488554 - crash in java plugin (unloaded?) [@ nsPluginInstancePeerImpl::GetOwner] at shutdown

Status: RESOLVED WONTFIX

(Core Graveyard :: Plug-ins, defect)

Description

[timeless]

bug 476706 comment 20 

CONTEXT:  00121980 -- (.cxr 0x121980)
eax=1c03895c ebx=00000000 ecx=0c2fe360 edx=030ce2e8 esi=006fc3b0 edi=0040b4c0
eip=030ce2f9 esp=00121c4d ebp=0012f67b iopl=0         nv up ei pl nz ac po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010212
030ce2f9 0003            add     byte ptr [ebx],al          ds:0023:00000000=??
Resetting default scope

WRITE_ADDRESS:  00000000

FOLLOWUP_IP:
xul!nsPluginInstancePeerImpl::GetOwner+2f
109e549f 83c404          add     esp,4

FAILED_INSTRUCTION_ADDRESS:
+30ce2f9
030ce2f9 0003            add     byte ptr [ebx],al

LAST_CONTROL_TRANSFER:  from 40b4c000 to 030ce2f9

PRIMARY_PROBLEM_CLASS:  STATUS_BREAKPOINT
BUGCHECK_STR:  APPLICATION_FAULT_STATUS_BREAKPOINT
IP_ON_HEAP:  40b4c000
IP_IN_FREE_BLOCK: 40b4c000
FRAME_ONE_INVALID: 1
UNALIGNED_STACK_POINTER:  00121c4d
SYMBOL_STACK_INDEX:  2
SYMBOL_NAME:  xul!nsPluginInstancePeerImpl::GetOwner+2f
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: xul
IMAGE_NAME:  xul.dll
DEBUG_FLR_IMAGE_TIMESTAMP:  49db0733
STACK_COMMAND:  .cxr 0x121980 ; kb
FAILURE_BUCKET_ID: 
STATUS_BREAKPOINT_80000003_xul.dll!nsPluginInstancePeerImpl::GetOwner
BUCKET_ID: 
APPLICATION_FAULT_STATUS_BREAKPOINT_BAD_IP_xul!nsPluginInstancePeerImpl::GetOwner+2f

Followup: MachineOwner
---------

0:119> .cxr 0x121980
eax=1c03895c ebx=00000000 ecx=0c2fe360 edx=030ce2e8 esi=006fc3b0 edi=0040b4c0
eip=030ce2f9 esp=00121c4d ebp=0012f67b iopl=0         nv up ei pl nz ac po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010212
030ce2f9 0003            add     byte ptr [ebx],al          ds:0023:00000000=??
0:119> k
  *** Stack trace for last set context - .thread/.cxr resets it
ChildEBP RetAddr
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012f67b 40b4c000 0x30ce2f9
0012f6ac 109e549f 0x40b4c000
0012f6b8 109c4cec xul!nsPluginInstancePeerImpl::GetOwner+0x2f
0012f708 109c51af xul!nsPluginInstanceTag::~nsPluginInstanceTag+0xbc
0012f714 109c511d xul!nsPluginInstanceTag::`scalar deleting destructor'+0xf
0012f74c 109c4f45 xul!nsPluginInstanceTagList::remove+0xbd
0012f764 109cdc0f xul!nsPluginInstanceTagList::shutdown+0x35
0012f7a0 109d8131 xul!nsPluginHostImpl::Destroy+0x7f
0012f7dc 10bd3335 xul!nsPluginHostImpl::Observe+0x51
0012f804 10bb9090 xul!nsObserverList::NotifyObservers+0x65
0012f81c 10b962c8 xul!nsObserverService::NotifyObservers+0x70
0012f890 1000f31d xul!NS_ShutdownXPCOM_P+0x108
0012f8ac 100134f7 xul!ScopedXPCOMStartup::~ScopedXPCOMStartup+0x6d
0012fee4 00401a2a xul!XRE_main+0x2ea7
0012ff48 00401259 firefox!NS_internal_main+0x29a
0012ff7c 00405d48 firefox!wmain+0x119
0012ffc0 7c817067 firefox!__tmainCRTStartup+0x10f
0012fff0 00000000 kernel32!BaseProcessStart+0x23
0:119> .frame
00 0012f67b 40b4c000 0x30ce2f9
0:119> .frame 2
02 0012f6b8 109c4cec xul!nsPluginInstancePeerImpl::GetOwner+0x2f
0:119> dt this nsPluginInstancePeerImpl mMIMEType
Local var @ 0x12f6c0 Type nsPluginInstancePeerImpl*
0x0354a000  (-10)
   +0x01c mMIMEType                : 0x02b15b90  "application/x-java-vm"

I'm using 13, I'm assuming this is the same problem.

bug 476706 comment 6 seemed to have the same stack trace.

Comment 2

[Johnny Stenback (:jst)]

Is this an issue still with current Java plugins on trunk?

Comment 3

[Johnny Stenback (:jst)]

Not blocking, if someone thinks we need to, and this is still a problem on trunk, please renominate.

Comment 4

[Virtual_ManPL [:Virtual] 🇵🇱 - (please needinfo? me - so I will see your comment/reply/question/etc.)]

I'm marking this bug as WONTFIX per bug #1269807.

For more information see - https://blog.mozilla.org/futurereleases/2015/10/08/npapi-plugins-in-firefox/