305876 - 64 bit firefox 1.0.6 + 64 bit blackdown-jre-1.4.2.02 crash on certain web pages

Status: RESOLVED WORKSFORME

(Core Graveyard :: Java: OJI, defect)

Description

[Raphael Clifford]

User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.10) Gecko/20050818 Firefox/1.0.6
Build Identifier: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.10) Gecko/20050818 Firefox/1.0.6

Firefox crashes on certain web pages that contain applets. Previously reported
at  http://bugs.gentoo.org/show_bug.cgi?id=94290 complete with full debug
output/stack trace.


Reproducible: Always

Steps to Reproduce:
It is 100 percent reproducible on my system if you 

1. Go to http://www.londoncyclenetwork.org.uk/webmap
2. User name "public", password "public"
3. Accept the java applet from Itergraph.

Note the glibc error at the end of the log.
Actual Results:  
Firefox crashes and dies.

Expected Results:  
Firefox should load the page with the applet and run normally.

The system is an amd64 with 1GB RAM running gentoo with no exotic flags. The
results of emerge --info is

Portage 2.0.51.22-r2 (default-linux/amd64/2005.1, gcc-3.4.4, glibc-2.3.5-r1, 2.6
.12-gentoo-r7 x86_64)
=================================================================
System uname: 2.6.12-gentoo-r7 x86_64 AMD Athlon(tm) 64 Processor 3000+
Gentoo Base System version 1.6.13
dev-lang/python:     2.3.5
sys-apps/sandbox:    1.2.12
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.5
sys-devel/binutils:  2.15.92.0.2-r10
sys-devel/libtool:   1.5.18-r1
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="amd64"
AUTOCLEAN="yes"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=k8 -O2"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.4/env /usr/kde/3.4/share
/config /usr/kde/3.4/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/lib6
4/mozilla/defaults/pref /usr/share/config /usr/share/texmf/dvipdfm/config/ /usr/
share/texmf/dvips/config/ /usr/share/texmf/tex/generic/config/ /usr/share/texmf/
tex/platex/config/ /usr/share/texmf/xdvi/ /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-march=k8 -O2"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks sandbox sfperms strict"
GENTOO_MIRRORS="http://ftp.belnet.be/mirror/rsync.gentoo.org/gentoo/ http://www.
mirror.ac.uk/sites/www.ibiblio.org/gentoo/ ftp://ftp.heanet.ie/pub/gentoo/ http:
//ftp.easynet.nl/mirror/gentoo/"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="amd64 X Xaw3d aac aalib alsa artworkextra avi bash-completion berkdb bindin
st bitmap-fonts bonobo bootsplash browserplugin cdr crypt cups curl dvd dvdr eds
 encode esd fam font-server foomaticdb fortran gdbm gif gnome gpm gstreamer gtk 
gtk2 guile icq imagemagick imlib ipv6 irc jabber java jpeg junit kde libwww lzw 
lzw-tiff mad motif mozilla mp3 mpeg msn ncurses nls nptl nsplugin offensive ogg 
oggvorbis opengl oss pam pdflib perl png python qt quicktime readline rss samba 
sdl spell ssl tcpd tetex theora tiff truetype truetype-fonts type1-fonts usb use
rlocales vorbis xml xml2 xmms xpm xv xvid yahoo zlib userland_GNU kernel_linux e
libc_glibc"
Unset:  ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS, MAKEOPTS

Comment 1

[Raphael Clifford]

Attachment: Java error report plus full stack trace (compiled with -g -ggdb -O1 -pipe)

This is a full report from visiting www.java.com.

Comment 2

[Raphael Clifford]

Visiting http://www.londoncyclenetwork.org.uk/webmap as in the original report
does not produce a java error report or a stack trace. The tail of the gdb
output is simply

[...]
Break: at file nsPresShell.cpp, line 3592
JavaScript error: 
http://www.londoncyclenetwork.org.uk/webmap/js/waiting.js line 24:
document.ANIGIF has no properties

WARNING: NS_ENSURE_TRUE(NS_SUCCEEDED(rv)) failed, file nsDOMClassInfo.cpp, line 6849
###!!! ASSERTION: Don't call me!: 'Error', file nsDOMClassInfo.cpp, line 2692
Break: at file nsDOMClassInfo.cpp, line 2692
###!!! ASSERTION: Don't call me!: 'Error', file nsDOMClassInfo.cpp, line 2692
Break: at file nsDOMClassInfo.cpp, line 2692
[New Thread 1124096352 (LWP 11268)]
[New Thread 1140881760 (LWP 11269)]
WARNING: CreateSecureEnv OK, file ProxyJNI.cpp, line 1734
For application/x-java-vm found plugin
/opt/blackdown-jdk-1.4.2.02/jre/plugin/amd64/mozilla/libjavaplugin_oji.so
For application/x-java-vm found plugin
/opt/blackdown-jdk-1.4.2.02/jre/plugin/amd64/mozilla/libjavaplugin_oji.so
nsPluginNativeWindowGtk2: NPPVpluginNeedsXEmbed=0
nsPluginNativeWindowGtk2: call SetWindow with xid=0xc00802
*** glibc detected *** malloc(): memory corruption: 0x00002aaaf8b8f720 ***
Plugin: unexpected work request from child
INTERNAL ERROR on Browser End: Code = b010000
System error?:: Success
nsStringStats
 => mAllocCount: 33795
 => mReallocCount: 6233
 => mFreeCount: 29204
 => mShareCount: 26810
 => mAdoptCount: 5133
 => mAdoptFreeCount: 5084

Program exited with code 0377.
(gdb) bt
No stack.

Comment 3

[Raphael Clifford]

Attachment: valgrind -v output of londoncyclenetwork crash

As there was no stack trace and no crash info other than

*** glibc detected *** malloc(): memory corruption: 0x00002aaaf9bb83f0 ***

for the londoncyclenetwork crash here is the full debug output of running
firefox under valgrind -v (version 3.0.1).

Comment 4

[Pete Zha]

mass reassign to Alfred

Comment 5

[Andreas Schäfer]

Hmm, I get this error, too. But just on my AMD machine, not on the Intel machine. AFAICS only AMD users suffer on this bug, maybe there's a connection?

Comment 6

[Tanner M. Young [:tmyoung]]

Is this still an issue in Firefox 3.5?

If it is not, we should set the resolution of the bug to WORKSFORME.

Comment 7

[Tanner M. Young [:tmyoung]]

Resolving as WORKSFORME.  If the issue reappears, we will reopen the bug.