Closed Bug 548543 Opened 15 years ago Closed 15 years ago

Crash [@ ~nsPluginStreamListenerPeer (this=0x7fffc7f7bba0, __in_chrg=<value optimized out>)]

Categories

(Core Graveyard :: Plug-ins, defect)

Product:
Core Graveyard
Component:
Plug-ins
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 549112

People

(Reporter: hidenosuke, Unassigned)

References

(
URL
)

Details

Steps to reproduce: 1. Open http://www.47news.jp/CN/201002/CN2010022501000928.html 2. Back to the previous page Actual result: Firefox crashes. Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.3a2pre) Gecko/20100225 Minefield/3.7a2pre Flash plugin 10.0 r45. Stack trace is here: #0 0x00007ffff6bda263 in ~nsPluginStreamListenerPeer (this=0x7fffc7f7bba0, __in_chrg=<value optimized out>) at /home/hideo/develop/mozilla-central/modules/plugin/base/src/nsPluginHost.cpp:693 #1 0x00007ffff6bd2332 in nsPluginStreamListenerPeer::Release ( this=0x7fffc7f7bba0) at /home/hideo/develop/mozilla-central/modules/plugin/base/src/nsPluginHost.cpp:711 #2 0x00007ffff6ebcc16 in nsSupportsArray::Clear (this=0x7fffc838ae10) at /home/hideo/develop/mozilla-central/xpcom/ds/nsSupportsArray.cpp:541 #3 0x00007ffff6ebd64b in nsSupportsArray::DeleteArray (this=0x7fffc83756c0) at /home/hideo/develop/mozilla-central/xpcom/ds/nsSupportsArray.cpp:288 #4 0x00007ffff6ebdc7a in nsSupportsArray::Release (this=0x7fffc838ae10) at /home/hideo/develop/mozilla-central/xpcom/ds/nsSupportsArray.cpp:219 #5 0x00007ffff6be7fe6 in ~nsPluginInstanceTag (this=0x7fffc837af40, __in_chrg=<value optimized out>) at /home/hideo/develop/mozilla-central/modules/plugin/base/src/nsPluginTags.cpp:598 #6 0x00007ffff6be28a1 in nsAutoPtr<nsPluginInstanceTag>::~nsAutoPtr() () from ./libxul.so #7 0x00007ffff6be28fc in nsTArray<nsAutoPtr<nsPluginInstanceTag> >::DestructRange(unsigned int, unsigned int) () from ./libxul.so #8 0x00007ffff6be2971 in nsTArray<nsAutoPtr<nsPluginInstanceTag> >::RemoveElementsAt(unsigned int, unsigned int) () from ./libxul.so #9 0x00007ffff6be2a0f in int nsTArray<nsAutoPtr<nsPluginInstanceTag> >::RemoveElement<nsPluginInstanceTag*, nsDefaultComparator<nsAutoPtr<nsPluginInstanceTag>, nsPluginInstanceTag*> >(nsPluginInstanceTag* const&, nsDefaultComparator<nsAutoPtr<nsPluginInstanceTag>, nsPluginInstanceTag*> const&) () from ./libxul.so #10 0x00007ffff6be2a2e in int nsTArray<nsAutoPtr<nsPluginInstanceTag> >::RemoveElement<nsPluginInstanceTag*>(nsPluginInstanceTag* const&) () from ./libxul.so #11 0x00007ffff6bd9437 in nsPluginHost::StopPluginInstance ( this=0x7fffcc90ca80, aInstance=<value optimized out>) at /home/hideo/develop/mozilla-central/modules/plugin/base/src/nsPluginHost.cpp:4375 #12 0x00007ffff62faae3 in DoStopPlugin (aInstanceOwner=0x7fffc8375300, aDelayedStop=0) at /home/hideo/develop/mozilla-central/layout/generic/nsObjectFrame.cpp:2186 #13 0x00007ffff62fac5d in nsObjectFrame::StopPluginInternal ( this=0x7fffc7fad4d8, aDelayedStop=0) at /home/hideo/develop/mozilla-central/layout/generic/nsObjectFrame.cpp:2298 #14 0x00007ffff626acbb in FreezeElement (aContent=<value optimized out>) at /home/hideo/develop/mozilla-central/layout/base/nsPresShell.cpp:6988 #15 0x00007ffff649c9a2 in EnumerateFreezables (aEntry=<value optimized out>, aData=0x7fffffffc860) at /home/hideo/develop/mozilla-central/content/base/src/nsDocument.cpp:7719 #16 0x00007ffff6e98ef2 in PL_DHashTableEnumerate (table=0x7fffc7f86190, etor=<value optimized out>, arg=<value optimized out>) at pldhash.c:754 #17 0x00007ffff64bb583 in nsTHashtable<nsPtrHashKey<nsIContent> >::EnumerateEntries (this=0x7fffc7f86190, enumFunc=0x7ffff649c990 <EnumerateFreezables>, userArg=0x7fffffffc860) at ../../../dist/include/nsTHashtable.h:241 #18 0x00007ffff649f770 in nsIDocument::EnumerateFreezableElements ( this=<value optimized out>, aEnumerator=0x7ffff626ac90 <FreezeElement>, aData=0x0) at /home/hideo/develop/mozilla-central/content/base/src/nsDocument.cpp:7730 #19 0x00007ffff626f417 in PresShell::Freeze (this=0x7fffccdd1800) at /home/hideo/develop/mozilla-central/layout/base/nsPresShell.cpp:7007 #20 0x00007ffff6245f95 in DocumentViewerImpl::Destroy (this=0x7fffcc946740) at /home/hideo/develop/mozilla-central/layout/base/nsDocumentViewer.cpp:1502 #21 0x00007ffff624803c in DocumentViewerImpl::Show (this=0x7fffc9d78180) at /home/hideo/develop/mozilla-central/layout/base/nsDocumentViewer.cpp:1898 #22 0x00007ffff6262ca4 in nsPresContext::EnsureVisible (this=0x7fffc7eeac00) at /home/hideo/develop/mozilla-central/layout/base/nsPresContext.cpp:1619 #23 0x00007ffff6275f09 in PresShell::UnsuppressAndInvalidate ( this=0x7fffc7eeb800) at /home/hideo/develop/mozilla-central/layout/base/nsPresShell.cpp:4517 #24 0x00007ffff62760c8 in PresShell::UnsuppressPainting (this=0x7fffc7eeb800) at /home/hideo/develop/mozilla-central/layout/base/nsPresShell.cpp:4566 #25 0x00007ffff62477f4 in DocumentViewerImpl::LoadComplete ( this=0x7fffc9d78180, aStatus=<value optimized out>) at /home/hideo/develop/mozilla-central/layout/base/nsDocumentViewer.cpp:1069 #26 0x00007ffff6a7c416 in nsDocShell::EndPageLoad (this=0x7fffdf674c00, aProgress=<value optimized out>, aChannel=0x7fffc0708c50, aStatus=0) at /home/hideo/develop/mozilla-central/docshell/base/nsDocShell.cpp:5748 #27 0x00007ffff6a73e38 in nsDocShell::OnStateChange (this=0x7fffdf674c00, aProgress=0x7fffdf674c28, aRequest=0x7fffc0708c50, aStateFlags=16, aStatus=<value optimized out>) at /home/hideo/develop/mozilla-central/docshell/base/nsDocShell.cpp:5626 #28 0x00007ffff6a96ffe in nsDocLoader::FireOnStateChange (this=0x7fffdf674c00, aProgress=<value optimized out>, aRequest=<value optimized out>, aStateFlags=131088, aStatus=<value optimized out>) at /home/hideo/develop/mozilla-central/uriloader/base/nsDocLoader.cpp:1314 #29 0x00007ffff6a978e2 in nsDocLoader::doStopDocumentLoad ( this=0x7fffdf674c00, request=0x7fffc0708c50, aStatus=0) at /home/hideo/develop/mozilla-central/uriloader/base/nsDocLoader.cpp:926 #30 0x00007ffff6a97a9d in nsDocLoader::DocLoaderIsEmpty (this=0x7fffdf674c00, aFlushLayout=<value optimized out>) at /home/hideo/develop/mozilla-central/uriloader/base/nsDocLoader.cpp:802 #31 0x00007ffff6a97f3a in nsDocLoader::OnStopRequest (this=0x7fffdf674c00, aRequest=0x7fffc7d4db40, aCtxt=<value optimized out>, aStatus=0) at /home/hideo/develop/mozilla-central/uriloader/base/nsDocLoader.cpp:697 #32 0x00007ffff60636b8 in nsLoadGroup::RemoveRequest (this=0x7fffdf65d030, request=0x7fffc7d4db40, ctxt=<value optimized out>, aStatus=0) at /home/hideo/develop/mozilla-central/netwerk/base/src/nsLoadGroup.cpp:680 #33 0x00007ffff649e625 in nsDocument::DoUnblockOnload ( this=<value optimized out>) at /home/hideo/develop/mozilla-central/content/base/src/nsDocument.cpp:7098 #34 0x00007ffff64aa46d in nsDocument::DispatchContentLoadedEvents ( this=0x7fffc033d800) at /home/hideo/develop/mozilla-central/content/base/src/nsDocument.cpp:4018 #35 0x00007ffff64b6e09 in nsRunnableMethod<nsDocument, void>::Run ( this=<value optimized out>) at ../../../dist/include/nsThreadUtils.h:282 #36 0x00007ffff6ef7ebe in nsThread::ProcessNextEvent (this=0x7fffe6e262c0, mayWait=0, result=<value optimized out>) at /home/hideo/develop/mozilla-central/xpcom/threads/nsThread.cpp:527 #37 0x00007ffff6ea2724 in NS_ProcessNextEvent_P (thread=0x7fffc83756c0, mayWait=1) at nsThreadUtils.cpp:250 #38 0x00007ffff6e243eb in mozilla::ipc::MessagePump::Run (this=0x7fffec4ff4c0, aDelegate=0x7fffe6e1d6a0) at /home/hideo/develop/mozilla-central/ipc/glue/MessagePump.cpp:118 #39 0x00007ffff6f55194 in MessageLoop::RunInternal (this=0x7fffe6e1d6a0) at /home/hideo/develop/mozilla-central/ipc/chromium/src/base/message_loop.cc:216 #40 0x00007ffff6f55224 in MessageLoop::Run (this=0x7fffe6e1d6a0) at /home/hideo/develop/mozilla-central/ipc/chromium/src/base/message_loop.cc:173 #41 0x00007ffff6d202a0 in nsBaseAppShell::Run (this=0x7fffe3a06710) at /home/hideo/develop/mozilla-central/widget/src/xpwidgets/nsBaseAppShell.cpp:174 #42 0x00007ffff6b28b06 in nsAppStartup::Run (this=0x7fffec4c3ba0) at /home/hideo/develop/mozilla-central/toolkit/components/startup/src/nsAppStartup.cpp:183 #43 0x00007ffff5f66154 in XRE_main (argc=<value optimized out>, argv=<value optimized out>, aAppData=<value optimized out>) at /home/hideo/develop/mozilla-central/toolkit/xre/nsAppRunner.cpp:3494 #44 0x0000000000401efd in main (argc=1, argv=0x7fffffffe0c8) at /home/hideo/develop/mozilla-central/browser/app/nsBrowserApp.cpp:158
Does this still crash if you set the "dom.ipc.plugins.enabled" preference to false?
(In reply to comment #1) > Does this still crash if you set the "dom.ipc.plugins.enabled" preference to > false? Yes, it does.
I cannot reproduce with today's build. Is this dup of bug 549112?
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → DUPLICATE
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.