424467 - Long value attr. in param tags within applet tags crash firefox instantly

Status: RESOLVED WORKSFORME

(Core Graveyard :: Java: OJI, defect)

Description

[Jesper Hansen]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.12) Gecko/20080207 Ubuntu/7.10 (gutsy) Firefox/2.0.0.12
Build Identifier: 

When visiting http://pc236b.napier.ac.uk/~andrew/gallery/N.Y.Sidewalk.htm then firefox will crash instantly.
When testing this and making the value length shorter than 400 lines, then firefox stops crashing.

Bug marked as critical for "The software crashes, hangs...".

Reproducible: Always

Steps to Reproduce:
1. Visit http://pc236b.napier.ac.uk/~andrew/gallery/N.Y.Sidewalk.htm
Actual Results:  
Crash

Expected Results:  
Showing a simulation illustrated with a Java applet

Comment 1

[Jesper Hansen]

Confirmed with 2.0.0.12, 3.0b3pre and 3.0b4.
Doesnt crash when Java is disabled.

Comment 2

[David Baron :dbaron: (⌚️UTC-5, no longer working on Mozilla)]

IF you can attach the necessary HTML to the bug using "Create an attachment" above that would be helpful.

Also, in 3.0b4, can you post the ids of the crash reports you sent for this crash by going to about:crashes ?

Comment 3

[Matthias Versen [:Matti]]

wfm with SM trunk and Java 6 U5
If you report something about a plugin, always include the used plugin version.

about:crashes works only in Mozilla.org binary Firefox 3b3 or later builds 

Comment 4

[Jesper Hansen]

Nothing in about:crashes as this wasn't reported using that "reporting way".
I can't attach the full crash file. Getting this error:
 The file you are trying to attach is 645 kilobytes (KB) in size. Non-patch attachments cannot be more than 300 KB.
We recommend that you store your attachment elsewhere on the web, and then insert the URL to it in a comment, or in the URL field for this bug.
Alternately, if your attachment is an image, you could convert it to a compressible format like JPG or PNG and try again.

Java 1.5 and 6 crashes just as well as the other.
This morning I just tested this I started getting this error sent to the terminal after testing 1.5. I don't remember seeing it earlier:
INTERNAL ERROR on Browser End: SendRequest: write failed. Dead VM? 32

System error?:: Broken pipe

Comment 5

[Matthias Versen [:Matti]]

I fogot that i'm on win32.
The error message is from the Java plugin itself and it looks like the JVM died.
Did you tested with 1.6U5 ?
Did you try anaother browser with the same testcase ?

Comment 6

[Jesper Hansen]

Doesn't crash anymore.