458042 - Firefox 3.0.3 crashes on nytimes.com

Status: VERIFIED INCOMPLETE

(Firefox :: General, defect)

Description

[Zach van Schouwen]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.3) Gecko/2008092417 Firefox/3.0.3
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.3) Gecko/2008092417 Firefox/3.0.3

Myself and a co-worker upgraded to Firefox 3 and now see crashes when we load http://www.nytimes.com/.

Reproducible: Always

Steps to Reproduce:
1. Upgrade to 3.0.3
2. Open nytimes.com
Actual Results:  
Browser crashes with an Access Violation.

Expected Results:  
Not crashed.

Comment 1

[Zach van Schouwen]

Attachment: HTML of the page causing the crash

Here's the problem page.

Comment 2

[Zach van Schouwen]

The specific error message is:

Unhandled exception in firefox.exe (NTDLL.DLL): 0xC0000005: Access Violation.

I don't know enough about the Fx source to debug, but opening the debugger brings me to this position in the assembled code:

 ...
   7C918FDD   cmp         eax,ebx
   7C918FDF   mov         dword ptr [ebp-4],eax
   7C918FE2   je          7C919086
   7C918FE8   mov         eax,dword ptr [esi]
>> 7C918FEA   inc         dword ptr [eax+10h]
   7C918FED   mov         eax,dword ptr [ebp-4]
   7C918FF0   and         eax,1
   7C918FF3   mov         dword ptr [ebp-18h],eax
   7C918FF6   mov         eax,dword ptr [esi]
   7C918FF8   inc         dword ptr [eax+14h]
 ...

Comment 3

[Matthias Versen [:Matti]]

read http://developer.mozilla.org/En/How_to_get_a_stacktrace_for_a_bug_report

Comment 4

[Tyler Downer [He/Him]]

Also try in Safe Mode or with a new profile.

Comment 5

[Zach van Schouwen]

The crash still occurs when I try it on a clean profile. (Note that the NYT page no longer crashes, though my attachment still will.)

I can't get a stack trace, though... my work machine doesn't give me the privs to install WinDbg, and the crash reporter doesn't come up. When I follow the instructions and disable Flash 9, the crash doesn't happen anymore... guess it's related to the plugin, but that's about all I can surmise.

Comment 6

[Matthias Versen [:Matti]]

I can not reproduce this with Flash10RC and Seamonkey trunk and Firefox3.0.3 on vista.
We can do only somethign if we can reproduce this or if we get a stacktrace.

Comment 7

[Tyler Downer [He/Him]]

We have not heard back from you in a while, so I am closing this bug as INCOMPLETE. You can reopen this bug if more information becomes available. Some helpful information you can provide us is found at http://new.quality.mozilla.org/bug-writing-guidelines. Please try with Flash 10.