425506 - Crash when a local SWF file tries to communicate with the internet and Javascript is deactivated [@ 0xffff061a][@ ns4xPluginStreamListener::CallURLNotify]

Status: VERIFIED FIXED

(External Software Affecting Firefox Graveyard :: Flash (Adobe), defect)

Description

[Henrik Skupin [:whimboo][⌚️UTC+2]]

Attachment: testcase (open from local disk crashes Firefox)

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.4; en-US; rv:1.9pre) Gecko/2008032704 Minefield/3.0pre ID:2008032704

I run into this crash while testing the beta5 rc2. I saved the homepage of nytimes as "Web Page, complete" and opened it again from the local disk. Everything is fine until you deactivate JavaScript. From now on Firefox crashes when you load or even reload the page. The crash only happens under OS X. Repeating the following steps under Windows an error/warning dialog by the Flash player is shown:

(roughly translated)
"Flash player has stopped a possible insecure process.

The following application from your computer or network:

C:\The New York Times - Breaking News, World News & Multimedia_files\shell_data\flvPlayer.swf

tried to communicate with an online data storage"

It looks like that local Flash files which tries to retrieve data from the internet causes Firefox to crash when Javascript is deactivated. This only happens under OS X. I cannot reproduce it under Windows XP.

Comment 1

[Henrik Skupin [:whimboo][⌚️UTC+2]]

Running my debug build shows that frame 13 is the latest one in our source:

(gdb) frame 12
#12 0x3fbb0c78 in Flash_EnforceLocalSecurity ()
Xcode could not locate source file: cpu_capabilities.h (line: 226)
(gdb) frame 13
#13 0x2e5153ff in ns4xPluginStreamListener::CallURLNotify (this=0x36ce5e40, reason=1) at /Users/henrik/Projects/mozilla/source/mozilla/modules/plugin/base/src/ns4xPluginInstance.cpp:215
Xcode could not locate source file: cpu_capabilities.h (line: 226)
215	in /Users/henrik/Projects/mozilla/source/mozilla/modules/plugin/base/src/ns4xPluginInstance.cpp

The appropriate source:
http://bonsai.mozilla.org/cvsblame.cgi?file=/mozilla/modules/plugin/base/src/ns4xPluginInstance.cpp&rev=1.146&mark=215-219#196

Analyzing mNotifyURL returns following value:

(gdb) p mNotifyURL
$2 = 0x3dcced40 "file:///Users/henrik/Desktop/flvPlayerConfig.xml"
Xcode could not locate source file: cpu_capabilities.h (line: 226)

This file doesn't exist on my desktop. So could this be the cause of the crash?

Comment 2

[Henrik Skupin [:whimboo][⌚️UTC+2]]

Even crashes Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.14pre) Gecko/20080327 BonEcho/2.0.0.14pre

I don't think that it is our fault. Michelle, could you have a look at it? In my case it happens with Flash 9 r115.

Comment 3

[Henrik Skupin [:whimboo][⌚️UTC+2]]

Here the crash report I forgot in comment 0: bp-004f27f5-fc28-11dc-99db-001a4bd43ef6

Comment 4

[Michelle Sintov]

We will try to reproduce the crash in-house. Thanks for the bug report.

Comment 5

[Michelle Sintov]

Unfortunately, we don't crash when we follow the steps described in comment #0 on Mac OS 10.4 with Firefox 2.0.0.13.

Comment 6

[Henrik Skupin [:whimboo][⌚️UTC+2]]

You have deactivated JavaScript before loading the locally saved page?

Comment 7

[Michelle Sintov]

Our response to comment #6 is Yes.

Comment 8

[Al Billings [:abillings - ex-MoCo]]

Reproduced in Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9pre) Gecko/2008033104 Minefield/3.0pre and Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.12) Gecko/2008020121 Firefox/2.0.0.12 on OS X 10.5.2.

Comment 9

[Al Billings [:abillings - ex-MoCo]]

In Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.13) Gecko/2008031115 Firefox/2.0.0.13 on OS X 10.5.2 as well.

Comment 10

[Henrik Skupin [:whimboo][⌚️UTC+2]]

Detailed STR:

1. Create a fresh profile
2. Deactive JavaScript under "Preferences | Content"
3. Open URL and save it to local disk
4. Open page from local disk
=> Crash

This let me crash any Firefox version each time I open the locally saved page. Sounds strange that you cannot reproduce it.

Comment 11

[Michelle Sintov]

Apologies, and thanks for your persistence. I just reproduced the crash. We will investigate.

Comment 12

[Damon Sicore (:damons)]

-'ing this as it's only a crash w/ JS disabled and loading a local flash file.  Please feel free to argue.  Also, do we know if this is a regression from 2.0?

Comment 13

[Michelle Sintov]

Happens with 2.0 too.

Comment 14

[Henrik Skupin [:whimboo][⌚️UTC+2]]

Damon, for the moment we should wait for the results Michelle could give us. They did an internal investigation. No idea if this is our fault or on Adobes site.

Comment 15

[Michelle Sintov]

Thanks again for the bug report. The Flash Player team has fixed this bug internally and it will be included in a future release.

Comment 16

[Henrik Skupin [:whimboo][⌚️UTC+2]]

Michelle, that sounds great. Do you mean with future release the next official release or a later one?

Comment 17

[Damon Sicore (:damons)]

Excellent.  Thanks for the feedback, Michelle.  :)

Marking resolved/invalid.

Comment 18

[Carsten Book [:Tomcat]]

verified -> plugin issue :)

Comment 19

[Michelle Sintov]

I will report back to this bug when a Flash Player with this bug fix is released.

Comment 20

[Michelle Sintov]

This bug should now be fixed in the Flash Player 10 beta: http://labs.adobe.com/downloads/flashplayer10.html

Comment 21

[Henrik Skupin [:whimboo][⌚️UTC+2]]

Michelle, I tested the mentioned beta version of the Flash player 10 and everything works fine. Thanks for your efforts to fix this crash.

Comment 22

[BMO Automation]

Version and milestone values are being reset to defaults as part of product refactoring.