Closed Bug 417700 Opened 17 years ago Closed 17 years ago

Crash in js3250.dll

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
Windows Vista
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
VERIFIED DUPLICATE of bug 417819

People

(Reporter: jmjjeffery, Unassigned)

References

(
URL
)

Details

(Keywords: crash)

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9b4pre) Gecko/2008021411 Minefield/3.0b4pre Firefox/3.0 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9b4pre) Gecko/2008021411 Minefield/3.0b4pre Firefox/3.0 this page is crashing. http://stereo-club.fr/GalerieSCF/main.php?cmd=imageview&var1=n07113006g1d_X.jps&var2=3 Click on the 3D glasses - crash! On IE it loads in a pop-up window. Reproducible: Always Steps to Reproduce: 1. Visit the URL 2. Click on the 3D glasses - top right of image 3. Crash immediately or on close of the window. Actual Results: Crash Event viewer shows: Faulting application firefox.exe, version 1.9.0.2964, time stamp 0x47b4a0dc, faulting module js3250.dll, version 4.0.0.0, time stamp 0x47b4a137, exception code 0xc0000005, fault offset 0x00038ec0, process id 0xcf8, application start time 0x01c86f73f05136b0. breakpad: http://crash-stats.mozilla.com/report/index/4f32010a-db69-11dc-98be-001a4bd43e5c Expected Results: No crash - pop-up window displayed. Vista HP fully updated Java 1.6.0_4 (latest)
Version: unspecified → Trunk
Sorry - forgot - No idea when this started, and I don't have a regress range. I only visited the page first time yesterday.
Crash with WinXP as well: http://crash-stats.mozilla.com/report/index/b852b03a-dba3-11dc-a302-001a4bd43ef6 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b4pre) Gecko/2008021404 Minefield/3.0b4pre ID:2008021404 WinXP Pro SP3 Java 1.6.0_4
0 js_FinishSharingScope 1 js_LockObj 2 JS_SetPrototype 3 JS_GetPrototype 4 XPCWrappedNative::GetNewOrUsed(XPCCallContext&, nsISupports*, XPCWrappedNativeScope*, XPCNativeInterface*, int, XPCWrappedNative**) mozilla/js/src/xpconnect/src/xpcwrappednative.cpp:537 5 XPCConvert::NativeInterface2JSObject(XPCCallContext&, nsIXPConnectJSObjectHolder**, nsISupports*, nsID const*, JSObject*, int, int, unsigned int*) mozilla/js/src/xpconnect/src/xpcconvert.cpp:1106 6 nsXPConnect::WrapNative(JSContext*, JSObject*, nsISupports*, nsID const&, nsIXPConnectJSObjectHolder**) mozilla/js/src/xpconnect/src/nsXPConnect.cpp:1241 7 nsDOMClassInfo::WrapNative(JSContext*, JSObject*, nsISupports*, nsID const&, long*, nsIXPConnectJSObjectHolder**) mozilla/dom/src/base/nsDOMClassInfo.cpp:1568 8 nsHTMLDocumentSH::GetProperty(nsIXPConnectWrappedNative*, JSContext*, JSObject*, long, long*, int*) mozilla/dom/src/base/nsDOMClassInfo.cpp:8384 9 XPC_WN_Helper_GetProperty mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp:954 10 js_NativeGet 11 js_GetPropertyHelper 12 js_Interpret 13 js_Execute 14 JS_EvaluateUCScriptForPrincipals .......
Assignee: nobody → general
Status: UNCONFIRMED → NEW
Component: General → JavaScript Engine
Ever confirmed: true
Keywords: crash
Product: Firefox → Core
QA Contact: general → general
Status: NEW → RESOLVED
Closed: 17 years ago
Resolution: --- → DUPLICATE
The patch attached to bug 417819 seems to fix this for me so duping.
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.