585660 - Crash after javascript remove Embed (flash or quicktime tested) element [@ UserCallWinProcCheckWow ]

Status: RESOLVED INCOMPLETE

(Core Graveyard :: Plug-ins, defect)

Description

[arcyqwerty]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8 ( .NET CLR 3.5.30729)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8 ( .NET CLR 3.5.30729)

Sample page at http://arcyqwerty.is-a-geek.com/flv
Firefox 3.6.8 flash plugin 10.1.53.64 crashes after using JS to load and remove a video

Reproducible: Always

Steps to Reproduce:
1. Load page
2. Click link which causes js to create embed element
3. Click close link which causes js to removeChild (embed) from page
4. Minimize firefox (crash)
Actual Results:  
Firefox crashes.

Expected Results:  
The video should have been removed from the page (functions as long as firefox does not lose focus)

Comment 1

[arcyqwerty]

Causes application hang instead of crash when tested on Windows Vista.

Comment 2

[Matthias Versen [:Matti]]

Please post a crash ID from about:crashes
https://developer.mozilla.org/en/How_to_get_a_stacktrace_for_a_bug_report

Comment 3

[arcyqwerty]

bp-794f4be9-67be-4e2b-8d8d-60c712100810

Comment 4

[Matthias Versen [:Matti]]

0  	 	@0x6bbc2300  	
1 	user32.dll 	UserCallWinProcCheckWow 	
2 	user32.dll 	DispatchClientMessage 	
3 	user32.dll 	__fnDWORD 	
4 	ntdll.dll 	KiUserCallbackDispatcher 	
5 	user32.dll 	TestWindowProcess 	
6 	user32.dll 	NtUserPeekMessage 	
7 	xul.dll 	nsAppShell::ProcessNextNativeEvent 	widget/src/windows/nsAppShell.cpp:172
8 	xul.dll 	nsBaseAppShell::OnProcessNextEvent 	widget/src/xpwidgets/nsBaseAppShell.cpp:311
9 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:508
10 	xul.dll 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:142
11 	xul.dll 	xul.dll@0x9a940f 	
12 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:199
13 	mozcrt19.dll 	malloc 	obj-firefox/memory/jemalloc/crtsrc/jemalloc.c:5790

Comment 5

[Matthias Versen [:Matti]]

Note: http://arcyqwerty.is-a-geek.com/flv displays a "Plugin needed" and I can't reproduce the crash with FF4.0b2 on win32. IS your testcase broken ?

Comment 6

[arcyqwerty]

I am using FF 3.6.8
I believe it may be trying to play through the VLC plugin?

Comment 7

[timeless]

pa5hook.dll	5.0.0.0	7971C2B8B23A4725A99EA64504850B691	hook.pdb
NPSWF32.dll	10.1.53.64	547FB6F990234E7FAABA5DE4C9F5BB911	NPSWF32.pdb
LMIRfsClientNP.dll	2.1.3.0	D85AA5A919D84A6D8301728CBC2B8B7A1	LMIRfsClientNP.pdb
libxml_plugin.dll			
libqt4_plugin.dll			
AcSignIcon.dll	17.2.56.0	8BF0E2FC68BC49449B5562181DD222881	AcSignIcon.pdb
libvout_sdl_plugin.dll			
npvlc.dll	1.1.2.0		
libvlc.dll			
libvlccore.dll	1.1.0.0		
Syncor11.dll	0.1.2.3		SynCor11.dll
pa5wtrak.dll	5.0.30.0		

This looks like vlc didn't unhook itself.

Josh: do we have a bit for "don't unload broken libraries"?

Comment 8

[RNicoletto]

Linked testcase is WFM.

Mozilla/5.0 (Windows; U; Windows NT 6.1; it; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8

Comment 9

[Hermann Schwab]

bp-04c5dff7-9619-4612-a78f-96c632100911

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.19pre) Gecko/2010062205 GranParadiso/3.0.19pre

Plugins:

Shockwave Flash 10.1 r82
application/x-shockwave-flash 	Adobe Flash movie 	swf 	Yes

npvlc.dll Version 1.1.4
video/flv 	FLV video 	flv 	Yes
video/x-flv 	FLV video 	flv 	Yes

Page Info gives URL of testcase:
http://arcyqwerty.is-a-geek.com/flv/sample.flv

so maybe it's a VLC problem.

I loaded the testcase in this bugs tab, started it 3 times, letz it run until the image had loaded, and the testtone was gone, then closed it. After the 3rd test I used the Back Button to return to the bug, and crashed.

I'll retest using branch & trunk nightlies.

Comment 10

[Wayne Mery (:wsmwk)]

testcase appears to be gone. website times out