434665 - Crash before finishing loading specific website or any sub-site within it. [@ JS_SetPrivate - PL_DHashTableEnumerate - nsJSNPRuntime::OnPluginDestroy]

Status: RESOLVED DUPLICATE of bug 421217

(Core Graveyard :: Plug-ins, defect)

Description

[Brian Hughes]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9) Gecko/2008051206 Firefox/3.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9) Gecko/2008051206 Firefox/3.0

I typed in www.eternal-silence.net and clicked enter to browse to it. Part of the page started to display, but before it could fully finish it crashes out.

I tried it on many sub-sites (example www.eternal-silence.net/forums) however it causes similar crashing.

Reproducible: Always

Steps to Reproduce:
1. Type in www.eternal-silence.net and hit enter to start loading the site
2. During loading the page should start to appear and just as it appears to be done, it will crash.
Actual Results:  
Firefox3 crashes.

Expected Results:  
It should have not crashed. :-)

I asked another user in the #firefox channel to reproduce and it did not work for them.

I am not using any special Firefox themes or add-ons and is a stock install, so I'm not sure what the difference is.

Please contact me at briguy992 at gmail.com for more details since I've never submitted a bug before.

Here is my build config.

about:buildconfig

Build platform
target
i686-pc-mingw32

Build tools
Compiler 	Version 	Compiler flags
cl 	14.00.50727.762 	-GL -wd4624 -wd4952 -TC -nologo -W3 -Gy -Fd$(PDBFILE)
cl 	14.00.50727.762 	-GR- -GL -wd4624 -wd4952 -TP -nologo -Zc:wchar_t- -W3 -Gy -Fd$(PDBFILE)

Configure arguments
--enable-application=browser --enable-update-channel=release --enable-optimize --disable-debug --disable-tests --enable-update-packaging --enable-official-branding --enable-jemalloc --with-crashreporter-enable-percent=25

Comment 1

[timeless]

http://developer.mozilla.org/en/docs/How_to_get_a_stacktrace_with_WinDbg

Comment 2

[Brian Hughes]

(17f8.1580): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=00000001 ebx=002ef684 ecx=00000000 edx=00140170 esi=03379168 edi=05dd9c80
eip=6b75692b esp=002ef610 ebp=00000000 iopl=0         nv up ei pl nz na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00210202
js3250!JS_SetPrivate+0xb:
6b75692b 894110          mov     dword ptr [ecx+10h],eax ds:0023:00000010=????????
0:000> kp
ChildEBP RetAddr  
002ef60c 65b9e72a js3250!JS_SetPrivate(struct JSContext * cx = <Memory access error>)+0xb [e:\fx19rel\winnt_5.2_depend\mozilla\js\src\jsapi.c @ 2888]
002ef628 658f024d xul!NPObjWrapperPluginDestroyedCallback(struct PLDHashTable * table = <Memory access error>, struct PLDHashEntryHdr * hdr = <Memory access error>, unsigned int number = <Memory access error>, void * arg = <Memory access error>)+0x4e [e:\fx19rel\winnt_5.2_depend\mozilla\modules\plugin\base\src\nsjsnpruntime.cpp @ 1805]
002ef658 65e6d121 xul!PL_DHashTableEnumerate(struct PLDHashTable * table = <Memory access error>, <function> * etor = <Memory access error>, void * arg = <Memory access error>)+0x7d [e:\fx19rel\winnt_5.2_depend\mozilla\obj-fx-trunk\xpcom\build\pldhash.c @ 724]
002ef6c8 65eb0bf9 xul!nsJSNPRuntime::OnPluginDestroy(struct _NPP * npp = 0x06227658)+0x8d [e:\fx19rel\winnt_5.2_depend\mozilla\modules\plugin\base\src\nsjsnpruntime.cpp @ 1846]
002ef714 65e7340a xul!ns4xPluginInstance::Stop(void)+0x187 [e:\fx19rel\winnt_5.2_depend\mozilla\modules\plugin\base\src\ns4xplugininstance.cpp @ 960]
002ef740 65e87dd0 xul!DoStopPlugin(class nsPluginInstanceOwner * aInstanceOwner = 0x06227640, int aDelayedStop = 0)+0xed [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nsobjectframe.cpp @ 1828]
002ef774 658d5e48 xul!nsStopPluginRunnable::Run(void)+0x2a [e:\fx19rel\winnt_5.2_depend\mozilla\layout\generic\nsobjectframe.cpp @ 1890]
002ef798 658b8a3a xul!nsThread::ProcessNextEvent(int mayWait = <Memory access error>, int * result = <Memory access error>)+0x218 [e:\fx19rel\winnt_5.2_depend\mozilla\xpcom\threads\nsthread.cpp @ 511]
002ef7b0 65a433fd xul!nsBaseAppShell::Run(void)+0x4a [e:\fx19rel\winnt_5.2_depend\mozilla\widget\src\xpwidgets\nsbaseappshell.cpp @ 169]
002ef7bc 65984d88 xul!nsAppStartup::Run(void)+0x1e [e:\fx19rel\winnt_5.2_depend\mozilla\toolkit\components\startup\src\nsappstartup.cpp @ 182]
002ef7c4 007130a8 xul!XRE_main(int argc = 1712048236, char ** argv = 0x00000000, struct nsXREAppData * aAppData = 0x05f35380)+0xdba [e:\fx19rel\winnt_5.2_depend\mozilla\toolkit\xre\nsapprunner.cpp @ 3174]
WARNING: Frame IP not in any known module. Following frames may be wrong.
002ef7c8 00000000 0x7130a8

Comment 3

[Henrik Skupin [:whimboo][⌚️UTC+1]]

Reporter, please give us a list of plugins which are installed on your system. Do you have Silverlight 2.0 beta installed? If yes, it looks like a dupe of bug 421217.

Comment 4

[Henrik Skupin [:whimboo][⌚️UTC+1]]

Tested the given website with and without the Silverlight 2.0 beta plugin installed. The crash only happens when Silverlight 2.0 beta is installed. Marking as dupe.