Closed Bug 476706 Opened 15 years ago Closed 15 years ago

above page fails to load with java 1.6.0_11 or 12 but does with 10 [@ nsPluginInstancePeerImpl::GetOwner]

Categories

(Core Graveyard :: Plug-ins, defect)

Product:
Core Graveyard
Component:
Plug-ins
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(Not tracked)

Status:
VERIFIED INVALID

People

(Reporter: lbdyck, Assigned: hao.dong)

References

(
URL
)

Details

(Keywords: crash)

Crash Data

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.5) Gecko/2008120122 Firefox/3.0.5 (.NET CLR 3.5.30729)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.5) Gecko/2008120122 Firefox/3.0.5 (.NET CLR 3.5.30729)

The referenced web page (http://www.velocitysoftware.com/SHOWCASE/showcase.html) will open and the displays work with any version of java prior to 1.6.0_11.

Reproducible: Always

Steps to Reproduce:
1. install java 1.6.0_11 or newer
2. go to above web page
3. the views will not load
Actual Results:  
views do not load - just a message that indicates java may not be installed

Expected Results:  
the views should load
This is not an issue with either IE or Chrome - only with Firefox and I've only tested with Firefox 3.0.5
Component: General → Plug-ins
Product: Firefox → Core
QA Contact: general → plugins
The issue persists with FF 3.0.6
confirmed fails to load on trunk as well

Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2a1pre) Gecko/20090204 Minefield/3.2a1pre
Status: UNCONFIRMED → NEW
Ever confirmed: true
I get the following in Error Console, if I open the indicated URL in a new window then close the window after the failure the display the applet:

Error: uncaught exception: [Exception... "Component returned failure code: 0x80040111 (NS_ERROR_NOT_AVAILABLE) [nsIDOMWindowInternal.alert]"  nsresult: "0x80040111 (NS_ERROR_NOT_AVAILABLE)"  location: "JS frame :: http://www.velocitysoftware.com/SHOWCASE/lpsglbl.js :: handleErr :: line 177"  data: no]


I also get the following in Java Console (Java 1.6.0_12):

load: class JavaVers not found.
java.lang.ClassNotFoundException: JavaVers
	at sun.plugin2.applet.Applet2ClassLoader.findClass(Unknown Source)
	at java.lang.ClassLoader.loadClass(Unknown Source)
	at java.lang.ClassLoader.loadClass(Unknown Source)
	at sun.plugin2.applet.Plugin2ClassLoader.loadCode(Unknown Source)
	at sun.plugin2.applet.Plugin2Manager.createApplet(Unknown Source)
	at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
	at java.lang.Thread.run(Unknown Source)
Exception: java.lang.ClassNotFoundException: JavaVers
That was for: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2a1pre) Gecko/20090205 Minefield/3.2a1pre ID:20090205033258
Flags: blocking1.9.1?
Crash if you do the following:

1. With only one browser window open and loaded with this bug page, right-click and open the reported URL in a second window.
2. Wait to confirm the Java applet does not load
3. Close that window.
4. Close the remaining browser window.
5. Minefield crashes but there is no crash reporter.

STACK TRACE -----------------------------------------------------------
ModLoad: 5cb70000 5cb96000   C:\WINDOWS\system32\ShimEng.dll
ModLoad: 7c340000 7c396000   C:\Program Files\Java\jre6\bin\msvcr71.dll
ModLoad: 6d800000 6da56000   C:\Program Files\Java\jre6\bin\client\jvm.dll
ModLoad: 7e410000 7e4a1000   C:\WINDOWS\system32\USER32.dll
ModLoad: 77f10000 77f59000   C:\WINDOWS\system32\GDI32.dll
ModLoad: 76b40000 76b6d000   C:\WINDOWS\system32\WINMM.dll
ModLoad: 76390000 763ad000   C:\WINDOWS\system32\IMM32.DLL
ModLoad: 76b10000 76b15000   C:\WINDOWS\system32\ctwdm32.dll
ModLoad: 6d290000 6d298000   C:\Program Files\Java\jre6\bin\hpi.dll
ModLoad: 76bf0000 76bfb000   C:\WINDOWS\system32\PSAPI.DLL
ModLoad: 6d7b0000 6d7bc000   C:\Program Files\Java\jre6\bin\verify.dll
ModLoad: 6d330000 6d34f000   C:\Program Files\Java\jre6\bin\java.dll
ModLoad: 6d7f0000 6d7ff000   C:\Program Files\Java\jre6\bin\zip.dll
ModLoad: 6d430000 6d436000   C:\Program Files\Java\jre6\bin\jp2native.dll
ModLoad: 6d1d0000 6d1e3000   C:\Program Files\Java\jre6\bin\deploy.dll
ModLoad: 77a80000 77b15000   C:\WINDOWS\system32\CRYPT32.dll
ModLoad: 77b20000 77b32000   C:\WINDOWS\system32\MSASN1.dll
ModLoad: 77c10000 77c68000   C:\WINDOWS\system32\msvcrt.dll
ModLoad: 7c9c0000 7d1d7000   C:\WINDOWS\system32\SHELL32.dll
ModLoad: 77f60000 77fd6000   C:\WINDOWS\system32\SHLWAPI.dll
ModLoad: 774e0000 7761d000   C:\WINDOWS\system32\ole32.dll
ModLoad: 77120000 771ab000   C:\WINDOWS\system32\OLEAUT32.dll
ModLoad: 771b0000 7725a000   C:\WINDOWS\system32\WININET.dll
ModLoad: 7e1e0000 7e282000   C:\WINDOWS\system32\urlmon.dll
ModLoad: 77c00000 77c08000   C:\WINDOWS\system32\VERSION.dll
ModLoad: 773d0000 774d3000   C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
ModLoad: 6d6b0000 6d6f2000   C:\Program Files\Java\jre6\bin\regutils.dll
ModLoad: 3fde0000 40221000   C:\WINDOWS\system32\msi.dll
ModLoad: 76780000 76789000   C:\WINDOWS\system32\shfolder.dll
ModLoad: 6d610000 6d623000   C:\Program Files\Java\jre6\bin\net.dll
ModLoad: 71ab0000 71ac7000   C:\WINDOWS\system32\WS2_32.dll
ModLoad: 71aa0000 71aa8000   C:\WINDOWS\system32\WS2HELP.dll
ModLoad: 6d630000 6d639000   C:\Program Files\Java\jre6\bin\nio.dll
ModLoad: 6d000000 6d14a000   C:\Program Files\Java\jre6\bin\awt.dll
ModLoad: 73000000 73026000   C:\WINDOWS\system32\WINSPOOL.DRV
ModLoad: 10000000 10009000   C:\WINDOWS\system32\PGPhk.dll
ModLoad: 02e90000 02e94000   C:\Program Files\Utilities\Unlocker\UnlockerHook.dll
ModLoad: 755c0000 755ee000   C:\WINDOWS\system32\msctfime.ime
ModLoad: 6d230000 6d284000   C:\Program Files\Java\jre6\bin\fontmanager.dll
ModLoad: 4fdd0000 4ff76000   C:\WINDOWS\system32\d3d9.dll
ModLoad: 02ea0000 02ea6000   C:\WINDOWS\system32\d3d8thk.dll
(da0.aa8): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=0277a250 ebx=00000000 ecx=00000007 edx=00000000 esi=027a0860 edi=027a0860
eip=103e1d8b esp=0012fb50 ebp=0012fb9c iopl=0         nv up ei pl nz na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010206
xul!ns_if_addref<nsIDOMAbstractView *>+0xb:
103e1d8b ff5104          call    dword ptr [ecx+4]    ds:0023:0000000b=????????
0:000> kp
ChildEBP RetAddr  
0012fb50 1040a9eb xul!ns_if_addref<nsIDOMAbstractView *>(class nsIDOMAbstractView * expr = 0x106cb236)+0xb [e:\builds\moz2_slave\mozilla-central-win32-nightly\build\obj-firefox\dist\include\xpcom\nsisupportsutils.h @ 114]
0012fb5c 106c3102 xul!nsPluginInstancePeerImpl::GetOwner(class nsIPluginInstanceOwner ** aOwner = 0x019d9c70)+0x21 [e:\builds\moz2_slave\mozilla-central-win32-nightly\build\modules\plugin\base\src\nsplugininstancepeer.cpp @ 862]
0012fb9c 106cb236 xul!nsActivePlugin::~nsActivePlugin(void)+0x70 [e:\builds\moz2_slave\mozilla-central-win32-nightly\build\modules\plugin\base\src\nspluginhostimpl.cpp @ 373]
0012fba8 1073d40b xul!nsActivePlugin::`scalar deleting destructor'(void)+0xb
0012fbbc 1073d42c xul!nsActivePluginList::remove(struct nsActivePlugin * plugin = 0x02e8f284)+0x64 [e:\builds\moz2_slave\mozilla-central-win32-nightly\build\modules\plugin\base\src\nspluginhostimpl.cpp @ 495]
0012fbd0 1074eebf xul!nsActivePluginList::shut(void)+0x15 [e:\builds\moz2_slave\mozilla-central-win32-nightly\build\modules\plugin\base\src\nspluginhostimpl.cpp @ 421]
0012fc00 106ae77a xul!nsPluginHostImpl::Destroy(void)+0x4c [e:\builds\moz2_slave\mozilla-central-win32-nightly\build\modules\plugin\base\src\nspluginhostimpl.cpp @ 3124]
0012fc3c 1003b463 xul!nsPluginHostImpl::Observe(class nsISupports * aSubject = 0x0074e224, char * aTopic = 0x108b323c "xpcom-shutdown", wchar_t * someData = 0x00000000 "")+0x4f [e:\builds\moz2_slave\mozilla-central-win32-nightly\build\modules\plugin\base\src\nspluginhostimpl.cpp @ 6143]
0012fc60 101d6025 xul!nsObserverService::NotifyObservers(class nsISupports * aSubject = <Memory access error>, char * aTopic = <Memory access error>, wchar_t * someData = <Memory access error>)+0x83 [e:\builds\moz2_slave\mozilla-central-win32-nightly\build\xpcom\ds\nsobserverservice.cpp @ 181]
0012fc9c 10204627 xul!NS_ShutdownXPCOM_P(class nsIServiceManager * servMgr = 0x0000001a)+0x8e [e:\builds\moz2_slave\mozilla-central-win32-nightly\build\xpcom\build\nsxpcominit.cpp @ 758]
0012fcb0 1018733a xul!ScopedXPCOMStartup::~ScopedXPCOMStartup(void)+0x35 [e:\builds\moz2_slave\mozilla-central-win32-nightly\build\toolkit\xre\nsapprunner.cpp @ 889]
0012ff40 00401213 xul!XRE_main(int argc = 3, char ** argv = 0x007162d0, struct nsXREAppData * aAppData = 0x00713280)+0xcfe [e:\builds\moz2_slave\mozilla-central-win32-nightly\build\toolkit\xre\nsapprunner.cpp @ 3262]
0012ff80 00401432 firefox!wmain(int argc = <Memory access error>, wchar_t ** argv = <Memory access error>)+0x213 [e:\builds\moz2_slave\mozilla-central-win32-nightly\build\toolkit\xre\nswindowswmain.cpp @ 87]
0012ffc0 7c817067 firefox!__tmainCRTStartup(void)+0x152 [e:\builds\moz2_slave\mozilla-central-win32-nightly\build\obj-firefox\memory\jemalloc\src\crtexe.c @ 591]
0012fff0 00000000 kernel32!BaseProcessStart+0x23
In the above stack, why all the "[e:\builds\moz2_slave\mozilla-central-win32-nightly\build\modules\plugin\..."?

Did hard-coded directory paths somehow get picked up during compile?
they're not hard coded, but yes the compiler sticks complete paths into its symbolic information (which is not shipped to the customer). otherwise you could have a file 'main.c' and have no idea which of hundreds of such files on your system is the right one.
Severity: normal → critical
Keywords: crash
Summary: above page fails to load with java 1.6.0_11 or 12 but does with 10 → above page fails to load with java 1.6.0_11 or 12 but does with 10 [@ nsPluginInstancePeerImpl::GetOwner]
Kenneth, any ideas on what this might be about?
Not sure. CC'ing Calvin and Hao from the Java Plug-In team.
Any other information that I can provide on this issue?

Thanks for looking into it for me.
This has been filed as 6804500 in the Sun bug database and is under investigation.
Whiteboard: [needs more info]
This indeed is a Sun plugin issue. It is targeted to be fixed in Sun JRE 6 update 14. For more information, please check CR 6804500 in Sun's bug database.
Thank you Hao. Marking this bug as invalid as it's not something that will be fixed in our code.
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → INVALID
I understand this is a bug in the Sun code *but* this problem is manifested in FF and does not occur with either IE or Google Chrome. Thus it would seem to be something that may be unique to the FF interface to java.

So is it solely a Sun issue?
Status: RESOLVED → REOPENED
Resolution: INVALID → ---
I suppose that depends on what Hao meant when he said it was a "Sun plugin issue."  Did he mean:
1. The display issue;
2. The crash issue; or
3. Both 

A clarification would be nice.
The bug page uses javascript to access java.lang.System.getProperty("os.version") to get os information if the browser is FF. That's why the problem is manifested only in FF. 

Because of a bug in JRE 6u11, the liveconnect call causes the applet classloader not looking up for flat class files on the web server. On this page, one applet class is not packaged in jar file and resides on the web server. This causes the display issue because of ClassNotFoundException.

After fix the issue, the applet loads fine and the crash issue is not reproducible.

There are several workarounds that can be done on the web page without needing a patch from Sun. For example:

1) pack the applet class (JavaVer.class) in a jar.
2) or add a parameter <param name="codebase_lookup" value="true"></param> to the JavaVer applet.
3) or add a parameter <param name="classloader_cache" value="false"></param> to the JavaVer applet.
Thank you for the clarification.  I noticed taht java 6 update 14 is in early access.  Is this fix included in the early access code?
This *is* solely a Sun issue AFAICT. Closing bug again.
Status: REOPENED → RESOLVED
Closed: 15 years ago → 15 years ago
Resolution: --- → INVALID
Flags: blocking1.9.1? → blocking1.9.1-
Assignee: nobody → hao.dong
Status: RESOLVED → VERIFIED
Whiteboard: [needs more info]
CONTEXT:  00121980 -- (.cxr 0x121980)
eax=1c03895c ebx=00000000 ecx=0c2fe360 edx=030ce2e8 esi=006fc3b0 edi=0040b4c0
eip=030ce2f9 esp=00121c4d ebp=0012f67b iopl=0         nv up ei pl nz ac po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010212
030ce2f9 0003            add     byte ptr [ebx],al          ds:0023:00000000=??
Resetting default scope

WRITE_ADDRESS:  00000000

FOLLOWUP_IP:
xul!nsPluginInstancePeerImpl::GetOwner+2f
109e549f 83c404          add     esp,4

FAILED_INSTRUCTION_ADDRESS:
+30ce2f9
030ce2f9 0003            add     byte ptr [ebx],al

LAST_CONTROL_TRANSFER:  from 40b4c000 to 030ce2f9

PRIMARY_PROBLEM_CLASS:  STATUS_BREAKPOINT
BUGCHECK_STR:  APPLICATION_FAULT_STATUS_BREAKPOINT
IP_ON_HEAP:  40b4c000
IP_IN_FREE_BLOCK: 40b4c000
FRAME_ONE_INVALID: 1
UNALIGNED_STACK_POINTER:  00121c4d
SYMBOL_STACK_INDEX:  2
SYMBOL_NAME:  xul!nsPluginInstancePeerImpl::GetOwner+2f
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: xul
IMAGE_NAME:  xul.dll
DEBUG_FLR_IMAGE_TIMESTAMP:  49db0733
STACK_COMMAND:  .cxr 0x121980 ; kb
FAILURE_BUCKET_ID:  STATUS_BREAKPOINT_80000003_xul.dll!nsPluginInstancePeerImpl::GetOwner
BUCKET_ID:  APPLICATION_FAULT_STATUS_BREAKPOINT_BAD_IP_xul!nsPluginInstancePeerImpl::GetOwner+2f

Followup: MachineOwner
---------

0:119> .cxr 0x121980
eax=1c03895c ebx=00000000 ecx=0c2fe360 edx=030ce2e8 esi=006fc3b0 edi=0040b4c0
eip=030ce2f9 esp=00121c4d ebp=0012f67b iopl=0         nv up ei pl nz ac po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010212
030ce2f9 0003            add     byte ptr [ebx],al          ds:0023:00000000=??
0:119> k
  *** Stack trace for last set context - .thread/.cxr resets it
ChildEBP RetAddr
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012f67b 40b4c000 0x30ce2f9
0012f6ac 109e549f 0x40b4c000
0012f6b8 109c4cec xul!nsPluginInstancePeerImpl::GetOwner+0x2f
0012f708 109c51af xul!nsPluginInstanceTag::~nsPluginInstanceTag+0xbc
0012f714 109c511d xul!nsPluginInstanceTag::`scalar deleting destructor'+0xf
0012f74c 109c4f45 xul!nsPluginInstanceTagList::remove+0xbd
0012f764 109cdc0f xul!nsPluginInstanceTagList::shutdown+0x35
0012f7a0 109d8131 xul!nsPluginHostImpl::Destroy+0x7f
0012f7dc 10bd3335 xul!nsPluginHostImpl::Observe+0x51
0012f804 10bb9090 xul!nsObserverList::NotifyObservers+0x65
0012f81c 10b962c8 xul!nsObserverService::NotifyObservers+0x70
0012f890 1000f31d xul!NS_ShutdownXPCOM_P+0x108
0012f8ac 100134f7 xul!ScopedXPCOMStartup::~ScopedXPCOMStartup+0x6d
0012fee4 00401a2a xul!XRE_main+0x2ea7
0012ff48 00401259 firefox!NS_internal_main+0x29a
0012ff7c 00405d48 firefox!wmain+0x119
0012ffc0 7c817067 firefox!__tmainCRTStartup+0x10f
0012fff0 00000000 kernel32!BaseProcessStart+0x23
0:119> .frame
00 0012f67b 40b4c000 0x30ce2f9
0:119> .frame 2
02 0012f6b8 109c4cec xul!nsPluginInstancePeerImpl::GetOwner+0x2f
0:119> dt this nsPluginInstancePeerImpl mMIMEType
Local var @ 0x12f6c0 Type nsPluginInstancePeerImpl*
0x0354a000  (-10)
   +0x01c mMIMEType                : 0x02b15b90  "application/x-java-vm"

I'm using 13, I'm assuming this is the same problem.
Summary: above page fails to load with java 1.6.0_11 or 12 but does with 10 [@ nsPluginInstancePeerImpl::GetOwner] → above page fails to load with java 1.6.0_11 or 12 or 13 but does with 10 [@ nsPluginInstancePeerImpl::GetOwner]
ok, i filed bug 488554 for comment 20 (and possibly comment 6)
Summary: above page fails to load with java 1.6.0_11 or 12 or 13 but does with 10 [@ nsPluginInstancePeerImpl::GetOwner] → above page fails to load with java 1.6.0_11 or 12 but does with 10 [@ nsPluginInstancePeerImpl::GetOwner]
Crash Signature: [@ nsPluginInstancePeerImpl::GetOwner]
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.