Last Comment Bug 423404 - mplayer is calling dom from its own thread [@ JS_RestoreFrameChain]
: mplayer is calling dom from its own thread [@ JS_RestoreFrameChain]
Status: VERIFIED FIXED
: crash
Product: Core
Classification: Components
Component: Plug-ins (show other bugs)
: Trunk
: x86 Linux
: -- critical (vote)
: ---
Assigned To: kdekorte
:
: Benjamin Smedberg [:bsmedberg]
Mentors:
https://sourceforge.net/tracker/index...
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2008-03-17 03:19 PDT by timeless
Modified: 2011-06-09 14:58 PDT (History)
0 users
See Also:
Crash Signature:
QA Whiteboard:
Iteration: ---
Points: ---
Has Regression Range: ---
Has STR: ---


Attachments

Description timeless 2008-03-17 03:19:04 PDT
Signature	JS_RestoreFrameChain
UUID	b2bd65d7-f055-11dc-9c52-001a4bd43e5c
Time	2008-03-12 09:59:31-07:00
Uptime	0
Product	Firefox
Version	3.0b5pre
Build ID	2008031204
OS	Linux
OS Version	0.0.0 Linux 2.6.24.3 #3 Fri Feb 29 02:41:00 EST 2008 i686 GNU/Linux
CPU	x86
CPU Info	AuthenticAMD family 1 model 10 stepping 0
Crash Reason	SIGSEGV
Crash Address	0xb72f2568
Comments	Add a comment (comments are publicly visible)
Crashing Thread
Frame 	Signature 	Source
0 	JS_RestoreFrameChain 	mozilla/js/src/jsapi.c:5163
1 	XPCJSContextStack::Pop(JSContext**) 	mozilla/js/src/xpconnect/src/xpcthreadcontext.cpp:113
2 	nsXPCThreadJSContextStackImpl::Pop(JSContext**) 	mozilla/js/src/xpconnect/src/xpcthreadcontext.cpp:390
3 	nsCxPusher::Pop() 	mozilla/content/base/src/nsContentUtils.cpp:2639
4 	nsCxPusher::~nsCxPusher() 	mozilla/content/base/src/nsContentUtils.cpp:2527
5 	nsEventListenerManager::HandleEventSubType(nsListenerStruct*, nsIDOMEventListener*, nsIDOMEvent*, nsISupports*, unsigned int) 	mozilla/content/events/src/nsEventListenerManager.cpp:1085
6 	nsEventListenerManager::HandleEvent(nsPresContext*, nsEvent*, nsIDOMEvent**, nsISupports*, unsigned int, nsEventStatus*) 	mozilla/content/events/src/nsEventListenerManager.cpp:1186
7 	nsEventTargetChainItem::HandleEvent(nsEventChainPostVisitor&, unsigned int) 	mozilla/content/events/src/nsEventDispatcher.cpp:206
8 	nsEventTargetChainItem::HandleEventTargetChain(nsEventChainPostVisitor&, unsigned int, nsDispatchingCallback*) 	mozilla/content/events/src/nsEventDispatcher.cpp:287
9 	nsEventDispatcher::Dispatch(nsISupports*, nsPresContext*, nsEvent*, nsIDOMEvent*, nsEventStatus*, nsDispatchingCallback*) 	mozilla/content/events/src/nsEventDispatcher.cpp:479
10 	PresShell::HandleEventInternal(nsEvent*, nsIView*, nsEventStatus*) 	mozilla/layout/base/nsPresShell.cpp:5895
11 	PresShell::HandlePositionedEvent(nsIView*, nsIFrame*, nsGUIEvent*, nsEventStatus*) 	mozilla/layout/base/nsPresShell.cpp:5783
12 	PresShell::HandleEvent(nsIView*, nsGUIEvent*, nsEventStatus*) 	mozilla/layout/base/nsPresShell.cpp:5643
13 	nsViewManager::HandleEvent(nsView*, nsPoint, nsGUIEvent*, int) 	mozilla/view/src/nsViewManager.cpp:1380
14 	nsViewManager::DispatchEvent(nsGUIEvent*, nsEventStatus*) 	mozilla/view/src/nsViewManager.cpp:1335
15 	HandleEvent(nsGUIEvent*) 	mozilla/view/src/nsView.cpp:168
16 	nsCommonWidget::DispatchEvent(nsGUIEvent*, nsEventStatus&) 	mozilla/widget/src/gtk2/nsCommonWidget.cpp:153
17 	nsWindow::OnButtonReleaseEvent(_GtkWidget*, _GdkEventButton*) 	mozilla/widget/src/gtk2/nsWindow.cpp:2145
18 	button_release_event_cb(_GtkWidget*, _GdkEventButton*) 	mozilla/widget/src/gtk2/nsWindow.cpp:4603
19 	libgtk-x11-2.0.so.0.1200.5@0x194067 	
20 	libgobject-2.0.so.0.1400.6@0x8f82 	
21 	libgobject-2.0.so.0.1400.6@0x1948c 	
22 	libgobject-2.0.so.0.1400.6@0x1a75e 	
23 	libgobject-2.0.so.0.1400.6@0x1ab58 	
24 	libgtk-x11-2.0.so.0.1200.5@0x31fcb3 	
25 	libgtk-x11-2.0.so.0.1200.5@0x31f7b7 	
26 	libgtk-x11-2.0.so.0.1200.5@0x1923fe 	
27 	libgtk-x11-2.0.so.0.1200.5@0x190d3d 	
28 	libgdk-x11-2.0.so.0.1200.5@0x525f5 	
29 	libglib-2.0.so.0.1400.6@0x2d1ab 	
30 	libglib-2.0.so.0.1400.6@0x305ee 	
31 	libglib-2.0.so.0.1400.6@0x30b54 	
32 	libgtk-x11-2.0.so.0.1200.5@0x19067d 	
33 	mplayerplug-in-qt.so@0x2ca34 	
34 	libpthread-2.7.so@0x550a
Comment 1 timeless 2008-03-17 03:21:27 PDT
please see the other bugs with this signature for an explanation, but in short, mplayer is buggy and /perhaps/ widget:gtk2 should have some entrypoint protection against calls from the wrong thread.

Note You need to log in before you can comment on or make changes to this bug.