604564 - Crash on certain sites if NoScript (or, in some cases Greasemonkey) is installed [@ nsXPConnect::GetPrincipal(JSObject*, int) ]

Status: RESOLVED DUPLICATE of bug 604368

(Core :: XPConnect, defect)

Description

[IU]

Attachment: testcase: somewhat reduced (from http://money.cnn.com)

Crash on certain sites if NoScript (or, in some cases Greasemonkey) is installed. 

http://crash-stats.mozilla.com/report/index/bp-c43a5da2-b8e4-4a00-a9bc-faf1c2101014

Regression due to landing of bug 580128

Regression range: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=edb0506b0c23&tochange=9cb987478e60

STR:

1. Launch Minefield with a new profile
2. Install NoScript 2.0.3.3 and restart
3. Open NoScript options and enable "Script Globally Allowed (dangerous)"
4. Download and launch the attached testcase
5. Crash


Crashing Thread
Frame 	Module 	Signature [Expand] 	Source
0 	xul.dll 	nsXPConnect::GetPrincipal 	js/src/xpconnect/src/nsXPConnect.cpp:2442
1 	xul.dll 	xul.dll@0xbb65d3 	
2 	xul.dll 	xpc::CrossOriginAccessiblePropertiesOnly::check 	js/src/xpconnect/wrappers/AccessCheck.h:99
3 	xul.dll 	xpc::CheckAndReport<xpc::CrossOriginAccessiblePropertiesOnly> 	js/src/xpconnect/wrappers/FilteringWrapper.cpp:89
4 	xul.dll 	xpc::FilteringWrapper<JSCrossCompartmentWrapper,xpc::CrossOriginAccessiblePropertiesOnly>::enter 	js/src/xpconnect/wrappers/FilteringWrapper.cpp:149
5 	mozjs.dll 	JSWrapper::has 	js/src/jswrapper.cpp:192
6 	mozjs.dll 	JSCrossCompartmentWrapper::has 	js/src/jswrapper.cpp:462
7 	mozjs.dll 	js::JSProxy::has 	js/src/jsproxy.cpp:760
8 	mozjs.dll 	js::proxy_LookupProperty 	js/src/jsproxy.cpp:837
9 	mozjs.dll 	mozjs.dll@0x890bf 	
10 	mozjs.dll 	with_LookupProperty 	js/src/jsobj.cpp:3043
11 	mozjs.dll 	js_FindPropertyHelper 	js/src/jsobj.cpp:4794
12 	mozjs.dll 	js::Interpret 	js/src/jsinterp.cpp:4819
13 	mozjs.dll 	js::RunScript 	js/src/jsinterp.cpp:638
14 	mozjs.dll 	js::Execute 	js/src/jsinterp.cpp:998
15 	mozjs.dll 	JS_EvaluateUCScriptForPrincipals 	js/src/jsapi.cpp:4882
16 	xul.dll 	xpc_EvalInSandbox 	js/src/xpconnect/src/xpccomponents.cpp:3661
17 	xul.dll 	nsXPCComponents_Utils::EvalInSandbox 	js/src/xpconnect/src/xpccomponents.cpp:3551
18 	xul.dll 	NS_InvokeByIndex_P 	xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp:102
19 	xul.dll 	XPC_WN_CallMethod 	js/src/xpconnect/src/xpcwrappednativejsops.cpp:1631
20 	mozjs.dll 	js::Interpret 	js/src/jsinterp.cpp:4714
21 	mozjs.dll 	js::RunScript 	js/src/jsinterp.cpp:638
22 	mozjs.dll 	js::Invoke 	js/src/jsinterp.cpp:747
23 	mozjs.dll 	js_fun_call 	js/src/jsfun.cpp:2248
24 	mozjs.dll 	js::Interpret 	js/src/jsinterp.cpp:4714
25 	mozjs.dll 	js::RunScript 	js/src/jsinterp.cpp:638
26 	mozjs.dll 	js::Invoke 	js/src/jsinterp.cpp:747
27 	mozjs.dll 	js::ExternalInvoke 	js/src/jsinterp.cpp:871
28 	mozjs.dll 	JS_CallFunctionValue 	js/src/jsapi.cpp:4961
29 	xul.dll 	nsXPCWrappedJSClass::CallMethod 	js/src/xpconnect/src/xpcwrappedjsclass.cpp:1692
30 	xul.dll 	nsXPCWrappedJS::CallMethod 	js/src/xpconnect/src/xpcwrappedjs.cpp:571
31 	xul.dll 	PrepareAndDispatch 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:114
32 	xul.dll 	SharedStub 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:141
33 	xul.dll 	nsObserverList::NotifyObservers 	xpcom/ds/nsObserverList.cpp:130

Comment 1

[IU]

Attachment: Stack trace: for the attached testcase

Comment 2

[Josh Matthews [:jdm]]

Probably bug 604368?

Comment 3

[IU]

Sure looks like it.  Duping to it.  If it doesn't fix it, I can always reopen.

Thanks604368

Comment 4

[IU]

bug 604368 did not fix this crash.  Although bug 604368 is reopened, it has been reopened with respect to Greasemonkey; however, this crash is still reproducible with NoScript, and with a different stack than in bug 604368.

Comment 5

[Daniel Holbert [:dholbert]]

bug 604368 still crashes w.r.t. NoScript too.  Still a duplicate.