563341 - Firefox Crash [@ nssutil3.dll@0x43 ]

Status: RESOLVED FIXED

Description

[chris hofmann]

currently the #15 top non-flash non-hang crash on 3.6.4 beta, but it looks like it might be a flash problem, maybe similar to Bug 558860

http://crash-stats.mozilla.com/report/index/07837214-97f9-4ee3-a89a-8dd6d2100502

Frame  	Module  	Signature [Expand]  	Source
0 	nssutil3.dll 	nssutil3.dll@0x43 	
1 	NPSWF32.dll 	NPSWF32.dll@0xab0ab 	
2 	NPSWF32.dll 	NPSWF32.dll@0xed421 	
3 	NPSWF32.dll 	NPSWF32.dll@0x1392a6 	
4 	NPSWF32.dll 	NPSWF32.dll@0x139836 	
5 	xul.dll 	mozilla::plugins::PluginModuleChild::NPP_Destroy 	dom/plugins/PluginModuleChild.h:290
6 	xul.dll 	mozilla::plugins::PluginInstanceChild::AnswerNPP_Destroy 	dom/plugins/PluginInstanceChild.cpp:1640
7 	xul.dll 	mozilla::plugins::PPluginInstanceChild::OnCallReceived 	obj-firefox/ipc/ipdl/PPluginInstanceChild.cpp:1259
8 	xul.dll 	mozilla::plugins::PPluginModuleChild::OnCallReceived 	obj-firefox/ipc/ipdl/PPluginModuleChild.cpp:380
9 	xul.dll 	mozilla::ipc::RPCChannel::DispatchIncall 	ipc/glue/RPCChannel.cpp:485
10 	xul.dll 	mozilla::ipc::RPCChannel::Incall 	ipc/glue/RPCChannel.cpp:471
11 	xul.dll 	mozilla::ipc::RPCChannel::OnMaybeDequeueOne 	ipc/glue/RPCChannel.cpp:413
12 	xul.dll 	MessageLoop::RunTask 	ipc/chromium/src/base/message_loop.cc:336
13 	xul.dll 	MessageLoop::DeferOrRunPendingTask 	ipc/chromium/src/base/message_loop.cc:344
14 	xul.dll 	MessageLoop::DoWork 	ipc/chromium/src/base/message_loop.cc:444
15 	xul.dll 	base::MessagePumpForUI::DoRunLoop 	ipc/chromium/src/base/message_pump_win.cc:209
16 	xul.dll 	base::MessagePumpWin::RunWithDispatcher 	ipc/chromium/src/base/message_pump_win.cc:52
17 	xul.dll 	base::MessagePumpWin::Run 	ipc/chromium/src/base/message_pump_win.h:78
18 	xul.dll 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:216
19 	xul.dll 	MessageLoop::RunHandler 	
20 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:173
21 	xul.dll 	base::Thread::ThreadMain 	ipc/chromium/src/base/thread.cc:165
22 	xul.dll 	`anonymous namespace'::ThreadFunc 	ipc/chromium/src/base/platform_thread_win.cc:26
23 	kernel32.dll 	BaseThreadStart

more reports at 
http://crash-stats.mozilla.com/report/list?version=Firefox%3A3.6.4&signature=nssutil3.dll@0x43


checking --- nssutil3.dll@0x43 20100502-crashdata.csv
found in: 3.6.3 3.6.4 3.5.9 3.6
release total-crashes
              nssutil3.dll@0x43 crashes
                         pct.
all     364268  86      0.00023609
3.6.3   255580  58      0.000226935
3.6.4   15611   19      0.00121709
3.5.9   34026   6       0.000176336
3.6     14089   3       0.000212932

os breakdown
nssutil3.dll@0x43Total 86
Win5.1  0.99
Win6.0  0.00
Win6.1  0.01

flash versions around at time of crash
  47 10.0.45.2
  25 10.0.32.18
  12 10.0.42.34
   1 10.0.22.87
   1 10.0.12.36

Comment 1

[Steven Johnson]

This looks suspiciously like a bug that was fixed in 10.1 a month or so ago -- I'll try to dig up the bugzilla but I strongly suspect this is now fixed.

Comment 2

[Steven Johnson]

See https://bugzilla.mozilla.org/show_bug.cgi?id=558860 -- the crashing callstack that goes from NPP_Destroy, into NPSWF32.DLL, and back into Firefox, is almost certainly the same bug (already fixed in 10.1)

Comment 3

[chris hofmann]

I looked back through all the crash reports matching this signature and flash 10.1.

This was the only report

http://crash-stats.mozilla.com/report/index/96c4f414-99a1-4eaa83a5-b48fd2100420	
nssutil3.dll@0x43	
http://sportversenyek.hu/sporthirek/megkezdodott-a-kuzdelem-a-divizio-i-es-jegkorong-vilagbajnoksag-a-csoportjaban/21361/	
Firefox	3.6.3 5.1.2600
hg:hg.mozilla.org/releases/mozilla-1.9.2:nsprpub/pr/src/misc/prdtoa.c:28ef231a65a3
Flash 10.1.53.7

Comment 4

[Steven Johnson]

The fix was present as of build 10,1,53,28 -- if we see crashes after this version then we should reopen

Comment 5

[Charles]

I'll follow up with our next refresh to let you guys know when that fix it out in the wild.

Comment 6

[Charles]

The fix is in the wild at this point.  Chris do you have data to confirm no crashes on or after build 10.1.53.38?

Comment 7

[chris hofmann]

for all of may here is the breakdown on this signature.

1275 10.0.45.2
 192 10.0.42.34
 185 10.0.32.18
  72 10.0.22.87
  48 10.0.12.36
  21 10.0.2.54
   3 [blank]
   2 10.0.1.218
   1 10.0.12.10

no crashes on any 10.1.x version.

Comment 8

[chris hofmann]

and in april we only had one 10.1 crash, that being on 10.1.53.7

 611 10.0.45.2
 364 
 322 \N
 128 10.0.42.34
 105 10.0.32.18
  38 10.0.22.87
  19 10.0.12.36
   6 10.0.2.54
   1 10.1.53.7
   1 10.0.1.218

Comment 9

[Charles]

looks good.  I'll close.