Closed Bug 532968 Opened 15 years ago Closed 14 years ago

[Mac] BrowserPlus Crash in [@ std::string::compare(std::string const&) const ] adding attachment to Yahoo email

Categories

(Firefox :: Extension Compatibility, defect)

Product:
Firefox
Component:
Extension Compatibility
Version:
3.6 Branch
Platform:
x86
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: marcia, Assigned: lloyd)

References

Details

(Keywords: crash, Whiteboard: [crashkill])

Crash Data

Attachments

(1 file)

Crash log zipped up
5.65 KB, text/plain
Details 
Seen while running  Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.4; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5. This bug also affects Firefox 3.6 as well.

STR:
1. Login to the New Yahoo Mail (not the classic version but the ajax version)
2. You will asked to install a Yahoo attachment tool.
3. After it installs attach a file using the attach button. I had to add two attachments before I triggered the crash.

http://crash-stats.mozilla.com/report/index/96dc2308-e6f5-4930-ba97-c803c2091204

Bug is seen on 10.4.11 as well as 10.5.x and is the number 7 overall Mac specific crash. Seems to occur much more frequently using 10.4.11 which is where I reproduced it.
looking at data from 2003-12-03 the highest volume is on X10.4.11

os breakdown
349     0.853301        Mac OS X10.4.11 8S2167
12      0.0293399       Mac OS X10.5.5 9F33
10      0.0244499       Mac OS X10.5.0 9A581
7       0.0171149       Mac OS X10.5.4 9E27
5       0.0122249       Mac OS X10.5.4 9E17
5       0.0122249       Mac OS X10.5.0 9A3129
4       0.00977995      Mac OS X10.5.5 9F2088
4       0.00977995      Mac OS X10.5.4 9E25
4       0.00977995      Mac OS X10.5.2 9C31
3       0.00733496      Mac OS X10.5.5 9F2114
3       0.00733496      Mac OS X10.5.3 9D34
2       0.00488998      Mac OS X10.5.5 9F2533
1       0.00244499      Mac OS X10.5.1 9B21

signature stretches back across all releases to to 3.0

all     227654  409     0.00179659
3.0.15  46823   70      0.00149499
3.5.5   120949  281     0.00232329
3.6b4   18432   9       0.000488281
<others snipped>
All of the crashes I looked at are from BrowserPlus, which is provided by yahoo. 

http://browserplus.yahoo.com/support/

Seems to be their support location, I can't find a bug tracker.

Signature	std::string::compare(std::string const&) const
UUID	96dc2308-e6f5-4930-ba97-c803c2091204
Time 	2009-12-04 11:55:00.397440
Uptime	242
Last Crash	16367470 seconds before submission
Product	Firefox
Version	3.5.5
Build ID	20091102134505
Branch	1.9.1
OS	Mac OS X
OS Version	10.4.11 8S2167
CPU	x86
CPU Info	GenuineIntel family 6 model 14 stepping 8
Crash Reason	EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash Address	0x90b2e651
User Comments	Adding an attachment to Yahoo email (Non classic version)
Processor Notes 	
Crashing Thread
Frame 	Module 	Signature [Expand] 	Source
0 	libstdc++.6.dylib 	std::string::compare const 	
1 	BrowserPlus 	BrowserPlus@0x33cca 	
2 	BrowserPlus 	BrowserPlus@0x33d29 	
3 	BrowserPlus 	BrowserPlus@0x2b50d 	
4 	BrowserPlus 	BrowserPlus@0x65d0e 	
5 	AppKit 	AppKit@0x210b2c 	
6 	AppKit 	AppKit@0x53bee6 	
7 	AppKit 	AppKit@0x186d9c 	
8 	AppKit 	AppKit@0x16eaa0 	
9 	AppKit 	AppKit@0x16e24e 	
10 	AppKit 	AppKit@0x16da66 	
11 	AppKit 	AppKit@0x16d90d 	
12 	AppKit 	AppKit@0x536a1a 	
13 	AppKit 	AppKit@0x16b209 	
14 	AppKit 	AppKit@0x16a0df 	
15 	AppKit 	AppKit@0x95e90 	
16 	JavaEmbeddingPlugin 	-[NSView JEP_NSView__drawRect:clip:] 	Controller.m:961
17 	AppKit 	AppKit@0x94eea 	
18 	AppKit 	AppKit@0xa6e4e 	
19 	CoreFoundation 	CFArrayApplyFunction 	
20 	AppKit 	AppKit@0x950f2 	
21 	AppKit 	AppKit@0xa6e4e 	
22 	CoreFoundation 	CFArrayApplyFunction 	
23 	AppKit 	AppKit@0x950f2 	
24 	AppKit 	AppKit@0xa6e4e 	
25 	CoreFoundation 	CFArrayApplyFunction 	
26 	AppKit 	AppKit@0x950f2 	
27 	AppKit 	AppKit@0x93f52 	
28 	AppKit 	AppKit@0x94b20 	
29 	AppKit 	AppKit@0x94b20 	
30 	AppKit 	AppKit@0x94b20 	
31 	AppKit 	AppKit@0x94b20 	
32 	AppKit 	AppKit@0x94b20 	
33 	AppKit 	AppKit@0x94b20 	
34 	AppKit 	AppKit@0x93657 	
35 	libobjc.A.dylib 	__FUNCTION__.21647 	
36 	XUL 	CSSParserImpl::ParseTypeOrUniversalSelector 	layout/style/nsCSSParser.cpp:2666

Filename 	Version 	Debug Identifier 	Debug Filename
BrowserPlus 		CBC8EED92E0C2F8A0C5204744E68C98F0 	BrowserPlus
Summary: [Mac] Crash in [ @ std::string::compare(std::string const&) const ] adding attachment to Yahoo email → [Mac] BrowserPlus Crash in [ @ std::string::compare(std::string const&) const ] adding attachment to Yahoo email
Summary: [Mac] BrowserPlus Crash in [ @ std::string::compare(std::string const&) const ] adding attachment to Yahoo email → [Mac] BrowserPlus Crash in [@ std::string::compare(std::string const&) const ] adding attachment to Yahoo email
Howdy,

Lloyd here from the BrowserPlus project,  I'll request that our QA dig in come monday.  In the meanwhile I personally cannot readily reproduce the problem.  If I provide a debug version of browserplus, by, say, the end of next week, would anyone here be willing to reproduce the problem and provide a stack trace?

very best,
lloyd
Lloyd: If it is easy to install the debug version of browserplus I can help. The easiest OS to reproduce this on is 10/4/11.

(In reply to comment #3)
> Howdy,
> 
> Lloyd here from the BrowserPlus project,  I'll request that our QA dig in come
> monday.  In the meanwhile I personally cannot readily reproduce the problem. 
> If I provide a debug version of browserplus, by, say, the end of next week,
> would anyone here be willing to reproduce the problem and provide a stack
> trace?
> 
> very best,
> lloyd
The debug version will be a standalone dmg, so it should be easy to install.  I'll update this bug with instructions within about a week.

Thanks a ton! :D

lloyd
Lloyd: Just following up to see if you have the debug version ready.

(In reply to comment #5)
> The debug version will be a standalone dmg, so it should be easy to install. 
> I'll update this bug with instructions within about a week.
> 
> Thanks a ton! :D
> 
> lloyd
Hey Marcia,

Sorry for the delay,  here's the tracking issue we opened:
http://browserplus.lighthouseapp.com/projects/43039/tickets/4-crash-in-npapi-plugin-on-osx-in-stdstringcomparestdstring-const-const

And the build is available here:
http://browserplus.lighthouseapp.com/projects/43039/messages/23403/a/353577/browserplus_250_full.dmg

very curious to hear if you're able to reproduce the crash with this build, and if so, to check out your stack trace.

very best,
lloyd
Keywords: qawanted
Lloyd: I was able to reproduce the issue using Firefox 3.5.5 (same build ID as the initial comment). My Mozilla crash report is http://crash-stats.mozilla.com/report/index/bp-f392f2c1-4880-49ad-9b99-175e42091218. My STR is all follows:

1. Install the new browerplus plugin. Confirm it is present in about:plugins.
2. Login to Yahoo email.
3. Compose an email with a PDF attached. When I went out to find another attachment to use, the browser crashed.
Attached file Crash log zipped up — 
Crash log information.
I confirmed that the crash also occurs using the recently shipped Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.4; en-US; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6.
Lloyd: have you been able to review the information I provided?
Keywords: qawanted
Lloyd: We are in the midst of testing the Firefox 3.6 release candidate so it would good to have an update on this. Thanks.
Sorry to have gone dark so long.  We've reproduced and fixed an issue that seems to be the underlying cause of these crashes.  For the record, the updated precise STR are: 

[5:12pm] lth_: 1. mail.yahoo.com with ffx 3.6 on 10.4.1 and bplus 2.4.21
[5:12pm] lth_: 2. new message
[5:12pm] lth_: 3. click attach button up top
[5:12pm] lth_: 4. browse to a pdf file on your desktop
[5:12pm] lth_: 5. click open
[5:12pm] lth_: 6. now focus on desktop and highlight that file you selected
[5:13pm] lth_: 7. copy it
[5:13pm] lth_: 8. paste it (back to your desktop)
[5:13pm] lth_: BOOM

Here's the one line fix:
http://github.com/browserplus/platform/commit/09151e0f42dcd8e63376d4c5195681b534ca8691

We should have a preview build of 2.5.1 available in about a week to regress, and it's already in the QA pipe.

best,
lloyd (& gordon who actually does the work instead of just talking about it)
Lloyd: Haven't heard any updates on this bug in a while and wondering if the preview build was finished and released?
Hey Marcia,

browserplus 2.5.1 includes the fix, and it's deployed to about 85% of our most active user base.  you should have seen a steady decline in the reports with this signature starting on 02/23/2010.  If you can confirm that the frequency of this report has trended down sharply, then we can close this, uh, bugger.

lloyd
http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=startswith&query=std%3A%3Astring%3A%3Acompare&date=&range_value=2&range_unit=weeks&process_type=all&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&signature=std%3A%3Astring%3A%3Acompare%28std%3A%3Astring%20const%26%29%20const

I can't make heads or tails out of this.

lloyd: it looks like your library doesn't have useful debug info (the field is all 0's?) which means we aren't going to be able to figure out which version of browserplus is installed :(
yes, there appears to have been a marked decline in the number of reports starting after 2/23-2/24

only 16 crashes yesterday, and here is the overall trend over the last month.

date             #crash-count   signature

20100201-crashdata 414 std::string::compare.std::string.const
20100202-crashdata 344 std::string::compare.std::string.const
20100203-crashdata 359 std::string::compare.std::string.const
20100204-crashdata 366 std::string::compare.std::string.const
20100205-crashdata 239 std::string::compare.std::string.const
20100206-crashdata 165 std::string::compare.std::string.const
20100207-crashdata 246 std::string::compare.std::string.const
20100208-crashdata 371 std::string::compare.std::string.const
20100209-crashdata 337 std::string::compare.std::string.const
20100210-crashdata 421 std::string::compare.std::string.const
20100211-crashdata 331 std::string::compare.std::string.const
20100212-crashdata 275 std::string::compare.std::string.const
20100213-crashdata 145 std::string::compare.std::string.const
20100214-crashdata 197 std::string::compare.std::string.const
20100215-crashdata 340 std::string::compare.std::string.const
20100216-crashdata 337 std::string::compare.std::string.const
20100217-crashdata 340 std::string::compare.std::string.const
20100218-crashdata 362 std::string::compare.std::string.const
20100219-crashdata 276 std::string::compare.std::string.const
20100220-crashdata 178 std::string::compare.std::string.const
20100221-crashdata 260 std::string::compare.std::string.const
20100222-crashdata 393 std::string::compare.std::string.const
20100223-crashdata 363 std::string::compare.std::string.const
20100224-crashdata 227 std::string::compare.std::string.const
20100225-crashdata 96 std::string::compare.std::string.const
20100226-crashdata 40 std::string::compare.std::string.const
20100227-crashdata 32 std::string::compare.std::string.const
20100228-crashdata 43 std::string::compare.std::string.const
20100301-crashdata 50 std::string::compare.std::string.const
20100302-crashdata 35 std::string::compare.std::string.const
20100303-crashdata 34 std::string::compare.std::string.const
20100304-crashdata 32 std::string::compare.std::string.const
20100305-crashdata 20 std::string::compare.std::string.const
Assignee: nobody → lloyd
Status: NEW → RESOLVED
Closed: 14 years ago
Component: General → Extension Compatibility
QA Contact: general → extension.compatibility
Resolution: --- → WORKSFORME
Crash Signature: [@ std::string::compare(std::string const&) const ]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: