306995 - crash after the page loads completely

Status: RESOLVED DUPLICATE of bug 279948

(Firefox :: General, defect)

Description

[Paul Pluzhnikov]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6

Just visiting the page above crashes firefox 1.0.1, 1.0.6
This is happening as just as the site is about to pop-up 
"Sony interactive 3d tours" popup.

Reproducible: Always

Comment 1

[Paul Pluzhnikov]

Except it actually doesn't crash when visiting the link directly :-(

However, going to
http://www.sonystyle.com/is-bin/INTERSHOP.enfinity/eCS/Store/en/-/USD/SY_BrowseCatalog-Start?CategoryName=cpu_VAIONotebookComputers_TSeries&Dept=computers
and then clicking on "Sony VAIO® T250P/S Notebook" link (which supposedly
expands to
http://www.sonystyle.com/is-bin/INTERSHOP.enfinity/eCS/Store/en/-/USD/SY_DisplayProductInformation-Start?ProductSKU=VGNT250P%2fS&Dept=computers&CategoryName=cpu_VAIONotebookComputers_TSeries)
causes the crash.

Comment 2

[O. Atsushi (Torisugari)]

WFM.
Mozilla/5.0 (Windows; U; Windows NT 5.0; ja-JP; rv:1.7.10)
Gecko/20050717 Firefox/1.0.6

Reporter:
Do you have any extensions installed?
Can you reproduce that with a clean profile?

Comment 3

[Adam Guthrie]

Could you provide a talkback ID for the crash? http://kb.mozillazine.org/Talkback

Comment 4

[Paul Pluzhnikov]

O. Atsushi> WFM.

What is WFM? World Federalist Movement? Wired for Management? 

O. Atsushi> Do you have any extensions installed?

Tools->Extensions lists one:
OpenNewWindowFromHere 0.1
I uninstalled it, with the same result.

O. Atsushi> Can you reproduce that with a clean profile?

How do I create a "clean profie" in firefox?
I only have a few bookmarks. I don't think this will make any difference.

Adam Guthrie> Could you provide a talkback ID ...

This proved exceedingly difficult: first I had to re-install with
"Qality Feedback Agent", then I had to find talkback.exe on disk and run it
[Should't I be able to turn it on from within firefox?]

Lastly, it does not show any talkback id at all.
I had finally put this bug ID in the comment, and then was able to find
the talkback ID:
http://talkback-public.mozilla.org/talkback/fastfind.jsp?search=2&type=iid&id=9013450

The stack trace from that ID is below, enhanced with system symbols from the
local machine:

npViewpoint_03000F10.dll + 0x1a98 (0x13401a98)
USER32.dll + 0x8734 (0x77d48734)  _InternalCallWinProc@20 + 0x28
USER32.dll + 0x8816 (0x77d48816)  _UserCallWinProcCheckWow@32 +0xB7
USER32.dll + 0xb4c0 (0x77d4b4c0)  _DispatchClientMessage@20 + 0x4D
USER32.dll + 0xb50c (0x77d4b50c)  ___fnDWORD@4 + 0x24
ntdll.dll  + 0xeae3 (0x7c90eae3)  _KiUserCallbackDispatcher@12 + 0x13

Is there any way for me to get symbols or debug build of npViewpoint_03000F10.dll ?
The disassembly at crash point is:
13401A7D  jmp         13401A9A
13401A7F  mov         eax,dword ptr [ebp+14h]
13401A82  push        eax 
13401A83  mov         ecx,dword ptr [ebp+10h]
13401A86  push        ecx 
13401A87  mov         edx,dword ptr [ebp+0Ch]
13401A8A  push        edx 
13401A8B  mov         eax,dword ptr [ebp+8]
13401A8E  push        eax 
13401A8F  mov         ecx,dword ptr [ebp-68h]
13401A92  call        dword ptr [ecx+234h]         << jumped to "nowhere"; 
                                                   << ecx == 0x026d87b0
13401A98  jmp         13401A9C 

Comment 5

[Adam Guthrie]

*** This bug has been marked as a duplicate of 279948 ***