393675 - Browser crashes when surfing gallerys of this online newspaper [@ nsMimeTypeArray::GetMimeTypes]

Status: RESOLVED WORKSFORME

(Core Graveyard :: Plug-ins, defect)

Description

[Jorge Solis]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6

I have described it in the 'steps to reproduce' section

Reproducible: Always

Steps to Reproduce:
1.Surf into the main website of this online newspaper (index)
2.Then point to a gallery (album) which consists on different pictures
3.Then, sometimes it just crashes when seeing the first picture, but some other times, you can click next picture, next picture, but then crashes. I mean, it sure crashes anyway, its just that sometimes crashes on the first one, others in the third or so
Actual Results:  
Then the browser crashes. It leaves you the chance of continuing the previous browser session that crashed, but if you do, it will crash again. Just check it

Comment 1

[Steve England [:stevee]]

Can you please get us a TalkBackID for this crash? Thanks!
- http://kb.mozillazine.org/Talkback

Comment 2

[Jorge Solis]

(In reply to comment #1)
> Can you please get us a TalkBackID for this crash? Thanks!
> - http://kb.mozillazine.org/Talkback
> 

Hi, Windows crash dialog shows:

AppName: firefox.exe	 AppVer: 1.8.20070.6982	 ModName: firefox.exe
ModVer: 1.8.20070.6982	 Offset: 002ba077

About the talkback on the crash, i have just filed it.

Kind regards

Comment 3

[Steve England [:stevee]]

The windows crash dialog doesn't help us at all. Please make sure Talkback extension is installed, and when you crash it should appear. Submit the crash data, then report back here as to your TalkBackID (Looks something like TB3632697362Y). You can find this number by running talkback.exe 

Comment 4

[Jorge Solis]

(In reply to comment #3)
> The windows crash dialog doesn't help us at all. Please make sure Talkback
> extension is installed, and when you crash it should appear. Submit the crash
> data, then report back here as to your TalkBackID (Looks something like
> TB3632697362Y). You can find this number by running talkback.exe 
> 


Ok i have run talkback.exe and there is this line:

TB35272774X

I guess thats the reference you were looking for

Regards

Comment 5

[Steve England [:stevee]]

Incident ID: 35272774
Stack Signature	nsMimeTypeArray::GetMimeTypes 9aec979b
Product ID	Firefox2
Build ID	2007072518
Trigger Time	2007-08-25 06:46:14.0
Platform	Win32
Operating System	Windows NT 5.1 build 2600
Module	firefox.exe + (002ba077)
URL visited	http://www.elmundo.es/elmundo/fotos_gente/2007/08/25/index.html
User Comments	
Since Last Crash	10948 sec
Total Uptime	529866 sec
Trigger Reason	Access violation
Source File, Line No.	c:/builds/tinderbox/Fx-Mozilla1.8-release/WINNT_5.2_Depend/mozilla/dom/src/base/nsMimeTypeArray.cpp, line 231
Stack Trace 	
nsMimeTypeArray::GetMimeTypes  [mozilla/dom/src/base/nsMimeTypeArray.cpp, line 231]
nsMimeTypeArray::GetLength  [mozilla/dom/src/base/nsMimeTypeArray.cpp, line 81]
XPCWrappedNative::CallMethod  [mozilla/js/src/xpconnect/src/xpcwrappednative.cpp, line 2169]
XPC_WN_GetterSetter  [mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp, line 1487]
js_Invoke  [mozilla/js/src/jsinterp.c, line 1375]
js_InternalInvoke  [mozilla/js/src/jsinterp.c, line 1469]
js_InternalGetOrSet  [mozilla/js/src/jsinterp.c, line 1540]
js_NativeGet  [mozilla/js/src/jsobj.c, line 3455]
js_GetProperty  [mozilla/js/src/jsobj.c, line 3602]
js_Interpret  [mozilla/js/src/jsinterp.c, line 3691]
js_Execute  [mozilla/js/src/jsinterp.c, line 1634]
JS_EvaluateUCScriptForPrincipals  [mozilla/js/src/jsapi.c, line 4296]
nsJSContext::EvaluateString  [mozilla/dom/src/base/nsJSEnvironment.cpp, line 1100]
nsScriptLoader::EvaluateScript  [mozilla/content/base/src/nsScriptLoader.cpp, line 813]
nsScriptLoader::ProcessRequest  [mozilla/content/base/src/nsScriptLoader.cpp, line 711]
nsScriptLoader::OnStreamComplete  [mozilla/content/base/src/nsScriptLoader.cpp, line 1093]
nsStreamLoader::OnStopRequest  [mozilla/netwerk/base/src/nsStreamLoader.cpp, line 137]
nsStreamListenerTee::OnStopRequest  [mozilla/netwerk/base/src/nsStreamListenerTee.cpp, line 65]
0x02324880

Comment 6

[Jorge Solis]

It still crashes. Is there anything else I need to add? I mean, is it everything you need to 'solve' this bug? 

Comment 7

[Steve England [:stevee]]

Is the crash easily reproducible? If so, please try making a new firefox profile and test with that
- http://kb.mozillazine.org/Profile_manager
(do not delete your existing profile)
And report back.

Comment 8

[Jorge Solis]

Yes, actually, it is very easily reproducible (it always happens). That means, every time I surf into any gallery (album) of that site, it crashes, which make that section pretty "unavailable" to me.

Ill try to do that Profile manager stuff you told me, but its kind of messy :S

Comment 9

[timeless]

can you load about:plugins?

if not, please follow some instructions to find your plugin folders and rename them. see if you can then. slowly figure out which plugin is helpful.

Comment 10

[Michael Kraft [:morac]]

I saw this crash right here on https://bugzilla.mozilla.org in Firefox 3.1b2 when I clicked the search button while trying to report a bug.

http://crash-stats.mozilla.com/report/index/2257540e-48a3-4962-84ed-ed7ea2081214?p=1

Comment 11

[timeless]

i still need you to load about:plugins and copy the output here.
 
257 if (pluginArray->Item(k, &plugin) == NS_OK) {
258 PRUint32 mimeTypeCount = 0;
259 if (plugin->GetLength(&mimeTypeCount) == NS_OK) { <- we crash with a null pointer.

the code for Item doesn't actually return NS_OK to mean "there's an item", however the Length call seems like a /relatively/ safe guard.

Comment 12

[Michael Kraft [:morac]]

Attachment: Saved about:plugins page

Rather than copy and paste, I saved the web page (was trickier than it should have been) and attached it.

I'll note that this crash is number 54 on the top 100 crashes for Firefox 3.1b2.

http://crash-stats.mozilla.com/report/list?range_value=2&range_unit=weeks&version=Firefox%3A3.1b2&signature=nsMimeTypeArray%3A%3AGetMimeTypes%28%29


It's not on the list of top crashers for Firefox 3.0.4 so it looks like this is a new crash in Firefox 3.1b2.  I tried to search for all versions of Firefox that the crash occurred in, but the Crash Stats site kept giving me a "Connection Interrupted" error.

Comment 13

[timeless]

i don't recognize a third of your plugins. please try disabling them, probably in this order, but feel free to just disable half of them and see if the problem goes away (and then change your halves until you find the interesting one or two)

Move Media Player
Google Gadget Plugin
DivX Web Player
DivX Player Netscape Plugin
Windows Presentation Foundation
Turner Media Plugin 1.0.0.10
Microsoft Office 2003
Windows Genuine Advantage
Picasa
Silverlight Plug-In

Comment 14

[Michael Kraft [:morac]]

I couldn't reproduce the problem to begin with so I'm not sure how useful disabling plug-ins will be.

Comment 15

[aravindm]

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3
Reporter, Please update if you are able to still reproduce the problem or try with the latest nightly build ftp://ftp.mozilla.org/pub/firefox/nightly/latest-trunk/

Comment 16

[Kevin Brosnan]

This is still happening on the trunk removing closeme whiteboard. http://crash-stats.mozilla.com/report/list?range_value=2&range_unit=weeks2&signature=nsMimeTypeArray%3A%3AGetMimeTypes%28%29

Comment 17

[Virtual_ManPL [:Virtual] 🇵🇱 - (please needinfo? me - so I will see your comment/reply/question/etc.)]

I'm marking this bug as WORKSFORME as bug crashlog signature didn't appear from a long time (over half year) [except some obsolete <4 versions, no crashes starting since 4 version].