Closed Bug 402735 Opened 17 years ago Closed 16 years ago

FF crashes with selecting a specific link from Google search result (caused by Download Accelerator Plus)

Categories

(Firefox :: General, defect)

Product:
Firefox
Component:
General
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
VERIFIED INVALID

People

(Reporter: omar.bajraszewski, Unassigned)

References

Details

(Keywords: crash, testcase)

Attachments

(2 files, 3 obsolete files)

sample page with link causing the crash
133.54 KB, text/html
Details
Testcase #5
1.18 KB, text/html
Details 
I was searching something on Google and when I clicked on link from search result Firefox crashed. Unfortunately copying and pasting a link location didn't work so I saved the page as html. To see the crash click on Stagecoach link next to the map.
Breakpad didn't work.
Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9a9pre) Gecko/2007110605 Minefield/3.0a9pre
(In reply to comment #1)
> Unfortunately the Stagecoach link is relative...
What does it mean?

> is this the URL you crashed on:
> http://maps.google.com/maps?ie=UTF-8&oe=utf-8&rls=org.mozilla:pl:official&client=firefox-a&um=1&q=buses&near=Dundee,+United+Kingdom&fb=1&view=text&latlng=56463482,-2965725,12734572891789461218
> 
If I click on it Firefox doesn't crash. If I click the same link from the html file Firefox crashes
I cannot reproduce this using build 2007111304.  Reporter, could you please download this build and see if you can still reproduce the bug?
(In reply to comment #3)
> I cannot reproduce this using build 2007111304.  Reporter, could you please
> download this build and see if you can still reproduce the bug?
> 

Sorry but I can still reproduce the crash using the link from the html file. I checked it with 2007111304
Does the Breakpad window open when the crash occurs?
If so, please submit the crash data and let us know the ID.
http://kb.mozillazine.org/Breakpad

ID is the same as the file names under
C:\Documents and Settings\<username>\Application Data\Mozilla\Firefox\Crash Reports\submitted

The odd thing is that the URL is relative and resolves against
https://bugzilla.mozilla.org/ which says that the target location does
not exist of course.  The link looks like this:
<a href="/url?sa=t& ..." onmousedown="return rwt(this,...)">
so I'm guessing it's the 'onmousedown' stuff is involved somehow.

Omar, does the crash occur if you disable JavaScript?
(Preferences window under Content)
Disabling JavaScript resolves the issue- Fx doesn't crash. Breakpad window didn't open so unfortunately I can't submit the crash data.

When I disabled JavaScript Fx didn't crashed. Then I enabled it and Fx didn't crash too. But after restart Fx crashed again.

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b2pre) Gecko/2007112805 Minefield/3.0b2pre
Attached file Testcase #2 (obsolete) — 
This a reduced version of the first attachment, do you still crash with
this testcase?
(In reply to comment #8)
> do you still crash with
> this testcase?

Yes, I do.
Attached file Testcase #3 (obsolete) — 
and this?
Crashes too
Attached file Testcase #4 (obsolete) — 
and this?
Attachment #290859 - Attachment is obsolete: true
Fx still crashes
Attached file Testcase #5 — 
Ok, last try, still crash?
Attachment #290862 - Attachment is obsolete: true
Yes, it does
Attachment #290863 - Attachment is obsolete: true
WFM with Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b2pre) Gecko/2007113000 Minefield/3.0b2pre
When I create a new Fx profile with my default Windows profile Firefox crashes. So it can't be caused by an extension or Firefox settings. But it works with new Windows profile...
This is also wfm for me, using the latest trunk build.
We really could use a stack trace of the crash here.
Omar, would you be willing to install Visual C++ 8 Express?
http://msdn.microsoft.com/vstudio/express/visualc/

You can then get a stack trace of the nightly Firefox build by attaching to the symbol server as described here:
http://benjamin.smedbergs.us/blog/2007-06-11/debugging-official-builds-or-how-cool-is-the-mozilla-symbol-server/

Let me know if you need help.
'firefox.exe': Loaded 'C:\Program Files\Mozilla Firefox\firefox.exe', Symbols loaded.
'firefox.exe': Loaded 'C:\WINDOWS\system32\ntdll.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\kernel32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\Program Files\Mozilla Firefox\xul.dll'
'firefox.exe': Loaded 'C:\Program Files\Mozilla Firefox\sqlite3.dll', Symbols loaded.
'firefox.exe': Loaded 'C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\msvcrt.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\Program Files\Mozilla Firefox\js3250.dll', Symbols loaded.
'firefox.exe': Loaded 'C:\Program Files\Mozilla Firefox\nspr4.dll', Symbols loaded.
'firefox.exe': Loaded 'C:\WINDOWS\system32\advapi32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\rpcrt4.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\wsock32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\ws2_32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\ws2help.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\winmm.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\user32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\gdi32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\Program Files\Mozilla Firefox\smime3.dll', Symbols loaded.
'firefox.exe': Loaded 'C:\Program Files\Mozilla Firefox\nss3.dll'
'firefox.exe': Loaded 'C:\Program Files\Mozilla Firefox\plc4.dll', Symbols loaded.
'firefox.exe': Loaded 'C:\Program Files\Mozilla Firefox\plds4.dll', Symbols loaded.
'firefox.exe': Loaded 'C:\Program Files\Mozilla Firefox\ssl3.dll', Symbols loaded.
'firefox.exe': Loaded 'C:\WINDOWS\system32\shell32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\shlwapi.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\ole32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\version.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\winspool.drv', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\comdlg32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\imm32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\msimg32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\usp10.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcp80.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\oleaut32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\Program Files\Mozilla Firefox\xpcom.dll', Symbols loaded.
'firefox.exe': Loaded 'C:\WINDOWS\system32\lpk.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll'
'firefox.exe': Loaded 'C:\Program Files\Google\Google Desktop Search\GoogleDesktopResources_en.dll'
'firefox.exe': Loaded 'C:\WINDOWS\system32\mswsock.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\dbghelp.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\uxtheme.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\msctf.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\setupapi.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\MSCTFIME.IME', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\clbcatq.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\comres.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\Program Files\Mozilla Firefox\components\browserdirprovider.dll', Symbols loaded.
'firefox.exe': Loaded 'C:\WINDOWS\system32\hnetcfg.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\wshtcpip.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\iphlpapi.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\dnsapi.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\winrnr.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\wldap32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\wshbth.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\xpsp2res.dll', Binary was not built with debug information.
'firefox.exe': Loaded 'C:\Program Files\Mozilla Firefox\softokn3.dll', Symbols loaded.
'firefox.exe': Loaded 'C:\Program Files\Mozilla Firefox\nssdbm3.dll', Symbols loaded.
'firefox.exe': Loaded 'C:\Program Files\Mozilla Firefox\freebl3.dll', Symbols loaded.
'firefox.exe': Loaded 'C:\Program Files\Mozilla Firefox\nssckbi.dll', Symbols loaded.
'firefox.exe': Loaded 'C:\Program Files\Gadu-Gadu\ggwhook.dll'
'firefox.exe': Loaded 'C:\Program Files\Mozilla Firefox\components\brwsrcmp.dll', Symbols loaded.
'firefox.exe': Loaded 'C:\Program Files\DAP\DAPFireFox\components\DAPFireFox.dll'
'firefox.exe': Loaded 'C:\WINDOWS\system32\wininet.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\crypt32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\msasn1.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\rasadhlp.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\Program Files\Google\Google Desktop Search\GoogleDesktopCommon.dll'
'firefox.exe': Loaded 'C:\WINDOWS\system32\msi.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\sxs.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll'
'firefox.exe': Loaded 'C:\WINDOWS\system32\mlang.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\wintrust.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\imagehlp.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\wdmaud.drv', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\msacm32.drv', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\msacm32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\midimap.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\secur32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\schannel.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\netapi32.dll', Symbols loaded (source information stripped).
'firefox.exe': Loaded 'C:\WINDOWS\system32\userenv.dll', Symbols loaded (source information stripped).
The thread 'Win32 Thread' (0x578) has exited with code 0 (0x0).
'firefox.exe': Loaded 'C:\WINDOWS\system32\Macromed\Common\SwSupport.dll', Binary was not built with debug information.
'firefox.exe': Unloaded 'C:\WINDOWS\system32\Macromed\Common\SwSupport.dll'
'firefox.exe': Unloaded 'C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll'
'firefox.exe': Loaded 'C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll'
'firefox.exe': Loaded 'C:\WINDOWS\system32\Macromed\Common\SwSupport.dll', Binary was not built with debug information.
'firefox.exe': Unloaded 'C:\WINDOWS\system32\Macromed\Common\SwSupport.dll'
'firefox.exe': Loaded 'C:\WINDOWS\system32\Macromed\Common\SwSupport.dll', Binary was not built with debug information.
First-chance exception at 0x608a8cd9 in firefox.exe: 0xC0000005: Access violation reading location 0x000000ea.
Unhandled exception at 0x608a8cd9 in firefox.exe: 0xC0000005: Access violation reading location 0x000000ea.






And from stack trace tab:
>	xul.dll!608a8cd9() 	
 	[Frames below may be incorrect and/or missing, no symbols loaded for xul.dll]	

I've done it again:


>	xul.dll!NS_InvokeByIndex_P(nsISupports * that=, unsigned int methodIndex=, unsigned int paramCount=, nsXPTCVariant * params=)  Line 103	C++

Omar, is that the only line in the stack trace tab?  If there are more,
please copy them all.  Thanks for your help.
It was the only line. In disassembly window there was this:

608A8CD9  pop         ebp  
608A8CDA  ret              
--- e:\builds\tinderbox\fx-trunk\winnt_5.2_depend\mozilla\xpcom\typelib\xpt\src\xpt_struct.c 

When the Firefox crashed Visual C++ 8 Express asked me to open file fx-trunk\winnt_5.2_depend\mozilla\xpcom\reflect\xptcall\src\md\win32\xptcinvoke.cpp

and then the line 103 was indicated
Ok, so to sum up what we have so far:
 * the crash only occurs when JavaScript is enabled
 * it is 100% reproducible on the testcase
 * it also occurs with a newly created Firefox profile
 * it does NOT occur using a newly created Windows account
 * the VC8 debug info indicates a smashed stack?

Could it be a plugin maybe?
There are a few 3rd party DLLs loaded above:
C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll
C:\Program Files\Gadu-Gadu\ggwhook.dll
C:\Program Files\DAP\DAPFireFox\components\DAPFireFox.dll
is it possible to disable those temporarily somehow?

Download Accelerator Plus causes the crash- it stopped crashing after I uninstalled DAP.
Thanks for help :)
No problem, thank you for helping us diagnose the problem.
Do you know which version of DAP you were using?  (in case someone
wants to try reproducing the crash to analyze it)

It's the latest one: v. 8.6
Ok, thanks.  Please report this crash to the maintainers of DAP,
if the stack is damaged it might be a security problem they need to fix.
Summary: FF crashes with selecting a specific link from Google search result → FF crashes with selecting a specific link from Google search result (caused by Download Accelerator Plus)
I'm not using any download accelerator yet whenever I type anything into the Google search engine I get flagged that Firefox encountered a problem. Click on "send report" and the whole thing shuts down. No problem with any other search engine; just Google. And Google search functions perfectly with any other web browser I choose. This all started shortly after my Firefox upgrade to 2.0..and downloaded the Firefox Toolbar.
William, please open a separate bug report for your crash.  Thanks.
https://bugzilla.mozilla.org/enter_bug.cgi?product=Firefox
INVALID; Download Accelerator Plus is/was at fault.
Status: UNCONFIRMED → RESOLVED
Closed: 16 years ago
Resolution: --- → INVALID
Omar, have you already sent an email to the author of DAP?
Resolution: INVALID → FIXED
Resolution: FIXED → INVALID
(In reply to comment #34)
> Omar, have you already sent an email to the author of DAP?
> 

Yes, it seems to be fixed now.
Status: RESOLVED → VERIFIED
Good to hear that. Thanks for the information!
Keywords: stackwanted
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: