465501 - Flash crash on DxOMark.com in Firefox [@ libflashplayer.so@0x2908c7] [@ NPSWF32.dll@0x946be ]

Status: RESOLVED FIXED

(Core Graveyard :: Plug-ins, defect)

Description

[jean-max Reymond]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; fr; rv:1.9.0.4) Gecko/2008111318 Ubuntu/8.10 (intrepid) Firefox/3.0.4
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; fr; rv:1.9.0.4) Gecko/2008111318 Ubuntu/8.10 (intrepid) Firefox/3.0.4

crash when filter by All Brand/Sony

Reproducible: Always

Steps to Reproduce:
1.access to http://www.dxomark.com/index.php/eng/DxOMark-Sensor
2.choose filter by All Brand/Sony
3.
Actual Results:  
crash

Comment 1

[Dave Garrett]

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.4) Gecko/2008102920 Firefox/3.0.4

Confirmed on Kubuntu 8.04.1.

bp-63e36b4c-0eaf-438b-9676-470720081118
bp-a70eab83-1884-439c-b7b8-500220081118

Comment 2

[Dave Garrett]

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.4) Gecko/2008102920 Firefox/3.0.4

Crashes on Windows too.
bp-43b49486-5f05-4da6-a7df-f1c220081118

The crash is in Flash. (10.0 r12)

Comment 3

[timeless]

Signature	libflashplayer.so@0x2908c7
UUID	a70eab83-1884-439c-b7b8-500220081118
Time	2008-11-18 11:30:12-08
Uptime	4488
Product	Firefox
Version	3.0.4
Build ID	2008102920
OS	Linux
OS Version	0.0.0 Linux 2.6.24-21-generic #1 SMP Tue Oct 21 23:43:45 UTC 2008 i686 GNU/Linux
CPU	x86
CPU Info	GenuineIntel family 2 model 2 stepping 9
Crash Reason	SIGSEGV
Crash Address	0xa93218c7
Comments	
Crashing Thread
Frame 	Module 	Signature 	Source
0 	libflashplayer.so 	libflashplayer.so@0x2908c7 	
1 	libflashplayer.so 	libflashplayer.so@0x3998c5 	
2 	libflashplayer.so 	libflashplayer.so@0x39a172 	
3 	libflashplayer.so 	libflashplayer.so@0x20c347 	
4 	libflashplayer.so 	libflashplayer.so@0x20c918 	
5 	libflashplayer.so 	libflashplayer.so@0x393a76 	
6 	libflashplayer.so 	libflashplayer.so@0x3269c 	
7 	libflashplayer.so 	libflashplayer.so@0x32eab 	
8 	libflashplayer.so 	libflashplayer.so@0x32edc 	
9 	libxul.so 	CallNPMethodInternal 	mozilla/modules/plugin/base/src/nsJSNPRuntime.cpp:1378
10 	libmozjs.so 	js_Invoke 	mozilla/js/src/jsinvoke.c:1297
11 	libmozjs.so 	js_Interpret 	mozilla/js/src/jsinterp.c:4857
12 	libmozjs.so 	js_Invoke 	mozilla/js/src/jsinvoke.c:1313
13 	libmozjs.so 	js_InternalInvoke 	mozilla/js/src/jsinvoke.c:1369
14 	libmozjs.so 	JS_CallFunctionValue 	mozilla/js/src/jsapi.c:5054

Module|libflashplayer.so||libflashplayer.so|E68208AF7DD76CE7A5016EB5EF110AC00|0xa9091000|0xa99e1fff|0

Comment 4

[Jean-Marc Desperrier]

This problem does not seem to be reproductible with the 3.1 nightlies (under Windows at least).

Comment 5

[Dave Garrett]

(In reply to comment #4)
> This problem does not seem to be reproductible with the 3.1 nightlies (under
> Windows at least).

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b2pre) Gecko/20081118 Minefield/3.1b2pre

Crashes just fine for me:
bp-8223ea18-243b-4554-9459-b10220081119

Also seems to crash for others:
http://crash-stats.mozilla.com/report/list?query_search=signature&query_type=contains&query=NPSWF32.dll%400x946be&date=&range_value=1&range_unit=weeks&do_query=1&signature=NPSWF32.dll%400x946be

Comment 6

[Stéphane Grégoire (yamo)]

Hi, I also had a chshe with Firefox 3.0.4 on Windows XP Pro :

url of the crash : da-2dc3-45f3-b070-b07b20081118

Comment 7

[Stéphane Grégoire (yamo)]

Sorry, the url is : e41907da-2dc3-45f3-b070-b07b20081118

Comment 8

[Stéphane Grégoire (yamo)]

The crash also happen on Seamonkey 1.1.13 which is on 1.8.1 branch.

But Firefox 2.0.0.17 has no crashes on this page!

And sorry for the last two comments I think the id was only needed (I cannot remove them), the url is : 
http://crash-stats.mozilla.com/report/index/e41907da-2dc3-45f3-b070-b07b20081118

Comment 9

[Dave Garrett]

We already have a stack for this crash, and seeing as it's crashing inside the Flash plugin which doesn't have its source available, it's not that useful to us anyway. This one is up to Adobe to deal with. Thanks for noting the SeaMonkey crash, though.

As for crash report IDs, you can either paste the URL or use magic:
bp-e41907da-2dc3-45f3-b070-b07b20081118
(adding the "bp-" for "breakpad" to the front linkifies it)

Comment 10

[Charles]

I've reproduced the issue and have a bug logged for investigation.  Thanks for the great easy to reproduce bug.

Comment 11

[Black_Ps`]

i confirm this bug,using 3.0.0.8 ,windows xp sp1 , http://crash-stats.mozilla.com/report/pending/6a7847b4-49ea-4ade-86d3-7ac0f2090401

Comment 12

[timeless]

[e-mail]: Charles works for Adobe and in comment 10 indicated they have everything they need. Please don't comment further, you just have to wait for them to fix it. The same would be true if a mozilla contributor indicated they have what they need: you just have to wait.

Comment 14

[Charles]

tracking issue #2217000

Comment 15

[Dave Garrett]

Charles, is an update with a fix to this expected at some point in the not too distant future? The 10.1 beta, maybe?

Comment 16

[Charles]

Its on the list but we are still working hard on fixes for this release.

Comment 17

[Dave Garrett]

This is fixed for me in the 10.1 d51 prerelease.

Comment 18

[Dave Garrett]

Tested on Linux and Windows XP. Crash replaced with an error console message:

Error: uncaught exception: Error calling method on NPObject! [plugin exception: Error in Actionscript. Use a try/catch block to find error.].

Thank you Adobe for your clearly improved error handling in 10.1. :)

Comment 19

[Dave Garrett]

I can't reproduce this at all anymore, with either version. Last I tried (comment 17/18) I crashed with Flash 10 and got an Actionscript error with Flash 10.1. Now I see no problems (under Linux or Windows). It seems the site must have fixed the issue that was triggering the crash.

Well, there goes my easy test of the crash reporter. ;)