434124 - View selection source crashes firefox at ytmnd paper bag bomb [@ free - _releaseobject]

Status: RESOLVED INCOMPLETE

(Core Graveyard :: Plug-ins, defect)

Description

[none]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b5) Gecko/2008032620 Firefox/3.0b5
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b5) Gecko/2008032620 Firefox/3.0b5

I go to the website, and see the image. I want to see where it is, so I double click it. It does not get shaded in blue, as normal. I ignore it and motor on, assuming it selected something behind the image, and I was curios to know what it was. Right click -> view selection source -> crash. Oops. I enter about six lines into the built in bug reporter and hit send, and I get an error. I tried to reproduce it and left the bug reporter blank and it appeared to work. Maybe just bad luck the first time. I'm using 3b5 with IETab, Adblock+, fasterfox, and firebug. The last three are disabled (ie. only using IETab, and it was in frefox mode the whole session). Unlike in other reports, the sound worked fine. Thank you for making the only browser I will ever use. I love betas and keep up the good work, devs!

Reproducible: Always

Steps to Reproduce:
1. Go to http://paperbagbomd.ytmnd.com using address bar.
2. Double-click about the center of the image.
3. Right-click in the same spot and click "View Selection Source"
4. If you've made it this far it's just me.
Actual Results:  
Firefox disappears and I try to fill out a bug report.

Expected Results:  
It should have shown the source code of what I had selected (expected: '<img src="xxx" width="xxx" height="xxx">' or something like that)

Windows did not catch this crash, Firefox handled it and hopefully sent a dump.

Comment 1

[Mats Palmgren (inactive)]

Please start Firefox and enter about:crashes in the URL bar; you should
see a list of crash IDs you have submitted.  Copy-paste a few of the IDs
associated the reported crash here.  Thanks.
http://kb.mozillazine.org/Breakpad#Viewing_reports

Comment 2

[none]

Crash ID: aaf39a8f-23c5-11dd-a5f8-001321b13766

URL: http://crash-stats.mozilla.com/report/index/aaf39a8f-23c5-11dd-a5f8-001321b13766

That's the only one I have listed. Thank you for the hasty reply!

Comment 3

[timeless]

I believe you have quicktime installed and that this is implicated in your crash, you can try disabling it....

Signature	free
UUID	aaf39a8f-23c5-11dd-a5f8-001321b13766
Time	2008-05-16 20:59:30-07:00
Uptime	694
Product	Firefox
Version	3.0b5
Build ID	2008032620
OS	Windows NT
OS Version	5.1.2600
CPU	x86
CPU Info	AuthenticAMD family 6 model 4 stepping 2
Crash Reason	EXCEPTION_ACCESS_VIOLATION
Crash Address	0x2200000
Comments	
Crashing Thread
Frame 	Module 	Signature 	Source
0 	MOZCRT19.dll 	free 	jemalloc.c:6067
1 	xul.dll 	_releaseobject 	mozilla/modules/plugin/base/src/ns4xPlugin.cpp:1627
2 	xul.dll 	ns4xPluginInstance::GetJSObject 	mozilla/modules/plugin/base/src/ns4xPluginInstance.cpp:1488
3 	xul.dll 	nsHTMLPluginObjElementSH::GetPluginJSObject 	mozilla/dom/src/base/nsDOMClassInfo.cpp:9321
4 	xul.dll 	nsHTMLPluginObjElementSH::SetupProtoChain 	mozilla/dom/src/base/nsDOMClassInfo.cpp:8903
5 	xul.dll 	nsHTMLPluginObjElementSH::PostCreate 	mozilla/dom/src/base/nsDOMClassInfo.cpp:9013
6 	xul.dll 	XPCWrappedNative::GetNewOrUsed 	mozilla/js/src/xpconnect/src/xpcwrappednative.cpp:546
7 	xul.dll 	XPCConvert::NativeInterface2JSObject 	mozilla/js/src/xpconnect/src/xpcconvert.cpp:1106
8 	xul.dll 	XPCConvert::NativeData2JS 	mozilla/js/src/xpconnect/src/xpcconvert.cpp:481
9 	xul.dll 	XPCWrappedNative::CallMethod 	mozilla/js/src/xpconnect/src/xpcwrappednative.cpp:2456
10 	xul.dll 	XPC_WN_CallMethod 	mozilla/js/src/xpconnect/src/xpcwrappednativejsops.cpp:1470
11 	js3250.dll 	js_Invoke 	mozilla/js/src/jsinterp.c:1287
12 	js3250.dll 	js_InternalInvoke 	mozilla/js/src/jsinterp.c:1359
13 	js3250.dll 	JS_CallFunctionValue 	mozilla/js/src/jsapi.c:5036
14 	xul.dll 	XPC_NW_FunctionWrapper 	mozilla/js/src/xpconnect/src/XPCNativeWrapper.cpp:444
15 	js3250.dll 	js_Invoke 	mozilla/js/src/jsinterp.c:1287
16 	js3250.dll 	js_Interpret 	mozilla/js/src/jsinterp.c:4841
17 	js3250.dll 	js_Invoke 	mozilla/js/src/jsinterp.c:1303
18 	js3250.dll 	js_InternalInvoke 	mozilla/js/src/jsinterp.c:1359
19 	js3250.dll 	JS_CallFunctionValue 	mozilla/js/src/jsapi.c:5036
20 	xul.dll 	nsJSContext::CallEventHandler 	mozilla/dom/src/base/nsJSEnvironment.cpp:1962
21 	xul.dll 	nsJSEventListener::HandleEvent 	mozilla/dom/src/events/nsJSEventListener.cpp:248
22 	xul.dll 	nsEventListenerManager::HandleEventSubType 	mozilla/content/events/src/nsEventListenerManager.cpp:1080
23 	xul.dll 	nsEventListenerManager::HandleEvent 	mozilla/content/events/src/nsEventListenerManager.cpp:1184
24 	xul.dll 	nsEventTargetChainItem::HandleEvent 	mozilla/content/events/src/nsEventDispatcher.cpp:206
25 	xul.dll 	nsEventTargetChainItem::HandleEventTargetChain 	mozilla/content/events/src/nsEventDispatcher.cpp:264
26 	xul.dll 	nsCOMPtr_base::assign_with_AddRef 	nsCOMPtr.cpp:89

Comment 4

[none]

Disabling it how? Through some firefox menu or through my OS (XP)?

Comment 5

[timeless]

tools>add-ons>plugins
select a plugin
click disable

Comment 6

[none]

I will try it as soon as I get access to that computer again, and will test on other computers in the mean time.

Comment 7

[aravindm]

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2
Reporter, can you please update if you are able to reproduce the problem after disabling the plugin.

Comment 8

[Ed Morley [:emorley]]

Closing since now after whiteboard closeme date and no reply to last comment.

Please reopen/comment with further info, if you still see this issue with Firefox 3.6.13 or later in safe mode:
http://support.mozilla.com/kb/Safe+Mode

If you wish, you can also try to reproduce in Firefox 4 Beta 8 or later, since it is possible the issue has already been fixed in Firefox 4:
http://www.mozilla.com/en-US/firefox/all-beta.html