426640 - LogMeIn.com plugin Crashes Beta 5 with no error, works fine in Beta 4

Status: VERIFIED DUPLICATE of bug 405141

(External Software Affecting Firefox :: Other, defect)

Description

[Greg Akselrod]

User-Agent:       Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; InfoPath.2)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9b5) Gecko/2008032620 Firefox/3.0b5

The plugin used for LogMeIn.com is also used for RemotelyAnywhere (same company, but RemotelyAnywhere is fully hosted on the host computer and does not use LogMeIn.com as an intermediary). The plugin works fine on LogMeIn.com, but if you use RemotelyAnywhere, the same plugin is used (if previously installed on that browser from LogMeIn.com) and crashes Firefox without an error message every time.


Reproducible: Always

Steps to Reproduce:
This is smoother to reproduce using two computers (a host -- computer you want to connect to, and client -- computer you are connecting from).

1. Using Host, create an account on LogMeIn.com. Install their free Remote Access server.
2. Using Host, install RemotelyAnywhere. There is a 30 day free trial at http://www.remotelyanywhere.com/template.asp?page=registerform&product=EE
2. Using Client, log in to http://www.LogMeIn.com and choose the host computer to connect to. Install the Mozilla plugin when prompted.
3. Using Client, log in to RemotelyAnywhere on Host by going to http://hostIP:port<default 2000>. It shouldn't prompt you to install the Mozilla plugin because it will detect the one from LogMeIn.com. 
4. Click "Remote Control" on the left. Wait for the session to start and you can see the other computer's screen.
5. Click the red "End Remote Session" button in the upper right of the browser. Firefox will crash without throwing an error.





This plugin had no problems in Beta 3, Beta 4, or Firefox 2. The problem was introduced in Beta 5.

Comment 1

[Matthias Versen [:Matti]]

Please provide a crash ID from about:crashes

Comment 2

[Greg Akselrod]

about:crashes reads:

No crash reports have been submitted.

But Windows Vista event viewer shows:

Faulting application firefox.exe, version 1.9.0.3007, time stamp 0x47eb31c2, faulting module npRACtrl.dll_unloaded, version 0.0.0.0, time stamp 0x47d7b913, exception code 0xc0000005, fault offset 0x06b6c8b0, process id 0x38c4, application start time 0x01c895135dba3e1e.

Comment 3

[Matthias Versen [:Matti]]

npRACtrl.dll is a crash inside a plugin itself.
It's known that breakpad (the crash reporter) doesn't work on pages with flash because the flash plugin currently breaks it, it will be fixed with the next flash plugin.

Comment 4

[Matthias Versen [:Matti]]

Could you try to get a stacl trace with this informations:
http://developer.mozilla.org/en/docs/How_to_get_a_stacktrace_with_WinDbg

Comment 5

[Greg Akselrod]

R Mask : ff0000, 16G Mask : ff00, 24B Mask : ff, 32HEAP[firefox.exe]: HEAP: Free Heap block 6766e08 modified at 6766e50 after it was freed
(3504.3918): Break instruction exception - code 80000003 (first chance)
eax=06766e08 ebx=06760000 ecx=7780385a edx=0017f05d esi=06766e08 edi=06766da8
eip=77827dfe esp=0017f29c ebp=0017f2a0 iopl=0         nv up ei pl nz na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000202
ntdll!DbgBreakPoint:
77827dfe cc              int     3


<typed kp>



ChildEBP RetAddr  
0017f298 77891c93 ntdll!DbgBreakPoint
0017f2a0 7785bab6 ntdll!RtlpBreakPointHeap+0x28
0017f2d4 77848417 ntdll!RtlpCoalesceFreeBlocks+0x8f5
0017f3cc 77848652 ntdll!RtlpFreeHeap+0x1e2
0017f3e8 77892e51 ntdll!RtlFreeHeap+0x14e
0017f430 7785bfe8 ntdll!RtlDebugFreeHeap+0x1f8
0017f524 77848652 ntdll!RtlpFreeHeap+0x5f
0017f540 7774c56f ntdll!RtlFreeHeap+0x14e
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for C:\Users\Gregory Akselrod\AppData\Roaming\Mozilla\Firefox\Profiles\d8oe11ij.default\extensions\[e-mail]\plugins\npRACtrl.dll - 
0017f554 061e9f5a kernel32!HeapFree+0x14
WARNING: Stack unwind information not available. Following frames may be wrong.
0017f594 0618fcc6 npRACtrl!nsQueryInterface::nsQueryInterface+0x50711
0017f5f4 0619019b npRACtrl!nsCOMPtr_base::assign_from_qi+0xcee
0017f624 06192246 npRACtrl!nsCOMPtr_base::assign_from_qi+0x11c3
0017f64c 0619236a npRACtrl!NP_GetEntryPoints+0x898
0017f680 59d55396 npRACtrl!NP_GetEntryPoints+0x9bc
0017f6c8 59cfeb1c xul!ns4xPluginInstance::Stop(void)+0xf1 [e:\fx19rel\winnt_5.2_depend\mozilla\modules\plugin\base\src\ns4xplugininstance.cpp @ 955]
0017f6f8 59d035fd xul!DoStopPlugin(class nsPluginInstanceOwner * aInstanceOwner = 0x056b06c0, int aDelayedStop = 0)+0x114 [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nsobjectframe.cpp @ 1777]
0017f72c 597bdd5d xul!nsStopPluginRunnable::Run(void)+0x2a [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nsobjectframe.cpp @ 1843]
0017f750 5978f56a xul!nsThread::ProcessNextEvent(int mayWait = <Memory access error>, int * result = <Memory access error>)+0x29d [e:\fx19rel\winnt_5.2_depend\mozilla\xpcom\threads\nsthread.cpp @ 510]
0017f768 5991e990 xul!nsBaseAppShell::Run(void)+0x4a [e:\fx19rel\winnt_5.2_depend\mozilla\widget\src\xpwidgets\nsbaseappshell.cpp @ 169]
0017f774 5985a06a xul!nsAppStartup::Run(void)+0x1e [e:\fx19rel\winnt_5.2_depend\mozilla\toolkit\components\startup\src\nsappstartup.cpp @ 182]

Comment 6

[timeless]

they're almost certainly using the wrong allocator. they must use NPN_Malloc as a pair to NPN_Free and not mix them with anything else.

https://secure.logmein.com/contact.asp
https://secure.logmein.com/support_ticket.asp

We received your request and you should receive a reply from a Customer Support Representative via email within 2 business days. 

Comment 7

[timeless]

logmein.com Case #00219918

Comment 8

[Carsten Book [:Tomcat]]

Confirmed per Comment #5 and #6, will file a new bug for block listing this plugin

Comment 9

[Carsten Book [:Tomcat]]

(In reply to comment #8)
> Confirmed per Comment #5 and #6, will file a new bug for block listing this
> plugin
> 

and thats now Bug 426780

Comment 10

[timeless]

oops. not sure how i missed that (well, it was misfiled/poorly triaged, but still, i should have moved it when i touched it ...). otoh i deal w/ hundreds of bugs, so please forgive me :)

Comment 11

[Stephen Donner [:stephend] Not actively reading bugmail]

Verified dup