639519 - Accessing a WebEx meeting url crashes Firefox [@ OnLinkClickEvent::OnLinkClickEvent]

Status: RESOLVED INCOMPLETE

(Core Graveyard :: Plug-ins, defect)

Description

[George Carstoiu]

Mozilla/5.0 (X11; Linux i686; rv:2.0) Gecko/20100101 Firefox/4.0

When trying to access a WebEx meeting url, FF crashes. I am unable to attach a link to such a meeting because they automatically close when desktop session is closed.  

Reproducible: always

Crash reports:
bp-ef0b9864-0a93-4260-a0a1-65dc6211030703
bp-33f3acb0-d2a5-4cc0-8b7b-4d1eb211030703
bp-d01ff08d-354f-4c75-9faf-8d2812110307

Comment 1

[Boris Zbarsky [:bzbarsky]]

This is crashing with a null deref on this line:

  mPopupState = window->GetPopupControlState();

where right before that we have:

  nsCOMPtr<nsPIDOMWindow> window(do_QueryInterface(mHandler->mScriptGlobal));

The stack in general is:

0 	libxul.so 	OnLinkClickEvent::OnLinkClickEvent 	docshell/base/nsDocShell.cpp:11473
1 	libxul.so 	nsDocShell::OnLinkClick 	docshell/base/nsDocShell.cpp:11511
2 	libxul.so 	nsPluginInstanceOwner::GetURL 	layout/generic/nsObjectFrame.cpp:3419

How is plugin code managing to call OnLinkClick on a docshell that has no window inside it?

Comment 2

[juan becerra [:juanb]]

Nominating to get triage eyes on this.

Comment 3

[Benjamin Smedberg]

If this doesn't block on mac, it's not going to block on Linux either.

Comment 4

[Kev Needham [:kev]]

Notifying WebEx client team of this.

Comment 5

[Scoobidiver (away)]

It is #8 top crasher on Linux in 4.0.

Comment 6

[Sheila Mooney]

It's #96 on the Linux crash list for 8.0. Removing the top crash keyword.

Comment 7

[Benjamin Smedberg]

Resolving old bugs which are likely not relevant any more, since NPAPI plugins are deprecated.