6/lib/libXt.so.6
#18 0x0806526e in QXtEventLoop::processEvents ()
#19 0xb713a818 in QEventLoop::enterLoop ()
   from /home/bruce/kde3.4/lib/libqt-mt.so.3
#20 0xb713a6c8 in QEventLoop::exec ()
   from /home/bruce/kde3.4/lib/libqt-mt.so.3
#21 0xb7128651 in QApplication::exec ()
   from /home/bruce/kde3.4/lib/libqt-mt.so.3
#22 0x08064028 in main ()

Comment 2

[Matthias Versen [:Matti]]

this looks like a bug in the flashplayer itself -> invalid