437852 - FF3RC2 crashes @ js3250.dll!JS_SetPrivate(JSContext * cx=0x03026950, JSObject * obj=0x00000000, void * data=0x00000000) Line 2888 + 0xb bytes C

Status: VERIFIED DUPLICATE of bug 421217

(Core Graveyard :: Plug-ins, defect)

Description

[IlkkaP]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9) Gecko/2008052906 Firefox/3.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9) Gecko/2008052906 Firefox/3.0

FF3RC2 clean, Firebug and others disabled.
Silverlight plugin npctrl.1.0.20816.0.dll (1.0.30226.2).
The page loads almost ok, but makes FF to crash when refreshing (F5) or clicking any link.


Reproducible: Always

Steps to Reproduce:
1. Go to page
2. Press F5, CTRL+F5 or click a link
3.
Actual Results:  
Crash

Expected Results:  
No crash

Similar to https://bugzilla.mozilla.org/show_bug.cgi?id=421217 et al. but with a different stack trace:

>	js3250.dll!JS_SetPrivate(JSContext * cx=0x03026950, JSObject * obj=0x00000000, void * data=0x00000000)  Line 2888 + 0xb bytes	C
 	xul.dll!NPObjWrapperPluginDestroyedCallback(PLDHashTable * table=0x6af35d98, PLDHashEntryHdr * hdr=0x072ab010, unsigned int number=0, void * arg=0x0017f95c)  Line 1805 + 0xe bytes	C++
 	xul.dll!PL_DHashTableEnumerate(PLDHashTable * table=0x6af35d98, PLDHashOperator (PLDHashTable *, PLDHashEntryHdr *, unsigned int, void *)* etor=0x6a96fdef, void * arg=0x0017f95c)  Line 724 + 0xc bytes	C
 	xul.dll!nsJSNPRuntime::OnPluginDestroy(_NPP * npp=0x6a665303)  Line 1846 + 0x16 bytes	C++
 	xul.dll!nsThreadManager::GetIsMainThread(int * result=0x0017f97c)  Line 283 + 0x6 bytes	C++
 	xul.dll!NS_IsMainThread_P()  Line 131	C++
 	0a81331c()	
 	xul.dll!DoStopPlugin(nsPluginInstanceOwner * aInstanceOwner=0x0a131b00, int aDelayedStop=0)  Line 1828	C++
 	xul.dll!nsStopPluginRunnable::Run()  Line 1890 + 0x9 bytes	C++
 	xul.dll!nsThread::ProcessNextEvent(int mayWait=1, int * result=0x0017fa90)  Line 511	C++
 	xul.dll!nsBaseAppShell::Run()  Line 169	C++
 	xul.dll!nsAppStartup::Run()  Line 182	C++
 	xul.dll!XRE_main(int argc=, char * * argv=, const nsXREAppData * aAppData=)  Line 3174	C++
 	mozcrt19.dll!arena_dalloc(arena_s * arena=0x00000000, arena_chunk_s * chunk=0x00000000, void * ptr=0x0090001c)  Line 4200 + 0x19 bytes	C
 	mozcrt19.dll!extent_tree_ad_s_RB_INSERT(extent_tree_ad_s * head=0x0090001c, extent_node_s * elm=0x00000000)  Line 1988 + 0x67 bytes	C
 	mozcrt19.dll!arena_run_dalloc(arena_s * arena=0x00932148, arena_run_s * run=0x00918440, int dirty=0)  Line 3277 + 0xe bytes	C
 	xul.dll!nsLocalFile::Release()  Line 753 + 0x13 bytes	C++
 	xul.dll!nsRefPtr<nsIDOMEventListener>::~nsRefPtr<nsIDOMEventListener>()  Line 957	C++
 	xul.dll!XRE_CreateAppData(nsILocalFile * aINIFile=0x009130a8, nsXREAppData * * aAppData=0xcb94608b)  Line 139	C++


Crash reports:
http://crash-stats.mozilla.com/report/index/0c2e5078-3552-11dd-8da9-001cc4e2bf68
http://crash-stats.mozilla.com/report/index/f9c0a561-3551-11dd-ae4b-001cc4e2bf68

Comment 1

[IlkkaP]

Works ok with the new Silverlight 2.0b2 plugin (File name: npctrl.1.0.20816.0.dll 2.0.30523.6). No crashes.

Comment 2

[Matthias Versen [:Matti]]

This can't be tabbed browser and this also can not be Firefox, it's core Plugins and based on the informations in bug 421217 this is a bug in the plugin itself and that it works in a newer version seems be confirm that