Closed Bug 72244 Opened 23 years ago Closed 23 years ago

Plugin crashes (Not being destroyed correctly?)

Categories

(Core Graveyard :: Plug-ins, defect, P2)

Product:
Core Graveyard
Component:
Plug-ins
Platform:
x86
Linux
Type:
defect

Tracking

(Not tracked)

Status:
VERIFIED FIXED
Milestone:
mozilla1.0

People

(Reporter: irathore, Assigned: serhunt)

References

Details

(Keywords: crash) 

I have compiled using gcc-2.96-69 (Realvideo plugin will not work without it).
But have seen similar behaviour with the binaries posted on the site. 

SYPMTOMS: 
1) Realplayer 8

Go to
http://www4.uncwil.edu/tc/real/plugin/vidframe01.htm
Wait for the plugin, click play button on the plugin. Click Next Lesson link,
wait for the plugin to appear again, click the play button CRRAASSHH
(I do see the realplay zombie if I do "ps ax")
 
Hitting reload on a page with embedded plugin does it too.

Go to www.thedj.com
play a song, you will notice that only first instance works correctly


2) Flash
Go to
http://www.eye4u.com
Click enter and go to the showroom, click on te Ford Motors link
pop-up will not have sound.

Hitting reload at a flash page crashes too.

3) OJI (Java)
Seems to work fine.
*** Bug 72247 has been marked as a duplicate of this bug. ***
*** Bug 72246 has been marked as a duplicate of this bug. ***
The version is Mozilla/5.0 (X11; U; Linux 2.4.0 i686; en-US; 0.8) Gecko/20010314

On linux 2.4.0

And sorry about multiple posts. Dont know what I did there

pressed "submit" button 3 times ;)
The problem still exists in Mozilla  0.8.1
 (Mozilla/5.0 (X11; U; Linux 2.4.2 i686; en-US; 0.8.1))

Compiled using gcc-2.96-79

Any site that creates and destroys the plugin cuases it. (www.westwood.com 
Games->NoX-> CRRRAAASSHH) here is the output of "ps -Awo pid,comm,ppid,wchan"

$ ps -Awo pid,comm,ppid,wchan
23290 bash              2448 read_chan
29997 run-mozilla.sh       1 wait4
30006 mozilla-bin      29997 end
30007 mozilla-bin      30006 do_poll
30008 mozilla-bin      30007 do_poll
30009 mozilla-bin      30007 rt_sigsuspend
30010 mozilla-bin      30007 rt_sigsuspend
30011 java_vm          30006 unix_stream_data_wait
30012 java_vm          30011 do_poll
30013 java_vm          30012 nanosleep
30014 java_vm          30012 rt_sigsuspend
30015 java_vm          30012 rt_sigsuspend
30016 java_vm          30012 nanosleep
30017 java_vm          30012 rt_sigsuspend
30018 java_vm          30012 rt_sigsuspend
30019 java_vm          30012 rt_sigsuspend
30020 java_vm          30012 rt_sigsuspend
30021 java_vm          30012 rt_sigsuspend
30022 java_vm          30012 rt_sigsuspend
30023 java_vm          30012 do_poll
30024 java_vm          30012 rt_sigsuspend
30025 java_vm          30012 nanosleep
30026 java_vm          30012 tcp_data_wait
30034 java_vm          30012 rt_sigsuspend
30150 ps               20269 -

Reporter do you have a stacktrace from the crash?
Severity: major → critical
Keywords: crash
I dont have a stack trace, but please stand by for one.
I am attaching the ps output and stack trace at different times the sequence is


Went to
http://www4.uncwil.edu/tc/real/plugin/vidframe01.htm
 and hit play (ps -ax output attached)

clicked on the "Next" link and the when the new plugin come I hit play again
(ps alx output and the stack trace of the parent thread attached), notice that
"realplay" went zombie at do_exit()



clicked on the back button on the bar, now the brower is also crashed, the stack
trace is pretty long and intresting (ps -alx output and stack trace attached)

The debug output of mozilla also logs the following

For audio/x-pn-realaudio-plugin found plugin /usr/local/mozilla/plugins/librpnp.so
created stream for http://www4.uncwil.edu/tc/real/plugin/empty.rpm
Inside ns4xPluginInstance::Start(void)...
Inside ns4xPluginInstance::SetWindow(0x8917bcc)...
About to create new ws_info...
About to create new xtbin of 175 X 30 from 0x8916d98...
About to show xtbin(0x8916a68)...
completed gtk_widget_show(0x8916a68)
About to call CallNPP_SetWindowProc()...
Falling out of ns4xPluginInstance::SetWindow()...
created stream for http://www4.uncwil.edu/tc/real/plugin/empty.rpm
InstantiateEmbededPlugin.. returning
Document http://www4.uncwil.edu/tc/real/plugin/demo02.htm loaded successfully
killing stream for http://www4.uncwil.edu/tc/real/plugin/demo02.rpm
killing stream for http://www4.uncwil.edu/tc/real/plugin/demo02.rpm
killing stream for http://www4.uncwil.edu/tc/real/plugin/empty.rpm
killing stream for http://www4.uncwil.edu/tc/real/plugin/empty.rpm
/tc/real/plugin/demo02.htm
/tc/real/plugin/vidframe02.htm
Inside ns4xPluginInstance::SetWindow((nil))...
ns4xPluginInstance::Stop()



The output from the DEBUG TRACE



Pluggin playing

  PID TTY      STAT   TIME COMMAND
 1413 pts/2    S      0:00 /bin/sh /usr/local/mozilla/run-mozilla.sh
/usr/local/mozilla/mozilla-bi 1422 pts/2    S      0:15
/usr/local/mozilla/mozilla-bin
 1423 pts/2    S      0:00 /usr/local/mozilla/mozilla-bin
 1424 pts/2    S      0:00 /usr/local/mozilla/mozilla-bin
 1425 pts/2    S      0:00 /usr/local/mozilla/mozilla-bin
 1426 pts/2    S      0:00 /usr/local/mozilla/mozilla-bin
 1429 pts/4    S      0:00 bash -i
 1440 pts/2    S      0:00 realplay helper 25 24
 1441 pts/2    S      0:00 realplay helper 25 24
 1442 pts/2    S      0:00 realplay helper 25 24
 1443 pts/2    S      0:00 realplay helper 25 24
 1444 pts/2    S      0:00 realplay helper 25 24
 1445 pts/2    S      0:00 realplay helper 25 24
 1447 pts/2    S      0:00 realplay helper 25 24
 1448 pts/4    R      0:00 ps ax



Pluggin just crashed after hitting Next and then play

root@mawali plugins]# ps -alx
  F   UID   PID  PPID PRI  NI   VSZ  RSS WCHAN  STAT TTY        TIME COMMAND
000   500  1413  1182   9   0  1692  824 wait4  S    pts/2      0:00 /bin/sh
/usr/local/mozilla/ru000   500  1422  1413   9   0 40904 34512 do_pol S   pts/2
     0:16 /usr/local/mozilla/mozilla-bi040   500  1423  1422   9   0 40904 34512
do_pol S   pts/2      0:00 /usr/local/mozilla/mozilla-bi040   500  1424  1423  
9   0 40904 34512 do_pol S   pts/2      0:00 /usr/local/mozilla/mozilla-bi040  
500  1425  1423   9   0 40904 34512 rt_sig S   pts/2      0:00
/usr/local/mozilla/mozilla-bi040   500  1426  1423   9   0 40904 34512 rt_sig S
  pts/2      0:00 /usr/local/mozilla/mozilla-bi000     0  1429  1428  15   0 
1744  984 wait4  S    pts/4      0:00 bash -i
404   500  1440  1422   9   0     0    0 do_exi Z    pts/2      0:00 [realplay
<defunct>]
100     0  1458  1429  18   0  2772 1120 -      R    pts/4      0:00 ps -alx

[root@mawali plugins]# gdb /usr/local/mozilla/mozilla-bin 1422
GNU gdb 19991004
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux"...(no debugging symbols found)...


/usr/local/mozilla/plugins/1422: No such file or directory.
Attaching to program: /usr/local/mozilla/mozilla-bin, Pid 1422
0x403d2f50 in __poll (fds=0x88e7c10, nfds=4, timeout=9) at
../sysdeps/unix/sysv/linux/poll.c:45
45      ../sysdeps/unix/sysv/linux/poll.c: No such file or directory.
(gdb) bt
#0  0x403d2f50 in __poll (fds=0x88e7c10, nfds=4, timeout=9)
    at ../sysdeps/unix/sysv/linux/poll.c:45
#1  0x408eeb81 in g_main_poll () from /usr/lib/libglib-1.2.so.0
#2  0x408ee56e in g_main_iterate () from /usr/lib/libglib-1.2.so.0
#3  0x408ee8f1 in g_main_run () from /usr/lib/libglib-1.2.so.0
#4  0x408168e9 in gtk_main () from /usr/lib/libgtk-1.2.so.0
#5  0x40733da5 in nsAppShell::Run () from
/usr/local/mozilla/components/libwidget_gtk.so
#6  0x404e2855 in nsAppShellService::Run () from
/usr/local/mozilla/components/libnsappshell.so
#7  0x8053e6f in JS_PushArguments ()
#8  0x8054aef in JS_PushArguments ()
#9  0x4033f9cb in __libc_start_main (main=0x80548ec <JS_PushArguments+17736>,
argc=1,
    argv=0xbffffa0c, init=0x804ef84 <_init>, fini=0x805f4cc <_fini>,
    rtld_fini=0x4000ae60 <_dl_fini>, stack_end=0xbffffa04) at
../sysdeps/generic/libc-start.c:92
(gdb) q
The program is running.  Quit anyway (and detach it)? (y or n) y
Detaching from program: /usr/local/mozilla/mozilla-bin, Thread 1423

Hitting the back button Now the browser has crashed too

[root@mawali plugins]# ps -alx
  F   UID   PID  PPID PRI  NI   VSZ  RSS WCHAN  STAT TTY        TIME COMMAND
000   500  1413  1182   9   0  1692  824 wait4  S    pts/2      0:00 /bin/sh
/usr/local/mozilla/ru000     0  1429  1428  15   0  1756 1000 wait4  S    pts/4
     0:00 bash -i
404   500  1440  1422   9   0     0    0 do_exi Z    pts/2      0:00 [realplay
<defunct>]
000   500  1422  1413  20   0 40848 34568 -     R    pts/2      0:37
/usr/local/mozilla/mozilla-bi040   500  1424  1423   9   0 40848 34568 do_pol S
  pts/2      0:00 /usr/local/mozilla/mozilla-bi040   500  1423  1422   8   0
40848 34568 do_pol S   pts/2      0:00 /usr/local/mozilla/mozilla-bi040   500 
1462  1423   9   0 40848 34568 rt_sig S   pts/2      0:00
/usr/local/mozilla/mozilla-bi100     0  1464  1429  18   0  2772 1120 -      R 
  pts/4      0:00 ps alx

[root@mawali plugins]# gdb /usr/local/mozilla/mozilla-bin 1422
GNU gdb 19991004
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux"...(no debugging symbols found)...

/usr/local/mozilla/plugins/1422: No such file or directory.
Attaching to program: /usr/local/mozilla/mozilla-bin, Pid 1422
0x403cdad4 in __libc_read () from /lib/libc.so.6
(gdb) bt
#0  0x403cdad4 in __libc_read () from /lib/libc.so.6
#1  0x402bfd3c in ?? () from /lib/libpthread.so.0
#2  0x416757df in NP_Shutdown () from /usr/local/mozilla/plugins/librpnp.so
#3  0x416769b4 in NP_Shutdown () from /usr/local/mozilla/plugins/librpnp.so
#4  0x41676c83 in NP_Shutdown () from /usr/local/mozilla/plugins/librpnp.so
#5  0x4167600c in NP_Shutdown () from /usr/local/mozilla/plugins/librpnp.so
#6  0x416788b1 in NP_Shutdown () from /usr/local/mozilla/plugins/librpnp.so
#7  0x41674a8e in _IcePaAuthDataEntries () from
/usr/local/mozilla/plugins/librpnp.so
#8  0x415ccff1 in ns4xPluginInstance::Stop () from
/usr/local/mozilla/components/libgkplugin.so
#9  0x41949021 in nsObjectFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#10 0x41940ebe in nsLineBox::DeleteLineList () from
/usr/local/mozilla/components/libgklayout.so
#11 0x41907baa in nsBlockFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#12 0x41940ebe in nsLineBox::DeleteLineList () from
/usr/local/mozilla/components/libgklayout.so
#13 0x41907baa in nsBlockFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#14 0x41a65e76 in nsFrameList::DestroyFrames () from
/usr/local/mozilla/components/libgklayout.so
#15 0x41917fd6 in nsContainerFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#16 0x41a65e76 in nsFrameList::DestroyFrames () from
/usr/local/mozilla/components/libgklayout.so
#17 0x41917fd6 in nsContainerFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#18 0x41a42c61 in nsBoxFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#19 0x41a65e76 in nsFrameList::DestroyFrames () from
/usr/local/mozilla/components/libgklayout.so
#20 0x41917fd6 in nsContainerFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so

#21 0x41a42c61 in nsBoxFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#22 0x41979d0e in nsGfxScrollFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#23 0x41a65e76 in nsFrameList::DestroyFrames () from
/usr/local/mozilla/components/libgklayout.so
---Type <return> to continue, or q <return> to quit---
#24 0x41917fd6 in nsContainerFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#25 0x41977d32 in ViewportFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#26 0x41927b70 in FrameManager::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#27 0x41952bc6 in PresShell::~PresShell () from
/usr/local/mozilla/components/libgklayout.so
#28 0x419527b1 in PresShell::Release () from
/usr/local/mozilla/components/libgklayout.so
#29 0x413e9eda in nsCOMPtr<nsIPresShell>::~nsCOMPtr ()
   from /usr/local/mozilla/components/libgkcontent.so
#30 0x41374fe9 in DocumentViewerImpl::~DocumentViewerImpl ()
   from /usr/local/mozilla/components/libgkcontent.so
#31 0x41374c5c in DocumentViewerImpl::Release ()
   from /usr/local/mozilla/components/libgkcontent.so
#32 0x40f3e90b in nsCOMPtr<nsIContentViewer>::assign_assuming_AddRef ()
   from /usr/local/mozilla/components/libdocshell.so
#33 0x40f3a900 in nsCOMPtr<nsIContentViewer>::assign_with_AddRef ()
   from /usr/local/mozilla/components/libdocshell.so
#34 0x40f353f9 in nsCOMPtr<nsIContentViewer>::operator= ()
   from /usr/local/mozilla/components/libdocshell.so

#35 0x40f1b155 in nsDocShell::Destroy () from
/usr/local/mozilla/components/libdocshell.so
#36 0x40f2eb0a in nsWebShell::Destroy () from
/usr/local/mozilla/components/libdocshell.so
#37 0x4197d7d7 in nsHTMLFrameInnerFrame::~nsHTMLFrameInnerFrame ()
   from /usr/local/mozilla/components/libgklayout.so
#38 0x4191cc69 in nsFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#39 0x41a65e76 in nsFrameList::DestroyFrames () from
/usr/local/mozilla/components/libgklayout.so
#40 0x41917fd6 in nsContainerFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so
---Type <return> to continue, or q <return> to quit---
#41 0x41a65e76 in nsFrameList::DestroyFrames () from
/usr/local/mozilla/components/libgklayout.so
#42 0x41917fd6 in nsContainerFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#43 0x41940ebe in nsLineBox::DeleteLineList () from
/usr/local/mozilla/components/libgklayout.so
#44 0x41907baa in nsBlockFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#45 0x41a65e76 in nsFrameList::DestroyFrames () from
/usr/local/mozilla/components/libgklayout.so
#46 0x41917fd6 in nsContainerFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#47 0x41a65e76 in nsFrameList::DestroyFrames () from
/usr/local/mozilla/components/libgklayout.so
#48 0x41917fd6 in nsContainerFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#49 0x41977d32 in ViewportFrame::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#50 0x41927b70 in FrameManager::Destroy () from
/usr/local/mozilla/components/libgklayout.so
#51 0x41952bc6 in PresShell::~PresShell () from
/usr/local/mozilla/components/libgklayout.so
#52 0x419527b1 in PresShell::Release () from
/usr/local/mozilla/components/libgklayout.so
#53 0x413e9eda in nsCOMPtr<nsIPresShell>::~nsCOMPtr ()
   from /usr/local/mozilla/components/libgkcontent.so
#54 0x41374fe9 in DocumentViewerImpl::~DocumentViewerImpl ()
   from /usr/local/mozilla/components/libgkcontent.so

#55 0x41374c5c in DocumentViewerImpl::Release ()
   from /usr/local/mozilla/components/libgkcontent.so
#56 0x40f3e90b in nsCOMPtr<nsIContentViewer>::assign_assuming_AddRef ()
   from /usr/local/mozilla/components/libdocshell.so
#57 0x40f3a900 in nsCOMPtr<nsIContentViewer>::assign_with_AddRef ()
   from /usr/local/mozilla/components/libdocshell.so
#58 0x40f353f9 in nsCOMPtr<nsIContentViewer>::operator= ()
   from /usr/local/mozilla/components/libdocshell.so
---Type <return> to continue, or q <return> to quit---
#59 0x40f2071b in nsDocShell::SetupNewViewer () from
/usr/local/mozilla/components/libdocshell.so
#60 0x40f294d3 in nsWebShell::SetupNewViewer () from
/usr/local/mozilla/components/libdocshell.so
#61 0x40f1e4fb in nsDocShell::Embed () from
/usr/local/mozilla/components/libdocshell.so
#62 0x40f296b1 in nsWebShell::Embed () from
/usr/local/mozilla/components/libdocshell.so
#63 0x40f1f48c in nsDocShell::CreateContentViewer ()
   from /usr/local/mozilla/components/libdocshell.so
#64 0x40f2f890 in nsDSURIContentListener::DoContent ()
   from /usr/local/mozilla/components/libdocshell.so
#65 0x40e41c24 in nsDocumentOpenInfo::DispatchContent ()
   from /usr/local/mozilla/components/liburiloader.so
#66 0x40e413e5 in nsDocumentOpenInfo::OnStartRequest ()
   from /usr/local/mozilla/components/liburiloader.so
#67 0x40c909d2 in nsHTTPFinalListener::OnStartRequest ()
   from /usr/local/mozilla/components/libnecko.so
#68 0x40c8d726 in nsHTTPCacheListener::OnStartRequest ()

#69 0x40c67ef0 in nsDiskCacheRecordChannel::OnStartRequest ()
   from /usr/local/mozilla/components/libnecko.so
#70 0x40c28d98 in nsOnStartRequestEvent::HandleEvent ()
   from /usr/local/mozilla/components/libnecko.so
#71 0x40c28c1f in nsStreamObserverEvent::HandlePLEvent ()
   from /usr/local/mozilla/components/libnecko.so
#72 0x40118418 in PL_HandleEvent () from /usr/local/mozilla/libxpcom.so
#73 0x4011822d in PL_ProcessPendingEvents () from /usr/local/mozilla/libxpcom.so
---Type <return> to continue, or q <return> to quit---
#74 0x4011a3ca in nsEventQueueImpl::ProcessPendingEvents () from
/usr/local/mozilla/libxpcom.so
#75 0x407336d4 in nsAppShell::SetDispatchListener ()
   from /usr/local/mozilla/components/libwidget_gtk.so
#76 0x407332b3 in keysym2ucs () from /usr/local/mozilla/components/libwidget_gtk.so
#77 0x408ecaca in g_io_unix_dispatch () from /usr/lib/libglib-1.2.so.0
#78 0x408ee186 in g_main_dispatch () from /usr/lib/libglib-1.2.so.0
#79 0x408ee751 in g_main_iterate () from /usr/lib/libglib-1.2.so.0
#80 0x408ee8f1 in g_main_run () from /usr/lib/libglib-1.2.so.0
#81 0x408168e9 in gtk_main () from /usr/lib/libgtk-1.2.so.0
#82 0x40733da5 in nsAppShell::Run () from
/usr/local/mozilla/components/libwidget_gtk.so
#83 0x404e2855 in nsAppShellService::Run () from
/usr/local/mozilla/components/libnsappshell.so
#84 0x8053e6f in JS_PushArguments ()
#85 0x8054aef in JS_PushArguments ()
#86 0x4033f9cb in __libc_start_main (main=0x80548ec <JS_PushArguments+17736>,
argc=1,
    argv=0xbffffa0c, init=0x804ef84 <_init>, fini=0x805f4cc <_fini>,   
rtld_fini=0x4000ae60 <_dl_fini>, stack_end=0xbffffa04) at
../sysdeps/generic/libc-start.c:92
(gdb) quit




Marking NEW.
Status: UNCONFIRMED → NEW
Ever confirmed: true
Reporter, Shrirang, would you please try it with the recent build and see if it 
still happens?
Priority: -- → P2
Target Milestone: --- → mozilla1.0
Cogratulations, the bug lookes to be squashed. I downloaded
 mozilla-gcc295-i686-pc-linux-gnu.tar.gz from 2001042101 .
None of the symptoms remain except a couple of undeads below:

There is only one small problem, there are zombies of realplay left
(no waitpid() ?)

[rathore@mawali rathore]$ ps -a -o pid,ppid,stat,wchan,comm

 1147  1143 S    wait4  bash
 1203  1147 S    wait4  run-mozilla.sh
 1212  1203 S    do_pol mozilla-bin
 1213  1212 S    do_pol mozilla-bin
 1214  1213 S    do_pol mozilla-bin
 1215  1213 S    rt_sig mozilla-bin
 1222  1212 Z    do_exi realplay <defunct>
 1232  1212 Z    do_exi realplay <defunct>
 1246  1212 Z    do_exi realplay <defunct>
 1296  1213 S    rt_sig mozilla-bin






marking fixed absed on reporter's comment. I do not have realplayer working on 
my linux box :(.
Status: NEW → RESOLVED
Closed: 23 years ago
Resolution: --- → FIXED
v
Status: RESOLVED → VERIFIED
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.