574533 - Crash [@ msvcr80d.dll@0x3b10c][@ QuickTime Plugin@0x1ecd0]

Status: RESOLVED DUPLICATE of bug 575836

(Core Graveyard :: Plug-ins, defect)

Description

[Bob Clary [:bc] (inactive)]

Attachment: windows crash report

1. load <http://itunes.apple.com/WebObjects/MZStore.woa/wa/viewPodcast?id=363625540>
2. crash.

1.9.2, 1.9.3 winxp, vista, mac 10.5 ppc (but not mac 10.5 intel I think) quicktime 7.6.6

Example crash report
Operating system: Windows NT
                  6.0.6002 Service Pack 2
CPU: x86
     AuthenticAMD family 15 model 33 stepping 2
     1 CPU

Crash reason:  EXCEPTION_ACCESS_VIOLATION
Crash address: 0xffffffffcdcdcdcd

Thread 0 (crashed)
 0  msvcr80d.dll + 0x3b10c
    eip = 0x7295b10c   esp = 0x0012e3f4   ebp = 0x0012e3fc   ebx = 0x00000001
    esi = 0x00bd6018   edi = 0x00000000   eax = 0xcdcdcdcd   ecx = 0xcdcdcdcd
    edx = 0xcdcdcdcd   efl = 0x00010202

Uninitialized heap is bad, and a crash address determined by unitialized memory is worse, mmmkay?

I also see the assertion:

ASSERTION: attribute/parameter array not setup correctly for NPAPI plugins: '!values[count]'

in modules/plugin/base/src/nsNPAPIPluginInstance.cpp mac ppc for 1.9.1, 1.9.2.

Do we have Apple Quicktime contacts?

Comment 1

[Bob Clary [:bc] (inactive)]

Attachment: mac ppc crash report

Comment 2

[Bob Clary [:bc] (inactive)]

jst, the more I think about it the more I wonder if this isn't a bug in Core:Plugins rather than Plugins:Quicktime. What do you think?

Comment 3

[Bob Clary [:bc] (inactive)]

Other locations:

http://itunes.apple.com/podcast/der-gameone-plauschangriff/id344185870
http://itunes.apple.com/album/full-focus-single/id377435979?o=a
http://itunes.apple.com/fr/album/my-destination-the-remixes/id342682563?uo=4%2526partnerId=2003%2526tduid=deezer
http://itunes.apple.com/us/album/mundial-deluxe-version/id364755540
http://itunes.apple.com/us/album/uomini-single-feat-fiordaliso/id373278419
http://itunes.apple.com/us/artist/blake-shelton/id189204?ign-mpt=uo%25253D4

Comment 4

[Robert Sayre]

jst says this should be assigned to josh, because we recently fixed a bunch of similar issues.

Comment 5

[Daniel Veditz [:dveditz]]

... and want it back-ported to the 1.9.2 branch.

Comment 6

[Johnny Stenback (:jst)]

Josh, can you have a look here? Might be fixed by your previous fixes to the plugin code.

Comment 7

[Bob Clary [:bc] (inactive)]

I think this was fixed by bug 575836.

Comment 8

[Josh Aas]

Using today's mozilla-central nightly build I could not reproduce this on Mac OS X 10.6 or 64-bit Windows 7 (32-bit build). I backed out the patch for bug 575836 and I was able to reproduce on Mac OS X.

Resolving this as a duplicate of bug 575836, will see if we need to backport the patch there.