556799 - Crash in [@ objc_msgSend | -[NSApplication(MethodSwizzling) nsAppShell_NSApplication_endModalSession:] ] with Flash 10.1 beta on stack

Status: RESOLVED INCOMPLETE

(External Software Affecting Firefox Graveyard :: Flash (Adobe), defect)

Description

[Marcia Knous [:marcia]]

Seen while running Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.3a4pre) Gecko/20100402 Minefield/3.7a4pre

STR:
1. I had enabled OOPP to true because I thought it landed.
2. Restart the browser. I had a bunch of tabs open.
3. There was one tab open where I was downloading a program. When the browser restarted the modal dialog appeared, and it seemed frozen. When I tried to cancel it the browser crashed in this stack: 

http://crash-stats.mozilla.com/report/index/bp-e9f4aed5-1ee9-4159-8465-2d6062100402

Comment 1

[Steven Michaud [:smichaud] (Retired)]

Can you reproduce this crash at will?  In other words, do these STR
work all the time?

> 1. I had enabled OOPP to true because I thought it landed.

How do you "enable OOPP"?

There've been a few of these crashes on the trunk and 1.9.2 branch
lately, so OOPP wasn't involved in all of them.  But the Flash 10.1
beta does appear in all these stacks, so there's a good chance it's at
fault here.

http://crash-stats.mozilla.com/report/list?product=Firefox&platform=mac&query_search=signature&query_type=contains&query=nsAppShell_NSApplication_endModalSession&date=&range_value=1&range_unit=weeks&process_type=all&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&signature=objc_msgSend%20|%20-[NSApplication%28MethodSwizzling%29%20nsAppShell_NSApplication_endModalSession%3A]

Comment 2

[Steven Michaud [:smichaud] (Retired)]

The link in comment #1 has the end cut off.

http://crash-stats.mozilla.com/query/query?product=ALL&version=ALL%3AALL&platform=mac&date=&range_value=1&range_unit=weeks&query_search=signature&query_type=contains&query=nsAppShell_NSApplication_endModalSession&build_id=&process_type=all&do_query=1

Comment 3

[Steven Michaud [:smichaud] (Retired)]

For those not in the know, OOPP means support for "out-of-process plugins".

Comment 4

[Marcia Knous [:marcia]]

dom.ipc.plugins.enabled - set to true is how you enable OOPP.

I actually have the debug version of Flash installed so I believe I got a dialog that mentioned an actionscript error but i could not copy it (or I tried to copy it and it failed).

Comment 5

[timeless]

Signature	objc_msgSend | -[NSApplication(MethodSwizzling) nsAppShell_NSApplication_endModalSession:]
UUID	e9f4aed5-1ee9-4159-8465-2d6062100402
Time 	2010-04-02 09:34:55.908093
Uptime	308
Last Crash	316 seconds before submission
Product	Firefox
Version	3.7a4pre
Build ID	20100402030755
Branch	1.9.3
OS	Mac OS X
OS Version	10.6.3 10D573
CPU	x86
CPU Info	GenuineIntel family 6 model 23 stepping 10
Crash Reason	EXC_BAD_ACCESS / KERN_PROTECTION_FAILURE
Crash Address	0x24
User Comments	Hang on the dialog box. Could not cancel and when I hit escape key I crashed.
Processor Notes 	
Related Bugs

Crashing Thread
Frame 	Module 	Signature [Expand] 	Source
0 	libobjc.A.dylib 	objc_msgSend 	
1 	XUL 	-[NSApplication nsAppShell_NSApplication_endModalSession:] 	widget/src/cocoa/nsAppShell.mm:1111
2 	AppKit 	-[NSApplication runModalForWindow:] 	
3 	FlashPlayerDebugger-10.6 	FlashPlayerDebugger-10.6@0x4d8cec 	
4 	FlashPlayerDebugger-10.6 	FlashPlayerDebugger-10.6@0x4a320c 	
5 	FlashPlayerDebugger-10.6 	FlashPlayerDebugger-10.6@0x1e17d0 	
6 	FlashPlayerDebugger-10.6 	FlashPlayerDebugger-10.6@0xcdb3b 	
7 	FlashPlayerDebugger-10.6 	FlashPlayerDebugger-10.6@0xc83e5 	
8 	FlashPlayerDebugger-10.6 	FlashPlayerDebugger-10.6@0xcb3af 	
9 	FlashPlayerDebugger-10.6 	FlashPlayerDebugger-10.6@0xd1ad0 	
10 	FlashPlayerDebugger-10.6 	FlashPlayerDebugger-10.6@0x1534d6 	
11 	FlashPlayerDebugger-10.6 	FlashPlayerDebugger-10.6@0x150227 	
12 	FlashPlayerDebugger-10.6 	FlashPlayerDebugger-10.6@0x1e3016 	
13 	FlashPlayerDebugger-10.6 	FlashPlayerDebugger-10.6@0x3715f8 	
14 	FlashPlayerDebugger-10.6 	FlashPlayerDebugger-10.6@0x371dc8 	
15 	FlashPlayerDebugger-10.6 	FlashPlayerDebugger-10.6@0x4b93c1 	
16 	CoreFoundation 	__CFRunLoopDoSources0 	
17 	CoreFoundation 	__CFRunLoopRun 	
18 	CoreFoundation 	CFRunLoopRunSpecific 	
19 	CoreFoundation 	CFRunLoopRunInMode 	
20 	HIToolbox 	RunCurrentEventLoopInMode 	
21 	HIToolbox 	ReceiveNextEventCommon 	
22 	HIToolbox 	BlockUntilNextEventMatchingListInMode 	
23 	AppKit 	_DPSNextEvent 	
24 	AppKit 	-[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] 	
25 	XUL 	nsAppShell::ProcessNextNativeEvent 	widget/src/cocoa/nsAppShell.mm:745
26 	XUL 	nsBaseAppShell::OnProcessNextEvent 	widget/src/xpwidgets/nsBaseAppShell.cpp:155
27 	XUL 	nsAppShell::OnProcessNextEvent 	widget/src/cocoa/nsAppShell.mm:950
28 	XUL 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:508
29 	XUL 	NS_ProcessNextEvent_P 	nsThreadUtils.cpp:250
30 	XUL 	nsThread::Shutdown 	xpcom/threads/nsThread.cpp:468
31 	XUL 	NS_InvokeByIndex_P 	xpcom/reflect/xptcall/src/md/unix/xptcinvoke_unixish_x86.cpp:179
32 	XUL 	nsProxyObjectCallInfo::Run 	xpcom/proxy/src/nsProxyEvent.cpp:181
33 	XUL 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:527
34 	XUL 	NS_ProcessNextEvent_P 	nsThreadUtils.cpp:250
35 	XUL 	nsThread::Shutdown 	xpcom/threads/nsThread.cpp:468
36 	XUL 	NS_InvokeByIndex_P 	xpcom/reflect/xptcall/src/md/unix/xptcinvoke_unixish_x86.cpp:179
37 	XUL 	nsProxyObjectCallInfo::Run 	xpcom/proxy/src/nsProxyEvent.cpp:181
38 	XUL 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:527
39 	XUL 	NS_ProcessNextEvent_P 	nsThreadUtils.cpp:250
40 	XUL 	nsThread::Shutdown 	xpcom/threads/nsThread.cpp:468
41 	XUL 	NS_InvokeByIndex_P 	xpcom/reflect/xptcall/src/md/unix/xptcinvoke_unixish_x86.cpp:179
42 	XUL 	nsProxyObjectCallInfo::Run 	xpcom/proxy/src/nsProxyEvent.cpp:181
43 	XUL 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:527
44 	XUL 	NS_ProcessPendingEvents_P 	nsThreadUtils.cpp:200
45 	XUL 	nsBaseAppShell::NativeEventCallback 	widget/src/xpwidgets/nsBaseAppShell.cpp:125
46 	XUL 	nsAppShell::ProcessGeckoEvents 	widget/src/cocoa/nsAppShell.mm:510
47 	CoreFoundation 	__CFRunLoopDoSources0 	

Filename 	Version 	Debug Identifier 	Debug Filename
Flash Player Debugger 		27473D3AF684B8CEE73663D2D0C58F7B0 	Flash Player Debugger
FlashPlayerDebugger-10.6 		892E1E8BD3FCF503B405C7A9C0EA14F20 	FlashPlayerDebugger-10.6

If someone feels this is our fault, please feel free to move this back to Core:Plug-ins, (however, please provide some minimal explanation so the rest of us can learn)

Comment 6

[Michelle Sintov]

We've made a number of fixes around dialogs brought up by the Flash Player when the browser is shutting down a tab, so please give Flash Player Release Candidate 4 a try: http://labs.adobe.com/downloads/flashplayer10.html#flashplayer10

Thanks for your help!

Comment 7

[Charles]

I am following up on this to get more information.  As Michelle mentioned about changes in the Flash Player we'd like to know if this is still seen as of any of our recent Release Candidates(10.1.53.55, 10.1.53.60 or 10.1.53.64)

Comment 8

[Benjamin Smedberg]

I'm closing a lot of bugs which are filed as Adobe Flash bugs which are either irrelevant, not actionable, or not serious enough to track in the Mozilla bug tracker. For the most part, Flash bugs should be filed in Adobe bugbase, and we'll only track a few highly-critical issues in the Mozilla tracker.

Comment 9

[BMO Automation]

Version and milestone values are being reset to defaults as part of product refactoring.