29895 - Can't logon to hotmail.com (PSM?)

Status: VERIFIED WORKSFORME

(Core :: DOM: UI Events & Focus Handling, defect, P3)

Description

[shrirang khanzode]

I get a crash when I try to logon to 'www.hotmail.com' website.
Pls reassign to correct component if wrong.

Steps to reproduce:

1. Go to the www.hotmail.com web page
2. Enter a valid username and password and press SIGN IN button.
3. Click NO for the 'Confirm' dialog box, when it pops up.
4. Observe an alert message saying "you are leaving a secure document" comes up.
5. Press OK and observe that mozilla crashes.

Comment 1

[shrirang khanzode]

Attachment: Attaching stack trace

Comment 2

[Norris Boyd]

Not sure why security... The stack track looks more like DOM events.

Reassigning.

Comment 3

[Charles Loosen]

I've experienced this bug as well. I'm still geting the illegal operation even
after installed the crypto/iplanet psm.

Comment 4

[shrirang khanzode]

I nominate this for pdt+ since a majority of our users will try to read internet 
mail on this site.

Comment 5

[leger]

Putting on the PDT+ radar for beta1.  shrir, can you get Talkback data for us on 
this please?  Thanks!

Comment 6

[shrirang khanzode]

I have attached talkback stack trace in my comment above.

Comment 7

[Jim Roskind]

Joki,
Do you think you're a good match for this bug?  Are there other folks that you
think should be more involved?
Thanks,
Jim

Comment 8

[joki (gone)]

I'm as good a match as any based on the stack trace.  Putting together a new 
build now to test it.  Saari seems like the next most likely candidate.  I've 
talked to him and he's also putting together a test build.  We'll update as we 
get more info.

Comment 9

[saari (gone)]

Ew, you made me get a hotmail account. But it wants me to find the personal 
security manager...

Comment 10

[saari (gone)]

Okay, I got the PSM, and then Mozilla promptly died with a bunch of thread 
asserts when registering for hotmail. Nice.

Same thing when I test this bug, a bunch of owning thread asserts after I start 
the PSM.

Comment 11

[saari (gone)]

Tonight's build just sits there throbbing happily.

Profile manager/PSM looks suspicious based on the asserts I'm seeing during 
cartman operations.

If I click somewhere whilst it throbs, the app hangs. If I break, I'm polling for 
events in NSPR from the CARTMAN_UIEventLoop

Comment 12

[Kathleen :Brade]

cc mwelch in case he has any ideas about this bug

Comment 13

[Mark Welch]

I don't understand saari's comment above at all. Are you trying to access
hotmail from within a secure page? What exactly have you done to make PSM start
up before you start seeing these problems?

Unless you have a secure page loading, I don't understand how PSM would get in
the way. cc'ing dougt in case he has any insight.

Comment 14

[Mark Welch]

Let me clarify something: Unless you actually use SSL for something, PSM will
not even start up. So, the steps outlined above to reproduce this bug would not
cause PSM to start up. If you really think PSM is involved, then you'll have to
have loaded an https URL beforehand (or turned on IMAP/SSL or NNTP/SSL).

Comment 15

[Mark Welch]

Oh, wait. "D'oh." Can you tell I haven't used Hotmail? :-)

I'll see what I can find out over here.

Comment 16

[joki (gone)]

Well from running the commerical build release I still see a crash that looks 
like it may be the one in the stack trace attached here.  But in trying to 
debug with my own build I get the same behavior as saari, the app spins 
forever trying to get into the page.  Unless you click in it, in which case it 
locks.  We'll definitely need to get past this first problem before we can hit 
the crash listed below.

Comment 17

[joki (gone)]

Okay.  After some more work trying to get the PSM correctly integrated into a 
local build (which seems to have worked) I now get this.  Trying to log onto 
hotmail I hit the logon button and get

1) dialog from wallet about saving info (don't think this is pertintent here)
2) dialog saying I'm entering a secure doc.
3) dialog saying I'm leaving a secure doc.
4) the hotmail inbox comes up very briefly before
5) being redirected to a page that say 're-enter password'

I do not get a crash at all.  If I manage to stop the browser betweens steps 4 
and 5 I can get to the inbox and use it.  Still trying to figure out why the 
additional redirect hits us.

Comment 18

[Doug Turner (:dougt)]

This works for me!  Please ensure that you are using either the netscape 
commercial build _or_ the mozilla tip with the iPlanet PSM.  I think that there 
is a mismatch on your system.

Comment 19

[Doug Turner (:dougt)]

I am using the mozilla tip and the iPlanet server.

Comment 20

[joki (gone)]

I did have a mismatch earlier which I fixed.  That's how I was able to get the 
five step results I listed.  That was with the tip and the iPlanet PSM.  
Playing with that setup a bit more I found that sometimes when I initially 
logged into to hotmal I got the redirect I listed but other times not.  
However, once I started getting the redirect happening it seemed to always 
happen.

I'm going to go back and check the Netscape Commerical binaries again.  When I 
installed them earlier I still seemed to get the crash but I may not have had 
the most recent ones.

But either way, since the tip only seems to work with the iPlanet PSM and since 
that setup doesn't seem to crash I'm not sure how to go about fixing this if 
its still occurring.  What is the difference between the PSMs?  Can we get a 
setup of the netscape commerical install in debug that's failing?

Comment 21

[Mark Welch]

The PSM provided by iPlanet for the Mozilla tip and the PSM provided for N6 beta
1 are completely different. We had to remove protocol obfuscation, so one
version of the protocol is encrypted and the other isn't. Mixing the two will do
Bad Things.

Just to be safe, if you're using a commercial beta 1 build, be sure to remove
all PSM installations other than the one you're using with beta 1. And, vice
versa if you're using the Mozilla tip/M15 and the iPlanet PSM.

So, the enter/leave dialogs happen because hotmail immediately redirects you
from https://www.hotmail.com to an insecure login page. However, once the
insecure login page is reached, PSM should not be doing anything at all. As Doug
mentioned above, this sounds like it could be a protocol mismatch.

Let me know how it goes.

Comment 22

[Joseph Elwell]

i've been able to log into hotmail.com just fine since crypto originally came 
out and was released to the public. Although the first time I go to hotmail I 
crashed - which leads me to believe that the problem was actually cookie 
related. Today with build 2000031708 winNT build is the first time I couldn't 
log into hotmail. I don't know why, but hotmail just loops on me, asking for my 
password over and over. If I turn on my proxy server, hotmail doesn't ever 
return anything when I click on "Sign In".

Comment 23

[shrirang khanzode]

I did a complete clean install. Removed my users50 folder, mozver.dat, 
mozregistry.dat and deleted all psm's also. I used the latest seamonkey build 
for today(timestamped 5:00pm). When I try to logon to hotmail, I enter into a 
continuous loop of hotmail asking for my password again and again. I do not 
crash now which I used to get earlier. 

Comment 24

[shrirang khanzode]

Forgot to mention in my last comment....I did a reboot after removing the 
psm's...

Comment 25

[joki (gone)]

Okay, after much playing with different configurations I was able to see the 
crash in a debug build.  It seems to occur only in Netscape Commercial beta 
branch with Netscape's PSM.  It does not occur in the Netscape or Mozilla tip 
with the iPlanet PSM.  Anyway, I have a fix for the crash part which I believe 
is safe, I need to talk it over with saari.  However, this only gets us to 
non-crashing.  The commerical branch build still exhibits the same looping 
through the pasword screen that the tip is showing.  Not sure what that is yet.

Comment 26

[Jim Roskind]

Does the "loop forever" effectively hang your browser?  i.e., once it starts, is
it impossible to do anything, such as even shutting down the browser?

Comment 27

[saari (gone)]

Talk to me Tom... I'm still trying to repro this crash in a debug build

Comment 28

[joki (gone)]

No, its not a hang.  You just can't actually get into your hotmail inbox.

Comment 29

[joki (gone)]

Attachment: Diff of current fix to stop crash

Comment 30

[joki (gone)]

Okay, well saari is willing to sign off on the proposed patch.  This leaves the 
problem of not being able to sign on to hotmail due to the continual redirect to 
the sign on page.

Based on behavior shown and 4.x behavior shown my best guess is that hotmail is 
doing server redirects to the sign on page based on the referrer field.  In 4.x 
we don't really seem to ever actually navigate to the url used we connect to 
during sign on so maybe we just pass from the initial logon screen to the inbox.  
In Mozilla we seem to definitely navigator to the url used in logon, then 
attempt to go to the inbox, at which point we're redirected.  This is just a 
guess anyway.  We should probably open a new bug for the redirect issue, and 
that new bug seems likely not to be mine.

Comment 31

[leger]

No longer crashing, moving to PDT-.  Will relnote that you cannot log into 
hotmail with beta1.

Comment 32

[joki (gone)]

Okay, not sure why crashing stopped but no crash is good crash.  The fix is 
probably still good.  I'll put in the tip after I get back from Utah on 3/24/00.

Comment 33

[Joseph Elwell]

I'm using a fresh install of winNT 2000032210.
If I log in twice it works fine. Or if I have mozilla go through my junkbusters
proxy it works fine also - a note: junkbusters filters ads and cookies mostly;
but it also strips the User Agent.

Comment 34

[Doron Rosenberg (IBM)]

*** Bug 35989 has been marked as a duplicate of this bug. ***

Comment 35

[Kathleen :Brade]

*** Bug 36399 has been marked as a duplicate of this bug. ***

Comment 36

[Kathleen :Brade]

add keyword from another bug

Comment 37

[leger]

Need to know if this is still a problem with latest M16 build.  shrir? janc?

Comment 38

[leger]

This was still a problem with Apr 21 builds.  PDT?

Comment 39

[Nisheeth Ranjan]

Tom updated the status whiteboard for this today.

Comment 40

[leger]

No longer a crash. Putting on [nsbeta2-] radar. Not critical to beta2.

Comment 41

[shrirang khanzode]

*** Bug 40221 has been marked as a duplicate of this bug. ***

Comment 42

[Eric Pollmann]

This works fine in today's Windows and Linux builds.  The Mac builds will not 
work because PSM is not available for Mac.  Please see bug 32783, which covers 
the Mac only issue.

To verify, get PSM.  Visit this URL:
http://docs.iplanet/docs/manuals/psm/psm-mozilla/index.html

Click on the install button on the bottom that corresponds to your platform (Win 
or Linux only at this time).

Go to http://www.hotmail.com
Sign in.

Comment 43

[shrirang khanzode]

yaa...it's working on windows and linux (2000061420m17). Marking verified.