413046 - ThinkVantage Password Manager v3.00.0006.00 plugin crashes Firefox when opening pop-up windows

Status: VERIFIED WORKSFORME

(Firefox :: Extension Compatibility, defect)

Description

[Kim Haverblad]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; sv-SE; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; sv-SE; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11

Seems that the latest version that Lenovo has pushed out of the ThinkVantage Password Manager v3.00.0006.00 (part of ThinkVantage Client Security Solution) crashes Firefox when the add-on is enabled and when trying to open a url or link that opens a pop-up window. Running in safe-mode or disabling the add-on gets ride of the bug.

Reproducible: Always

Steps to Reproduce:
1. Enable the ThinkVantage Password Manager v3.00.0006.00
2. Click on a link that opens a pop-up window.
Actual Results:  
Mozilla crashes.

Expected Results:  
To open up and view the pop-up window.

It doesn't matter what kind of pop-up window that I tried, what ever crashes. Just to make sure; following page, http://www.haverblad.se , has following pop-up, http://www.haverblad.se/cgi-bin/refer/tell.cgi , function in the upper right corner and it crashes big time every time that I've tried enabling the ThinkVantage Password Manager.

More information about ThinkVantage Client Security Solution can be found here: http://www.pc.ibm.com/us/think/thinkvantagetech/security.html

Comment 1

[Kim Haverblad]

Attachment: Talk-Back log

Comment 2

[Dave Townsend [:mossop]]

Can you run talkback and get the actual id of the crash?

http://kb.mozillazine.org/Talkback

Comment 3

[Kim Haverblad]

Well, here are the talkback id numbers: TB40376336E, TB40376223E, TB40376201W, TB40376192X, TB40375739W, TB40374252G, TB40374215Y, TB40374182E, TB40373528Q, TB40373510K, TB40373451E

Comment 4

[Matthias Versen [:Matti]]

They are all except one like this one :
ntdll.dll + 0x43345 (0x7c943345)
USER32.dll + 0x885a (0x7e36885a)
USER32.dll + 0x89cd (0x7e3689cd)
USER32.dll + 0x8a10 (0x7e368a10)
nsAppShell::Run  [mozilla/widget/src/windows/nsAppShell.cpp, line 159]
nsAppStartup::Run  [mozilla/toolkit/components/startup/src/nsAppStartup.cpp, line 152]
main  [mozilla/browser/app/nsBrowserApp.cpp, line 61]
kernel32.dll + 0x16fd7 (0x7c816fd7)

Comment 5

[XING Dikan]

I once encountered the same problem, but it was solved.

The first time I run firefox on my Thinkpad x61s (with vista, thinkvantage password manager), I received three Chrome registration errors. It last. And the thinkvantage password manager (not the firefox's) didn't work.

So I uninstalled the firefox and re-installed it. No chrome error and thinkvantage password manager worked. But then the bug reported here occurred on my firefox....

After reading this report:
https://bugzilla.mozilla.org/show_bug.cgi?id=403320
and one comment in that thread by 
[e-mail]
I realized there must be the case that firefox required an Admin previleges for its first run and on Vista, this is not granted by default. Therefore, chrome registration error occured. 

And my previous solution may mal-fix the problem and thus cause new problem (bug reported here). 

So, the solution was reached:
I uninstalled the firefox again and remove directory such as 
c:\program file\mozilla firefox
c:\users\<user name>\appdata\mozilla
(registry entry) local machine\software\mozilla*
(registry entry) current user\software\mozilla*
And then reinstalled firefox, un-click the "autorun firefox after installation" option at the end of installation. Then I manually launched the firefox by right-clicking it and chossing "run as admin".

Now thinkvantage password manager works and the new-window-crash diminishes.

Hope above of help to all.

Comment 6

[XING Dikan]

in my previous post, i said my problem was solved. In fact, the problem was solved in the morning, and now it occurs again !!!!!!!

Look forward to a professional solution..

Comment 7

[Kim Haverblad]

No change after the upgrade to Firefox 2.0.0.12.

Comment 8

[Kim Haverblad]

A temporary fix has been provided by user liyifan @ ThinkPads.com:

http://forum.thinkpads.com/viewtopic.php?p=387512

Also to be mentioned is that this above fix won't work with Firefox 3 (ref. mozilla bug 296639) according to liaifan.

Comment 9

[XING Dikan]

Above solution works. Great!
Thank Kim and liyifan.

Comment 10

[Mike Kaply [:mkaply]]

Anyone know if the XPI has an author in it I can contact at IBM?

Comment 12

[Kim Haverblad]

There are now authors at all mentioned in any of the files, except Lenovo... and last couple of times when I've tried to send a bug report to Lenovo I was asked to set up a service contract with them....

Comment 13

[Kim Haverblad]

Above was supposed to say that there are NO authors mentioned within any of the files.

Comment 14

[Santosh kharolkar]

The fix for the xpi correction is given at http://forum.thinkpads.com/viewtopic.php?p=387512

Comment 15

[Martijn Wargers (dead)]

So I guess this is a problem with ThinkVantage Password Manager, not with Firefox, right?

Comment 16

[Henrik Skupin [:whimboo][⌚️UTC+2]]

Not really. What you have to do is replacing the first line with the second one:

TvtPwmComponent  = Components.classes[TvtPwmComponent_CID].createInstance();
TvtPwmComponent  = Components.classes[TvtPwmComponent_CID].getService();

Even an Add-on shouldn't crash Firefox in that way...

Comment 17

[Henrik Skupin [:whimboo][⌚️UTC+2]]

Just a dumb question. What do I have to do to get the Add-on installed? I downloaded and installed the Client Security Solution v8 but no password manager Add-on is visible in Firefox. Anyone who can give steps for the installation? Thanks.

Comment 18

[timeless]

while we'd like addons not to trigger crashes, the cI/gS feature is well known and it's currently the responsibility of consumers to get things right. there are halves of plans to improve this, but they're barely plans.

Comment 19

[Kim Haverblad]

Lenovo has released a patch for this issue and it's available via ThinkVantage System Update.

Comment 20

[Henrik Skupin [:whimboo][⌚️UTC+2]]

Kim, can you give an URL?

Comment 21

[Henrik Skupin [:whimboo][⌚️UTC+2]]

Verified with Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.12pre) Gecko/20080122 BonEcho/2.0.0.12pre and Password Manager Extension v3.00.0006.00 within Client Security Solution 8.10.0006.00.

I followed the advice I found here (even it states the extension v2.0):
http://www-307.ibm.com/pc/support/site.wss/MIGR-64679.html#328091

This extension is not compatible with Firefox 3 right now and will cause Firefox to crash on shutdown. So please beware of installing it for a trunk nightly build.

Comment 22

[timeless]

is this extension blocklisted for 3.0?