Closed Bug 556643 Opened 16 years ago Closed 10 years ago

[OOPP] NS_RUNTIMEABORT("Corrupted plugin stream data.") crash in mozilla::plugins::PluginModuleParent::StreamCast

Categories

(Core Graveyard :: Plug-ins, defect, P3)

x86
Windows XP
defect

Tracking

(blocking1.9.2 -, status1.9.2 wanted)

RESOLVED INCOMPLETE
Tracking Status
blocking1.9.2 --- -
status1.9.2 --- wanted

People

(Reporter: marcia, Unassigned)

References

Details

(Keywords: crash)

Crash Data

Seen while reviewing trunk crash stats. http://tinyurl.com/yzfp9le is a link to the crashes which started around 3/18/10 and have continued up to today's nightly build. Currently ranks as the #20 crash on the trunk. Frame Module Signature [Expand] Source 0 xul.dll Abort xpcom/base/nsDebugImpl.cpp:376 1 @0xb17c98f 2 xul.dll mozilla::plugins::PluginModuleParent::StreamCast dom/plugins/PluginModuleParent.cpp:587 3 xul.dll mozilla::plugins::PluginModuleParent::NPP_WriteReady dom/plugins/PluginModuleParent.cpp:436 4 xul.dll nsNPAPIPluginStreamListener::OnDataAvailable modules/plugin/base/src/nsNPAPIPluginInstance.cpp:622 5 xul.dll nsPluginStreamListenerPeer::OnDataAvailable modules/plugin/base/src/nsPluginHost.cpp:1191 Many of the crash urls seem to be polish sites, such as https://wsiz.wroclaw.net.pl and and http://technologie.gazeta.pl/internet/1,104530,7725611,Jak_Google_chce_nas_dzisiaj_wkrecic.html
Summary: Crash in [@ mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*) ] → Null dereference crash in [@ mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*) ]
Summary: Null dereference crash in [@ mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*) ] → NS_RUNTIMEABORT("Corrupted plugin stream data.") crash in [@ mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*) ]
Blocks: OOPP
Summary: NS_RUNTIMEABORT("Corrupted plugin stream data.") crash in [@ mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*) ] → [OOPP] NS_RUNTIMEABORT("Corrupted plugin stream data.") crash in [@ mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*) ]
looks like its trunk and 3.6.3plugin1 and mostly windows 7 checking --- mozilla::plugins::PluginModuleParent::StreamCast 20100411-crashdata.csv found in: 3.7a4 3.6.3plugin1 3.7a4pre release total-crashes mozilla::plugins::PluginModuleParent::StreamCast crashes pct. all 309235 11 3.55717e-05 3.7a4 179 6 0.0335196 3.6.3plugin1 1304 4 0.00306748 3.7a4pre 100 1 0.01 os breakdown mozilla::plugins::PluginModuleParent::StreamCastTotal 11 Win5.1 0.09 Win6.0 0.09 Win6.1 0.82 might be a good one to at least understand better before OOPP beta. more test urls 2 http://www.bild.de/556643 1 http://www.yopi.de/rev/77765556643 1 http://www.watchanimeon.com/dragon-ball-kai-episode-52/556643 1 http://www.velmedia.net/directpop.php?id=1556643 1 http://www.nvidia.de/556643 1 http://www.moviepilot.de/movies/die-legende-von-beowulf556643 1 http://www.gogoanime.com/one-piece-446-one-piece-episode-446556643
blocking1.9.2: --- → ?
Any update since the 12th? This wasn't on bsmedberg's list of blockers, so just wondering if it's fallen off or not.
still low volume. so probably not a blocker. for some strange reason seems to affect a user or users on the trunk more than the 3.6.4 beta with 100k+ users. checking --- mozilla::plugins::PluginModuleParent::StreamCast 20100420-crashdata.csv found in: 3.7a5pre 3.6.4 release total-crashes mozilla::plugins::PluginModuleParent::StreamCast crashes pct. all 339993 22 6.47072e-05 3.7a5pre 1285 13 0.0101167 3.6.4 12392 9 0.000726275 we should keep an eye on this to see if it pops up more after the throttle adjustment.
blocking1.9.2: ? → -
I believe this is also a manifestation of the problem in bug 536020.
appears to still be around after the fix for bug 536920, and might be the top ranked 3.6.4 regression. #33 ranked non-flash, non-hang crash with 44 crashes yesterday. http://people.mozilla.com/~chofmann/crash-stats/20100614/topcrash364-20100527.html bestbuy and xbox seem to be top sites where people are hitting this. 6 http://www.bestbuy.com/ 2 http://bestbuy.com/ 2 http://www.xbox.com/en-gb/e3#tab1 2 http://www.xbox.com/en-GB/e3/#tab1 2 http://www.xbox.com/en-GB/e3#tab1 1 http://www.xbox.com/en-GB/e3#gotonext 1 http://www.xbox.com/de-de/e3/#tab1
Crash Signature: [@ mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*) ]
Blocks: 646839
Crash Signature: [@ mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*) ] → [@ mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*) ] [@ mozalloc_abort(char const* const) | NS_DebugBreak_P | mozilla::plugins::PluginModuleParent::StreamCast(_NPP* _NPStream*)] [@ mozalloc_abort(char const* const) | _RTC_Terminate |…
Crash Signature: [@ mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*) ] [@ mozalloc_abort(char const* const) | NS_DebugBreak_P | mozilla::plugins::PluginModuleParent::StreamCast(_NPP* _NPStream*)] [@ mozalloc_abort(char const* const) | _RTC_Terminate |… → [@ mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*)] [@ mozalloc_abort(char const* const) | NS_DebugBreak_P | mozilla::plugins::PluginModuleParent::StreamCast(_NPP* _NPStream*)] [@ mozalloc_abort(char const* const) | _RTC_Terminate | …
Summary: [OOPP] NS_RUNTIMEABORT("Corrupted plugin stream data.") crash in [@ mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*) ] → [OOPP] NS_RUNTIMEABORT("Corrupted plugin stream data.") crash in mozilla::plugins::PluginModuleParent::StreamCast
No longer blocks: 646839
Depends on: 646839
Crash Signature: _NPStream*)] [@ mozalloc_abort(char const* const) | NS_DebugBreak_P | nsRefPtr<nsHttpHandler>::nsRefPtr<nsHttpHandler>(nsHttpHandler*) | mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*)] → _NPStream*)] [@ mozalloc_abort(char const* const) | NS_DebugBreak_P | nsRefPtr<nsHttpHandler>::nsRefPtr<nsHttpHandler>(nsHttpHandler*) | mozilla::plugins::PluginModuleParent::StreamCast(_NPP* _NPStream*)] [@ mozalloc_abort(char const* const) | NS_DebugB…
Hardware: x86 → All
Crash Signature: unsigned int)] [@ mozalloc_abort(char const* const) | NS_DebugBreak_P | nsRefPtr<nsHttpHandler>::nsRefPtr<nsHttpHandler>(nsHttpHandler*) | mozilla::plugins::PluginModuleParent::NPP_WriteReady(_NPP*, _NPStream*)] → unsigned int)] [@ mozalloc_abort(char const* const) | NS_DebugBreak_P | nsRefPtr<nsHttpHandler>::nsRefPtr<nsHttpHandler>(nsHttpHandler*) | mozilla::plugins::PluginModuleParent::NPP_WriteReady(_NPP* _NPStream*)] [@ mozalloc_abort(char const* const) | NS_…
Depends on: 802355
Crash Signature: _NPStream*)] [@ mozalloc_abort(char const* const) | NS_DebugBreak_P | nsCOMPtr<nsISecurityEventSink>::nsCOMPtr<nsISecurityEventSink>(nsISecurityEventSink*) | mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*)] → _NPStream*)] [@ mozalloc_abort(char const* const) | NS_DebugBreak_P | nsCOMPtr<nsISecurityEventSink>::nsCOMPtr<nsISecurityEventSink>(nsISecurityEventSink*) | mozilla::plugins::PluginModuleParent::StreamCast(_NPP* _NPStream*)] [@ mozalloc_abort(char cons…
Depends on: 822040
It's #2 top browser crasher on SeaMonkey 2.16 with 60 kADU while only #313 in Firefox 19.0.
OS: Windows 7 → Windows XP
Hardware: All → x86
Priority: -- → P3
Crash Signature: , _NPStream*)] [@ mozalloc_abort(char const* const) | NS_DebugBreak_P | nsRefPtr<nsSVGSetElement>::nsRefPtr<nsSVGSetElement>(nsSVGSetElement*) | mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*)] → , _NPStream*)] [@ mozalloc_abort(char const* const) | NS_DebugBreak_P | nsRefPtr<nsSVGSetElement>::nsRefPtr<nsSVGSetElement>(nsSVGSetElement*) | mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*)] [@ mozalloc_abort(char const* const) | …
Crash Signature: , _NPStream*)] [@ mozalloc_abort(char const* const) | NS_DebugBreak | mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*) ] → , _NPStream*)] [@ mozalloc_abort(char const* const) | NS_DebugBreak | mozilla::plugins::PluginModuleParent::StreamCast(_NPP*, _NPStream*) ] [@ mozilla::plugins::PluginModuleParent::StreamCast] [@ mozalloc_abort | NS_DebugBreak_P | mozilla::plugins::Plu…
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → INCOMPLETE
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.