551508 - Crash in [@ mozilla::ipc::RPCChannel::RPCListener::OnEnteredCxxStack() ]

Status: RESOLVED WORKSFORME

(Core Graveyard :: Plug-ins, defect)

Description

[Marcia Knous [:marcia]]

Seen while reviewing crash-stats. Currently the #3 top crash on trunk with a high concentration of crashes on Windows XP and a few on Win Vista.

The plugin version implicated: plugin  Version:  Filename: npqtplugin8.dll seems to be related to quicktime.

Frame  	Module  	Signature [Expand]  	Source
0 	xul.dll 	Abort 	xpcom/base/nsDebugImpl.cpp:376
1 		        @0x71548f 	
2 	xul.dll 	mozilla::ipc::RPCChannel::RPCListener::OnEnteredCxxStack 	obj-firefox/dist/include/mozilla/ipc/RPCChannel.h:74
3 	xul.dll 	mozilla::plugins::PluginScriptableObjectChild::AnswerHasProperty 	dom/plugins/PluginScriptableObjectChild.cpp:821
4 	xul.dll 	mozilla::plugins::PPluginScriptableObjectChild::OnCallReceived 	obj-firefox/ipc/ipdl/PPluginScriptableObjectChild.cpp:1209
5 	xul.dll 	mozilla::plugins::PPluginModuleChild::OnCallReceived 	obj-firefox/ipc/ipdl/PPluginModuleChild.cpp:460
6 	xul.dll 	mozilla::ipc::RPCChannel::DispatchIncall 	ipc/glue/RPCChannel.cpp:447
7 	xul.dll 	mozilla::ipc::RPCChannel::Incall 	ipc/glue/RPCChannel.cpp:432
8 	xul.dll 	mozilla::ipc::RPCChannel::OnMaybeDequeueOne 	ipc/glue/RPCChannel.cpp:364
9 	xul.dll 	MessageLoop::RunTask 	ipc/chromium/src/base/message_loop.cc:336
10 	xul.dll 	MessageLoop::DeferOrRunPendingTask 	ipc/chromium/src/base/message_loop.cc:344
11 	xul.dll 	MessageLoop::DoWork 	ipc/chromium/src/base/message_loop.cc:444
12 	xul.dll 	base::MessagePumpForUI::DoRunLoop 	ipc/chromium/src/base/message_pump_win.cc:209
13 	xul.dll 	base::MessagePumpWin::RunWithDispatcher 	ipc/chromium/src/base/message_pump_win.cc:52
14 	xul.dll 	base::MessagePumpWin::Run 	ipc/chromium/src/base/message_pump_win.h:78
15 	xul.dll 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:216
16 	xul.dll 	MessageLoop::RunHandler 	
17 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:173
18 	xul.dll 	base::Thread::ThreadMain 	ipc/chromium/src/base/thread.cc:165
19 	xul.dll 	`anonymous namespace'::ThreadFunc 	ipc/chromium/src/base/platform_thread_win.cc:26
20 	kernel32.dll 	BaseThreadStart

Comment 1

[Benjamin Smedberg]

This crash persists, although the stack is different from above. All of the crashes appear to be sending events to the plugin window, e.g. under PluginWindowHookProc. This makes me suspect that a plugin window is being sent windows events after the plugininstanceparent has been destroyed (and the hook is still installed).

http://crash-stats.mozilla.com/report/index/8d0bf628-fbc0-4d70-9d7f-edf1b2100316
0  	xul.dll  	mozilla::ipc::RPCChannel::EnteredCxxStack  	 obj-firefox/dist/include/mozilla/ipc/RPCChannel.h:207
1 	xul.dll 	mozilla::ipc::RPCChannel::CxxStackFrame::CxxStackFrame 	obj-firefox/dist/include/mozilla/ipc/RPCChannel.h:224
2 	xul.dll 	mozilla::ipc::RPCChannel::Call 	ipc/glue/RPCChannel.cpp:165
3 	xul.dll 	mozilla::plugins::PPluginInstanceParent::CallUpdateWindow 	obj-firefox/ipc/ipdl/PPluginInstanceParent.cpp:601
4 	xul.dll 	nsWindow::OnPaint 	
5 	xul.dll 	nsWindow::ProcessMessage 	widget/src/windows/nsWindow.cpp:4089
6 	xul.dll 	nsWindow::WindowProc 	widget/src/windows/nsWindow.cpp:3788
7 	user32.dll 	InternalCallWinProc 	
8 	user32.dll 	UserCallWinProcCheckWow 	
9 	user32.dll 	CallWindowProcAorW 	
10 	user32.dll 	CallWindowProcW 	
11 	xul.dll 	mozilla::plugins::PluginInstanceParent::PluginWindowHookProc 	dom/plugins/PluginInstanceParent.cpp:908
12 	user32.dll 	InternalCallWinProc

http://crash-stats.mozilla.com/report/index/f11ba1a2-2de6-41c5-ad6e-1296e2100316
0  	xul.dll  	mozilla::ipc::RPCChannel::EnteredCxxStack  	 obj-firefox/dist/include/mozilla/ipc/RPCChannel.h:207
1 	xul.dll 	mozilla::ipc::RPCChannel::CxxStackFrame::CxxStackFrame 	obj-firefox/dist/include/mozilla/ipc/RPCChannel.h:224
2 	xul.dll 	mozilla::ipc::RPCChannel::Call 	ipc/glue/RPCChannel.cpp:165
3 	xul.dll 	mozilla::plugins::PPluginInstanceParent::CallSetPluginFocus 	obj-firefox/ipc/ipdl/PPluginInstanceParent.cpp:571
4 	xul.dll 	mozilla::plugins::PluginInstanceParent::PluginWindowHookProc 	dom/plugins/PluginInstanceParent.cpp:899
5 	user32.dll 	InternalCallWinProc 	
6 	user32.dll 	UserCallWinProcCheckWow 	
7 	user32.dll 	CallWindowProcAorW 	
8 	user32.dll 	CallWindowProcW 	
9 	xul.dll 	PluginWndProc 	modules/plugin/base/src/nsPluginNativeWindowWin.cpp:369
10 	user32.dll 	InternalCallWinProc 	
11 	user32.dll 	UserCallWinProcCheckWow 	
12 	user32.dll 	DispatchClientMessage 	
13 	user32.dll 	__fnDWORD 	
14 	ntdll.dll 	KiUserCallbackDispatcher 	
15 	ntdll.dll 	KiUserApcDispatcher 	
16 	user32.dll 	PeekMessageW 	
17 	xul.dll 	nsBaseAppShell::OnProcessNextEvent 	widget/src/xpwidgets/nsBaseAppShell.cpp:293

Comment 2

[Sheila Mooney]

Only 4 of these crashes in the past 4 weeks. One on Firefox 8.0 and 1 on Firefox 7.0.1. Removing the top crash keyword.

Comment 3

[Scoobidiver (away)]

There have been no crashes for the last four weeks.